Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4A233E04811D11F1B43F7FC1CE1D38B0.roa
File: 4A233E04811D11F1B43F7FC1CE1D38B0.roa (raw, json)
Hash identifier: SyMwaO4f3+p4ou+X5B4igIHnY3wzTWA4LYgnw9RRlW0=
Subject key identifier: 59:A0:03:93:51:83:36:E7:BE:39:46:1C:49:9C:32:7B:57:D7:B1:9E
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CF1
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4A233E04811D11F1B43F7FC1CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:50:23 +0000
ROA not before: Thu 16 Jul 2026 13:50:19 +0000
ROA not after: Wed 31 Dec 2036 13:50:19 +0000
asID: 13347
IP address blocks: 165.49.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3313 (0xcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:50:19 2026 GMT
Not After : Dec 31 13:50:19 2036 GMT
Subject: CN=6a58e19e-4830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:da:b0:7d:e7:38:08:33:99:24:35:51:af:
74:d0:ea:db:ac:73:4d:0f:56:ac:7a:e0:6c:41:63:
98:b8:40:74:b1:d4:32:5f:f0:63:3d:b9:cd:8d:98:
73:90:ce:6b:57:08:44:c3:bf:0a:c5:53:2b:d5:8c:
b8:db:79:e6:f4:ae:fe:80:2e:b7:87:b5:ed:86:1b:
00:64:24:da:d5:10:a4:f6:49:d1:8e:35:70:8e:37:
22:38:ce:2d:9d:c9:54:bb:9d:49:6d:f8:e9:50:4a:
d7:64:6f:c2:14:b0:0e:9a:74:06:f3:66:07:30:e2:
86:f1:f5:f3:ca:14:60:5a:2e:21:ff:56:db:3a:28:
2c:9a:9a:e4:01:11:f8:b1:23:12:e1:40:db:01:6e:
2b:e6:af:ce:54:1d:9c:2e:d1:58:bd:70:9e:bf:e1:
f3:9f:da:8e:af:4e:00:13:22:c7:5c:b6:7a:bb:42:
51:e5:18:aa:88:d4:38:6e:e0:40:9e:3d:18:1a:c8:
af:2a:06:3e:6b:17:b5:49:ca:a6:4c:4e:fe:f4:16:
af:9c:64:2b:ec:c1:9a:74:86:4b:1f:10:8a:0e:67:
50:08:f5:49:69:a7:e1:84:e9:3f:4b:04:b0:37:67:
41:d0:6d:56:66:0f:8b:d6:ea:9f:4b:a9:24:c3:d7:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:03:93:51:83:36:E7:BE:39:46:1C:49:9C:32:7B:57:D7:B1:9E
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4A233E04811D11F1B43F7FC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.96.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b9:43:b7:26:e2:04:ec:74:ab:c4:37:e2:d9:9d:5c:66:1a:
62:5b:d7:bc:bf:c8:f8:06:0d:28:4c:68:82:95:90:b8:7b:04:
bc:62:d4:cf:e1:cb:4b:f5:1d:7a:8b:04:07:a6:5c:0f:c5:70:
02:ce:0b:ce:91:b1:bb:a8:21:09:a0:03:1c:11:74:c2:a4:f9:
05:e2:a6:d2:b7:49:d7:b9:af:26:bb:01:7e:9e:da:09:f1:76:
ca:c8:44:5c:f2:63:87:da:2d:08:17:f4:9b:22:1d:37:5f:7b:
ff:fc:e8:77:f1:d5:3c:5c:bf:01:96:32:b7:14:79:74:31:c1:
44:7c:13:38:55:8d:ef:b4:62:7b:4c:2e:9d:00:37:10:06:00:
1b:5c:a4:18:97:cb:62:1e:b1:6e:3d:50:02:ed:52:ee:aa:69:
b2:b9:ce:00:9e:d0:3b:7a:c0:85:69:4d:67:73:1b:7c:fd:86:
fe:4c:c7:31:10:7d:ee:48:d1:77:7c:24:b5:76:5a:30:af:e4:
97:9d:a1:bc:a9:a2:00:3a:5e:a7:64:9e:be:eb:2c:45:1d:46:
b5:60:f1:96:94:57:0c:15:d8:c7:43:47:4a:52:20:13:db:01:
81:2d:ae:dd:61:56:de:8a:c0:35:d8:b6:57:35:42:7c:bf:b9:
2e:78:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:03 2026 by rpki-client