Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6DC22740802C11F1B835E2C6CE1D38B0.roa
File: 6DC22740802C11F1B835E2C6CE1D38B0.roa (raw, json)
Hash identifier: cW/4h+AH53YLRK52lZrbMR8jkvk5Qm0lHySO+/4POCY=
Subject key identifier: FE:BF:68:36:94:44:54:C0:9E:D8:A5:B1:89:0F:29:92:11:36:B2:C6
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C79
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6DC22740802C11F1B835E2C6CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:06:14 +0000
ROA not before: Wed 15 Jul 2026 09:06:10 +0000
ROA not after: Wed 31 Dec 2036 09:06:10 +0000
asID: 12083
IP address blocks: 165.49.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:06:10 2026 GMT
Not After : Dec 31 09:06:10 2036 GMT
Subject: CN=6a574d86-428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:8a:8a:01:23:9a:d9:07:6e:44:d6:3f:4e:
92:30:46:d8:5d:c6:21:79:d1:eb:63:31:fb:a3:5c:
a5:3d:6d:13:2f:66:84:bc:31:73:ae:95:4d:d0:6e:
48:5a:20:80:c8:12:ad:d8:15:7a:5b:28:f9:1f:d9:
dd:69:4d:b4:ff:a2:32:6d:60:17:68:f6:3b:70:85:
ff:93:29:48:69:39:54:83:2a:11:d1:d6:17:2a:f8:
a7:5c:96:fe:b8:ca:9f:83:b5:cb:f8:42:f8:a9:ec:
63:b6:18:65:18:6f:30:c9:67:db:f3:12:a9:70:2b:
e8:06:a3:41:cf:be:5c:1f:a0:2e:61:c6:64:e4:15:
cb:eb:4b:00:a1:c9:78:f1:d8:b2:2a:bc:94:bc:5f:
61:33:06:c0:ef:8d:ad:2b:1b:eb:a5:fe:d7:86:5b:
ba:a2:a3:11:7e:13:10:20:f0:de:2b:da:5b:15:49:
c6:13:04:a6:b4:3c:73:f8:da:a4:62:76:ad:84:13:
d2:fa:76:f5:87:d5:97:52:f2:9b:a4:37:c3:2c:e8:
0d:96:e1:3b:c2:ba:fd:87:6c:cc:da:2e:dd:2f:5d:
29:06:3b:a9:4c:b9:15:0b:a2:99:ad:05:ca:2d:59:
29:a4:d2:0b:0c:a6:55:a1:83:aa:22:74:76:7a:d3:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:68:36:94:44:54:C0:9E:D8:A5:B1:89:0F:29:92:11:36:B2:C6
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6DC22740802C11F1B835E2C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:52:23:37:d5:fc:06:4f:c1:b1:b9:7e:0e:e1:42:e4:38:d7:
3c:06:86:32:c9:fb:fe:71:25:d6:28:ae:ad:8b:ff:40:b6:4a:
75:1c:30:44:7c:09:75:18:82:b1:b7:1c:5c:a9:b1:93:8c:90:
45:4e:94:2b:17:7f:7a:66:12:c8:92:04:97:ed:ba:af:d7:ef:
7b:60:a7:69:60:9c:5c:63:b6:95:21:9b:a1:bd:ed:ab:b8:31:
ed:ee:14:59:22:71:56:a4:f2:77:80:17:35:04:d9:0a:f1:74:
e0:3c:0a:4c:8d:05:5c:88:89:90:f6:70:a5:1b:ae:b0:91:2d:
5e:b9:9a:37:bb:df:a3:2c:e2:fe:58:9d:56:cf:e0:45:ed:3b:
f4:83:22:f5:44:73:80:39:b3:39:e4:94:dc:0b:74:af:d9:cc:
86:59:f7:dc:28:30:a6:9f:2a:18:68:a4:00:60:da:d3:1b:fe:
ef:1a:bb:98:62:dc:98:69:f2:eb:68:40:c3:a4:49:38:e9:78:
49:8b:db:94:70:b1:65:68:1e:31:b0:62:bc:af:89:1a:7b:f4:
39:33:01:58:f3:2a:03:88:5e:02:3f:8e:f2:1f:ed:98:fb:8d:
91:0f:dd:94:49:66:74:5a:44:b4:34:0a:8b:b0:32:2f:59:da:
9f:d2:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:11 2026 by rpki-client