Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5ABC4B94802C11F1A03D51C3CE1D38B0.roa
File: 5ABC4B94802C11F1A03D51C3CE1D38B0.roa (raw, json)
Hash identifier: p6EkdR3oJBv0J5pMjkM6DTxJ5CnmKkPfzZc1YeHJk9c=
Subject key identifier: B9:F6:8B:3C:E1:3C:E4:E4:1D:90:54:D3:59:3F:87:B9:7E:04:0C:58
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C75
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5ABC4B94802C11F1A03D51C3CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:05:42 +0000
ROA not before: Wed 15 Jul 2026 09:05:38 +0000
ROA not after: Wed 31 Dec 2036 09:05:38 +0000
asID: 12083
IP address blocks: 165.49.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:05:38 2026 GMT
Not After : Dec 31 09:05:38 2036 GMT
Subject: CN=6a574d66-dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:ff:78:3b:63:d6:ec:7c:4f:eb:4d:db:04:
2d:39:8e:cf:a1:fa:a7:a4:70:e6:72:48:8f:56:43:
9e:c0:c6:17:f8:f9:ca:a0:5e:4e:6a:94:20:b2:4e:
c0:49:ea:b4:92:fd:00:94:da:cd:02:87:d7:8e:85:
24:0d:7d:fa:0c:c3:f8:ed:88:c6:dd:5d:45:db:df:
83:e1:03:3f:2f:c8:c2:97:3b:77:a9:5f:c1:bd:f7:
df:a4:d3:dc:64:db:f0:88:96:4f:bc:9b:09:6f:1f:
d1:f9:d5:13:d2:8a:c1:1f:70:94:f3:4b:cd:4e:fa:
ba:91:bb:76:81:9c:be:40:63:fa:74:40:14:98:f1:
b9:50:43:a0:36:7b:9b:a9:e4:ab:ba:de:60:fb:95:
fd:ae:af:b8:1f:a2:85:9b:ed:e7:eb:6f:aa:34:a6:
8d:47:d9:f9:fb:f7:94:97:68:c7:55:75:20:ec:85:
06:b6:36:77:a0:62:ca:4f:17:87:e3:ff:3c:3f:8b:
21:99:c1:55:79:5b:bc:fc:17:63:2e:78:d0:58:12:
f2:e2:6e:e0:a9:11:46:a6:50:5b:b7:48:d9:d8:8f:
2e:a2:cb:7b:31:47:40:59:4a:03:76:45:91:bc:e7:
92:67:67:82:3f:45:10:fc:cf:f1:78:f8:e5:70:8a:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:8B:3C:E1:3C:E4:E4:1D:90:54:D3:59:3F:87:B9:7E:04:0C:58
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5ABC4B94802C11F1A03D51C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.84.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4f:12:0a:c5:64:86:ff:62:83:56:02:43:4b:9b:d0:6a:3f:
e3:94:f0:0c:45:72:a1:a1:12:4b:59:77:47:34:d9:82:a2:38:
af:b7:27:c3:b8:c1:77:c5:19:22:c1:03:9c:c8:32:be:78:0a:
cd:bd:0a:d4:a1:8a:54:47:f7:71:d8:9e:bd:aa:64:4f:97:39:
b7:fe:4f:8a:5b:36:df:50:35:7f:7e:c2:3b:34:b9:66:43:ff:
75:3f:90:d5:d0:d6:07:fa:32:41:56:2d:97:80:4c:24:5e:bf:
e2:50:da:d6:48:36:ff:21:0a:b7:b0:63:35:34:06:db:b4:7c:
cf:37:c6:52:1d:21:95:d9:17:e5:29:50:6e:0a:d7:e5:99:19:
85:3b:1e:82:0e:c9:94:b8:b9:b2:b8:8b:47:5a:0f:83:f0:54:
13:bd:ef:bb:52:0a:03:4a:e7:11:70:82:ab:8a:06:28:dc:80:
90:dc:aa:01:b0:87:7f:62:4c:58:ec:8b:b9:cd:56:31:a2:2f:
5a:a9:8d:f8:d9:61:bc:fc:8d:30:87:e5:dd:2b:6b:a2:13:e3:
f6:1f:91:5f:f8:68:43:95:1f:92:ab:c8:cf:6c:39:77:d7:f6:
47:8e:11:ed:0a:a2:be:0a:4b:bf:17:c5:f6:dd:4b:64:97:5b:
70:8c:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:11 2026 by rpki-client