Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/58292096811C11F1A1FAA9BCCE1D38B0.roa
File: 58292096811C11F1A1FAA9BCCE1D38B0.roa (raw, json)
Hash identifier: W5c+X5oFGuPLOy01Z1k0FVjMx6SQuyG3GYa7Atedj4U=
Subject key identifier: 81:00:78:5D:B4:C1:57:87:F4:C9:DB:B1:86:3B:0E:64:CF:5D:93:BE
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CCB
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/58292096811C11F1A1FAA9BCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:43:37 +0000
ROA not before: Thu 16 Jul 2026 13:43:33 +0000
ROA not after: Wed 31 Dec 2036 13:43:33 +0000
asID: 7029
IP address blocks: 165.49.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3275 (0xccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:43:33 2026 GMT
Not After : Dec 31 13:43:33 2036 GMT
Subject: CN=6a58e008-09e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:c3:15:dd:73:27:27:e5:e0:83:85:0a:16:
ae:e1:8c:dd:4a:78:b5:be:52:99:86:b6:00:22:f6:
34:5a:53:db:7f:78:9f:4f:1e:44:da:a6:a3:7f:8d:
a5:69:d5:dd:59:bb:e6:c5:29:66:2e:c4:65:5a:fa:
79:fa:73:59:9a:a2:fd:e7:15:6f:d0:98:b7:0c:3c:
9f:2f:8f:51:6f:6d:0a:2f:4a:81:19:0a:f1:0c:a1:
ef:13:f8:81:35:cb:2d:a6:7d:57:fb:6b:ff:42:38:
bf:06:2c:cf:a6:0d:85:ba:dd:aa:35:80:b3:66:a9:
e2:f3:fa:4e:d7:d4:25:4e:c0:25:7f:7a:7a:a6:0c:
c9:86:75:ff:b0:43:76:35:d9:8a:f5:1a:d9:9a:d4:
20:99:97:3f:6e:d4:e3:d7:74:df:a7:ec:f9:b9:41:
50:9b:e0:c7:c0:2d:bc:94:f2:23:f3:eb:18:86:7d:
fb:4d:84:e4:48:96:2f:cb:47:a3:a1:dc:e2:fc:76:
ab:8e:e0:4e:ee:cb:88:e8:41:d3:d2:af:52:ed:a2:
f6:c6:1d:ca:24:81:ad:3c:3d:87:df:ac:06:98:7a:
e9:ed:4f:bc:d9:a8:7a:33:2a:c1:99:16:ec:f8:5c:
05:37:6f:3b:01:45:56:2d:88:ab:16:09:30:7c:e3:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:78:5D:B4:C1:57:87:F4:C9:DB:B1:86:3B:0E:64:CF:5D:93:BE
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/58292096811C11F1A1FAA9BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ec:d7:1d:f8:c8:fb:2b:e7:5a:d5:b1:59:08:29:b7:b7:b8:
23:ff:3a:3d:06:14:84:2b:1d:9d:81:93:75:ce:f1:4a:2d:87:
53:cc:99:1f:87:22:3a:80:bf:ee:51:c6:e8:82:72:93:6d:0b:
39:43:77:1c:02:25:92:35:57:ce:9e:47:eb:8a:d4:61:d9:42:
bb:df:39:0a:1e:4b:25:27:7d:d4:cd:65:ce:f4:38:92:d1:df:
6b:af:0b:b6:90:31:45:7f:a5:36:dd:ba:d0:a9:40:f4:66:d8:
ea:25:aa:b0:1c:e4:14:99:d1:bd:73:94:78:e2:d8:89:da:de:
eb:1e:c6:b6:1b:5f:fd:76:bf:ad:6e:4e:39:dd:e5:c6:fc:e5:
3f:6c:fb:ec:a2:4d:50:19:28:50:58:de:b6:70:c3:48:2e:67:
08:09:60:90:a8:ec:68:f3:bc:c6:90:10:db:87:45:e4:0e:c6:
4f:9f:57:c4:2a:25:ed:63:62:d9:0e:fc:e6:dd:f4:8c:ad:c1:
8b:5f:96:d3:a1:0a:a1:55:41:00:f9:e4:dd:1b:43:87:9e:a1:
a4:59:95:13:b4:02:34:23:d1:ba:1c:75:c8:b0:02:45:e3:52:
8d:c9:58:c3:66:09:fa:6f:a6:63:cf:45:e3:99:30:01:c2:77:
fe:8e:bf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:43 2026 by rpki-client