Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/644C850C802C11F1878456C3CE1D38B0.roa
File: 644C850C802C11F1878456C3CE1D38B0.roa (raw, json)
Hash identifier: x00yaqZK+EXbaEnINuKyyfO8wxhHExBO4khU1BZjNNE=
Subject key identifier: 49:F9:28:31:87:B6:20:DC:DD:E2:BD:22:14:78:1F:EC:5F:AA:32:20
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C77
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/644C850C802C11F1878456C3CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:05:58 +0000
ROA not before: Wed 15 Jul 2026 09:05:54 +0000
ROA not after: Wed 31 Dec 2036 09:05:54 +0000
asID: 12083
IP address blocks: 165.49.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:05:54 2026 GMT
Not After : Dec 31 09:05:54 2036 GMT
Subject: CN=6a574d76-04a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:05:b3:9a:29:81:4c:9c:b7:72:88:7b:fb:
47:62:a7:48:8e:f1:7c:2d:fd:52:04:a5:2f:47:31:
85:03:82:95:50:e6:c1:0e:d3:f7:6a:0b:35:dc:df:
98:aa:9d:b7:2f:03:ff:2d:7c:cd:2c:c9:ac:8f:f9:
ca:62:d7:51:32:d6:04:b1:52:d2:07:a7:97:97:8b:
94:00:53:c2:1b:78:2e:79:64:1a:8d:36:36:9f:4e:
ea:0a:e2:3f:df:09:00:27:2c:48:f2:f1:02:30:02:
57:8a:42:0d:29:a2:4e:27:64:bb:35:45:62:b5:91:
27:7d:35:20:9f:71:18:eb:f5:e0:3a:eb:03:ad:d7:
c6:16:44:23:2b:2b:4e:35:f9:ad:be:c4:93:b7:65:
22:ca:72:32:8b:12:94:37:e3:04:8c:93:b2:29:5a:
12:61:34:cc:82:b9:f1:ff:d8:92:c4:32:f5:55:94:
44:f1:f4:d9:77:91:45:f3:e7:1b:33:9a:82:9d:10:
4c:36:86:84:2f:ec:43:ee:29:c0:08:47:79:d2:a0:
58:ca:62:34:fe:15:91:ad:0e:81:ae:e5:1a:8c:2e:
d6:6c:17:00:67:8a:fd:3e:0a:c1:f3:4b:a1:35:48:
bf:29:e3:65:11:f9:e5:c4:6b:b9:a7:5c:ee:b0:de:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:28:31:87:B6:20:DC:DD:E2:BD:22:14:78:1F:EC:5F:AA:32:20
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/644C850C802C11F1878456C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:34:8d:7b:50:29:f3:8f:84:da:06:73:45:fd:bb:d0:5a:b6:
f8:75:c7:22:9a:f6:e8:67:fb:92:49:bb:3f:3f:3e:40:b6:f2:
2b:36:18:cf:a6:67:9b:63:1d:1e:bf:11:64:b3:b8:08:29:b9:
e3:81:1c:6d:b2:f2:6b:9e:cb:b9:16:90:28:26:cc:1b:7f:a0:
f5:06:e0:32:32:53:46:7c:68:26:e8:88:04:cc:87:4c:42:46:
1f:a2:b6:1d:88:49:a8:8c:87:47:3c:bf:b7:06:27:16:56:0b:
da:6f:0f:33:63:54:4f:84:c9:b3:4f:4a:1f:92:18:b6:f8:97:
93:79:8a:fb:5c:88:c9:fd:9e:92:53:50:18:e2:c9:45:34:8d:
8d:61:47:81:49:64:ac:2a:b5:dc:bc:73:06:ec:7c:d8:75:be:
1b:80:76:90:27:cf:ca:89:3f:46:5f:6f:09:59:36:43:d1:33:
4a:ae:cc:eb:88:5d:b7:02:40:6c:6d:18:90:0e:aa:c6:be:11:
b4:df:c0:22:b5:30:4b:d9:63:24:bf:9f:17:b5:e5:32:4d:62:
84:14:9d:48:f6:a3:49:cd:a9:1b:66:1a:81:0d:5d:97:99:63:
f7:b3:7f:cf:18:9a:9c:04:da:7f:5e:e0:05:f1:75:23:89:c7:
1c:fd:47:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client