Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6DDD4952811D11F191E90EC5CE1D38B0.roa
File: 6DDD4952811D11F191E90EC5CE1D38B0.roa (raw, json)
Hash identifier: Z0gdKLcv/Np0T+zI+OdhIw/q478O4+/X+vm1dR1PeeQ=
Subject key identifier: 5B:07:1F:EB:94:C1:CB:37:7A:BD:C7:DE:04:84:7C:B7:A9:85:0C:A5
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CF5
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6DDD4952811D11F191E90EC5CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:51:23 +0000
ROA not before: Thu 16 Jul 2026 13:51:19 +0000
ROA not after: Wed 31 Dec 2036 13:51:19 +0000
asID: 13347
IP address blocks: 165.49.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3317 (0xcf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:51:19 2026 GMT
Not After : Dec 31 13:51:19 2036 GMT
Subject: CN=6a58e1da-6dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:c5:b4:41:c8:81:0a:77:c8:d2:ed:ad:de:
8f:96:8f:d0:9f:bf:9d:1f:fb:06:25:b6:c2:c4:d5:
a6:d8:ff:f0:c7:0e:4f:0d:50:8a:c5:16:88:23:66:
05:2d:8e:f7:b8:e3:a3:fe:c3:be:58:cf:3c:c1:d0:
9b:b5:7a:97:29:68:c8:ec:c1:17:ed:27:9b:36:94:
22:27:18:df:5a:be:d4:35:61:d5:19:6d:0f:b4:15:
cb:71:e8:2f:f1:67:fe:f4:d6:da:db:fc:74:9c:c9:
d0:c5:0b:e8:d3:aa:b1:e0:2b:cb:c9:67:27:3d:88:
59:b0:96:16:89:f0:df:f6:32:74:fa:44:58:d3:af:
5b:bf:f0:e3:78:17:92:56:2f:4c:b5:85:6f:fd:e0:
8b:b6:0a:56:6d:c4:c0:2d:21:89:a9:c0:3e:2a:de:
81:4d:be:40:57:8c:74:ab:b8:13:65:13:e5:25:d0:
9d:9c:a6:9f:b6:8b:eb:bb:91:c8:b0:19:f7:09:e5:
6e:45:63:d7:77:5e:36:4e:64:09:ac:f1:59:38:cd:
8d:9e:4b:c3:95:39:a9:6c:0f:9b:4d:05:9e:a5:ee:
89:0c:b6:42:40:9f:34:1a:01:31:e5:61:c2:b8:0f:
d0:9f:bf:45:41:d2:cc:01:d9:de:9b:f9:c4:0e:e2:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:1F:EB:94:C1:CB:37:7A:BD:C7:DE:04:84:7C:B7:A9:85:0C:A5
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6DDD4952811D11F191E90EC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:24:2b:f7:3b:4e:7d:46:94:a5:5e:3a:8d:6e:43:2d:f6:32:
4f:46:0f:8d:b4:90:4f:82:96:69:55:31:56:9d:22:88:0e:ee:
2d:03:63:7b:eb:3f:1f:5e:33:87:50:b9:f6:8f:35:05:0a:57:
49:51:1b:8b:17:79:b4:76:ef:92:08:7a:9b:c1:17:31:2e:c1:
59:ea:52:16:2d:75:5e:7a:91:b1:fc:6c:2b:03:5b:50:c8:c3:
9b:0c:21:49:ef:46:47:5d:32:91:1b:c2:1a:6d:ef:d0:67:0f:
c6:48:74:ec:79:fc:af:ba:ed:c6:cd:89:a2:71:ea:55:59:18:
c8:ba:ab:ff:7d:57:1c:b8:18:b3:40:15:8e:d1:c5:c1:56:83:
b1:e5:bd:4b:4d:f5:fc:99:36:5d:d6:31:96:a9:2f:5f:31:3c:
33:48:75:a6:37:69:d2:70:3f:fd:d8:9f:33:ba:fc:01:96:47:
20:35:45:72:ff:02:45:a0:ea:02:9c:d1:0f:00:15:54:1c:dc:
d6:cb:50:7a:45:62:8a:6c:bf:f4:4e:eb:34:f9:8f:06:69:fc:
ca:06:14:62:d0:fb:96:33:e2:59:16:c3:43:3e:3e:3d:b5:c3:
c6:b7:cd:2b:02:24:79:d0:d1:1d:8a:17:29:54:13:e2:da:5b:
7a:7a:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:04 2026 by rpki-client