Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6F9089C2650611F1A5846FB0CE1D38B0.roa
File: 6F9089C2650611F1A5846FB0CE1D38B0.roa (raw, json)
Hash identifier: HVSyTHcbWLEKVRbwRIan0BnkcIk2UfFXP2e0yX0pm2M=
Subject key identifier: AD:23:83:18:CF:A5:78:6C:52:4B:F0:B0:37:8F:80:14:93:6F:35:C2
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C20
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6F9089C2650611F1A5846FB0CE1D38B0.roa
Signing time: Wed 10 Jun 2026 19:56:14 +0000
ROA not before: Wed 10 Jun 2026 19:56:09 +0000
ROA not after: Wed 31 Dec 2036 19:56:09 +0000
asID: 216475
IP address blocks: 165.49.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 10 19:56:09 2026 GMT
Not After : Dec 31 19:56:09 2036 GMT
Subject: CN=6a29c15e-ddae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:c7:32:ad:0f:6d:0b:0c:69:dc:3f:c2:a7:
36:5e:69:9f:aa:3e:09:54:c6:6f:52:bf:56:7a:eb:
c4:77:60:27:6f:da:ef:2e:99:e2:8e:47:96:77:8e:
c6:7e:6d:11:8b:b7:ef:82:bd:17:be:25:80:cc:28:
df:27:85:5d:59:fc:90:e8:ae:71:30:54:36:18:b3:
5a:3f:bd:1d:87:c1:9f:8f:32:0b:4d:b8:3c:f0:10:
6e:c5:37:cc:39:00:2b:e6:64:fb:86:7b:67:61:3f:
54:bd:97:b5:79:58:43:42:d4:af:28:0d:5e:60:88:
1a:90:fc:11:26:cd:7a:df:33:77:90:20:a2:40:6b:
9b:5f:c0:d9:e2:0f:92:e7:c5:bd:eb:75:47:fb:12:
30:76:db:e3:3f:3c:42:d6:4e:dd:78:c5:a9:25:eb:
d4:38:d8:bd:4f:2e:b6:4b:3e:ca:5c:ed:8a:4a:30:
d9:64:8d:67:ec:6a:a5:98:5d:0f:d2:2d:54:1b:32:
d6:31:5c:09:e0:ed:e3:1a:72:b5:17:01:1b:5c:25:
cf:d5:77:d7:86:d9:ae:16:51:af:f4:a8:71:b2:66:
42:a9:7e:d0:06:04:41:97:d8:ae:74:28:08:e7:1c:
6c:14:e4:02:00:da:84:5f:6c:9f:ed:58:a5:4d:70:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:83:18:CF:A5:78:6C:52:4B:F0:B0:37:8F:80:14:93:6F:35:C2
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6F9089C2650611F1A5846FB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.83.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:55:da:98:79:40:ce:fa:ff:f7:2c:8c:5c:cf:6d:24:29:
ee:c6:a2:e9:90:b0:93:ef:df:8f:8c:b3:fe:bc:fa:0e:29:75:
7b:9f:4c:3b:f5:76:6a:39:78:e9:c6:cc:67:44:b3:06:62:0a:
7a:4f:3d:0d:58:47:b3:99:38:cd:89:75:9e:1d:c8:d0:69:6a:
d8:55:3c:d1:9f:b6:d4:f0:f8:27:08:af:e6:3e:13:a1:ea:19:
13:f3:29:75:f7:77:2c:41:2f:5f:7d:a6:98:1d:40:b9:bd:cb:
e1:65:e3:e9:37:ac:ca:16:fe:8d:c2:8c:00:12:af:96:60:9a:
8c:a6:87:f3:9b:d1:0a:76:60:88:c8:f5:bc:4e:6a:50:c7:95:
e7:bb:45:69:c5:2a:da:25:a8:4c:46:e3:cc:11:2f:c1:02:0b:
77:07:37:3c:5c:b9:76:78:d7:de:7c:72:fe:d7:e0:87:9b:33:
07:a0:1d:15:62:01:f4:85:47:21:25:14:41:25:2c:ca:0e:f3:
93:c3:c2:d4:27:4a:2d:66:08:2e:ac:fb:74:18:05:d6:5c:c0:
0d:14:58:62:05:0b:ba:0e:e9:07:7c:b3:60:e6:d3:5c:67:e6:
cb:33:6a:77:68:61:1a:c3:fe:93:40:cd:cd:40:fa:a5:31:57:
63:64:1d:db
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA2MTAxOTU2MDlaFw0zNjEyMzExOTU2MDlaMBgxFjAU
BgNVBAMTDTZhMjljMTVlLWRkYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfWscyrQ9tCwxp3D/CpzZeaZ+qPglUxm9Sv1Z668R3YCdv2u8umeKOR5Z3
jsZ+bRGLt++CvRe+JYDMKN8nhV1Z/JDornEwVDYYs1o/vR2HwZ+PMgtNuDzwEG7F
N8w5ACvmZPuGe2dhP1S9l7V5WENC1K8oDV5giBqQ/BEmzXrfM3eQIKJAa5tfwNni
D5Lnxb3rdUf7EjB22+M/PELWTt14xakl69Q42L1PLrZLPspc7YpKMNlkjWfsaqWY
XQ/SLVQbMtYxXAng7eMacrUXARtcJc/Vd9eG2a4WUa/0qHGyZkKpftAGBEGX2K50
KAjnHGwU5AIA2oRfbJ/tWKVNcOinAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUrSOD
GM+leGxSS/CwN4+AFJNvNcIwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzZGOTA4OUMyNjUwNjExRjFBNTg0NkZCMENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMVMwDQYJKoZIhvcNAQELBQAD
ggEBADYeVdqYeUDO+v/3LIxcz20kKe7GoumQsJPv34+Ms/68+g4pdXufTDv1dmo5
eOnGzGdEswZiCnpPPQ1YR7OZOM2JdZ4dyNBpathVPNGfttTw+CcIr+Y+E6HqGRPz
KXX3dyxBL199ppgdQLm9y+Fl4+k3rMoW/o3CjAASr5Zgmoymh/Ob0Qp2YIjI9bxO
alDHlee7RWnFKtolqExG48wRL8ECC3cHNzxcuXZ41958cv7X4IebMwegHRViAfSF
RyElFEElLMoO85PDwtQnSi1mCC6s+3QYBdZcwA0UWGIFC7oO6Qd8s2Dm01xn5ssz
andoYRrD/pNAzc1A+qUxV2NkHds=
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:32:03 2026 by rpki-client