Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6A551CEC802D11F1988148CBCE1D38B0.roa
File: 6A551CEC802D11F1988148CBCE1D38B0.roa (raw, json)
Hash identifier: 4894DYgdsiX6kVHAIh2DusdtKRZAVYU5phe4lGNXwZA=
Subject key identifier: CE:E3:49:DD:0C:DE:AE:B7:5F:94:95:42:22:FD:A2:B1:21:8E:AE:A8
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C95
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6A551CEC802D11F1988148CBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:13:17 +0000
ROA not before: Wed 15 Jul 2026 09:13:13 +0000
ROA not after: Wed 31 Dec 2036 09:13:13 +0000
asID: 12083
IP address blocks: 165.49.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3221 (0xc95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:13:13 2026 GMT
Not After : Dec 31 09:13:13 2036 GMT
Subject: CN=6a574f2d-1c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:5a:1a:a5:4b:87:f5:6d:4f:2e:10:de:a0:
52:f6:70:4f:72:5c:25:32:6e:2f:eb:29:0e:d7:03:
95:31:b4:56:f5:1f:c1:54:72:68:d5:1d:ba:5a:c0:
85:f8:8f:dc:95:85:b5:0b:10:6f:93:60:c8:3d:12:
d1:37:aa:0a:71:25:7a:07:f7:1d:3b:b3:86:a7:4e:
fb:fc:5a:a2:a6:af:6e:f3:18:ab:b8:e1:13:20:3a:
67:43:4b:51:a4:6c:0b:02:a2:c2:1e:f7:a1:3b:c7:
42:e0:9e:a2:70:46:30:5b:54:c1:7e:4c:66:e7:0c:
aa:21:df:ed:38:cc:e1:4e:69:23:b4:16:f0:34:02:
98:fa:f2:4c:36:07:49:28:ab:ff:10:96:a1:16:f3:
bf:e8:0d:fb:5f:74:80:8a:3e:e5:c5:73:a3:cc:99:
db:c9:68:02:e4:1f:e0:41:56:07:15:c1:92:f9:b9:
42:29:2c:1a:65:48:6f:c2:77:a8:36:b8:d8:0d:a9:
3e:57:c5:f0:61:c2:5d:77:a1:ee:c3:14:ba:ad:48:
f8:57:91:39:a2:79:03:0c:a4:ab:80:c6:b4:db:3b:
76:d4:09:9b:ce:d7:bc:d5:47:36:9c:1a:72:19:a8:
fb:65:8d:27:b1:df:48:e1:30:e6:0a:ef:39:35:4e:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:49:DD:0C:DE:AE:B7:5F:94:95:42:22:FD:A2:B1:21:8E:AE:A8
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6A551CEC802D11F1988148CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:81:88:2d:f5:7c:3e:d8:1a:de:80:c6:d4:b0:17:c8:76:e1:
d7:f2:39:55:5d:eb:ac:56:b0:af:61:e8:48:19:ba:b3:cc:b0:
0b:e4:fe:36:8e:2e:b7:5a:7f:7f:85:70:95:64:06:e8:80:05:
f3:24:c0:1c:e2:78:49:29:83:f2:2c:ca:ee:38:a0:1c:e3:00:
bb:bb:08:a9:43:03:33:80:89:d8:73:88:17:67:00:f2:f7:ca:
34:ee:5b:f0:dd:69:81:24:25:61:1b:71:f6:1c:e9:d9:11:f2:
2e:c7:9e:62:9e:4e:76:02:d8:a4:41:e3:f1:e8:49:1e:0f:1d:
41:35:e8:d0:28:4e:fb:b3:56:32:e0:76:27:31:cf:ee:d8:f6:
34:5a:39:d3:7d:a3:78:f5:df:89:e2:6f:b5:cc:0a:a3:4f:4e:
1b:59:9f:4a:9b:97:79:f0:bb:51:af:d3:b5:48:70:6a:2b:31:
fc:b7:32:6e:71:da:0c:70:55:e6:42:3d:5f:c5:0c:70:31:5d:
ce:88:ca:ad:96:ae:53:a8:ff:de:eb:17:7a:a4:ba:11:47:1c:
b8:46:ff:05:b7:91:38:20:f4:15:c6:b3:e9:56:89:24:7a:72:
89:82:fb:b6:ea:76:5a:e2:84:5a:f0:a2:7f:42:b3:b7:a1:48:
ad:cc:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client