Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/73FA1982802D11F1BA574DCBCE1D38B0.roa
File: 73FA1982802D11F1BA574DCBCE1D38B0.roa (raw, json)
Hash identifier: iJSvrXZAOcFGQkQLXNI8D/M74NvL/uG4i2bEvnqu6XI=
Subject key identifier: 39:05:8A:06:2B:FE:F4:B9:CF:68:D9:DD:1B:62:B1:C6:8D:64:C8:CE
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C97
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/73FA1982802D11F1BA574DCBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:13:33 +0000
ROA not before: Wed 15 Jul 2026 09:13:30 +0000
ROA not after: Wed 31 Dec 2036 09:13:30 +0000
asID: 12083
IP address blocks: 165.49.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3223 (0xc97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:13:30 2026 GMT
Not After : Dec 31 09:13:30 2036 GMT
Subject: CN=6a574f3d-849f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:fd:0d:e0:e2:9a:e6:73:bd:4a:5f:b6:cc:
b8:7d:bb:9d:4b:75:d1:a8:c2:17:2d:c3:6c:24:a6:
11:4d:3d:70:81:93:42:99:f6:ff:40:79:fa:52:2f:
0e:c8:d9:e4:e0:ed:94:81:6a:e5:5e:fe:06:09:6b:
62:02:77:5d:f2:50:1f:23:da:d4:58:00:7c:d8:83:
d6:32:0e:c5:78:ea:e1:f9:33:e6:3e:b0:3d:54:6b:
87:0b:09:d2:a3:9f:10:29:5d:e9:71:99:8c:bb:f7:
b9:70:0e:df:c5:5a:40:64:1b:3b:6a:43:dc:79:6a:
f4:41:ee:d2:11:c3:56:cd:83:9a:2e:2e:d2:4a:ab:
44:d2:61:61:0d:b5:e9:63:af:c4:27:93:f6:10:35:
2d:56:79:94:87:e5:07:c8:7f:e8:c0:3c:64:67:da:
a5:a9:12:b0:90:c0:f1:78:f4:ad:2a:2b:03:13:9d:
0c:e8:43:a4:01:4e:15:b8:ff:03:9c:44:f7:88:8e:
f2:e6:55:f4:ab:c9:ac:cf:10:2c:98:d6:a7:d1:26:
ff:67:f4:a8:0f:88:cc:eb:1b:e9:a9:f5:70:d5:af:
08:6a:68:51:40:3e:cf:da:55:e3:66:dc:b5:2f:40:
eb:5b:c9:ed:4f:d4:7c:77:5a:05:4e:b8:3f:e2:40:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:8A:06:2B:FE:F4:B9:CF:68:D9:DD:1B:62:B1:C6:8D:64:C8:CE
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/73FA1982802D11F1BA574DCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1e:f4:af:13:84:c0:32:99:c5:23:a4:0f:8b:7b:24:be:47:
e6:e9:a2:43:af:fa:46:02:ac:4d:98:04:d8:36:03:28:ac:12:
ca:fb:1e:38:68:28:f7:5c:90:7d:99:0c:7b:dd:55:ea:1e:37:
59:d2:9c:45:36:d8:0b:97:76:5e:2a:3c:f7:04:00:12:bf:61:
3a:27:e8:32:df:89:04:a9:5e:a1:4f:30:e4:bb:39:a0:a1:76:
9c:a3:07:5f:9e:e9:9a:2c:20:8a:19:3b:0b:72:57:0b:b8:b7:
0a:df:d2:8b:79:70:df:08:45:dc:62:a2:94:57:3a:9b:4f:85:
47:61:2c:cb:ef:cd:9c:06:78:18:25:60:ae:34:8d:c5:75:bf:
00:38:be:d7:df:4b:df:0c:2c:a3:b9:b8:42:99:a2:54:14:24:
11:67:49:ba:e1:f6:48:b9:0d:47:2a:df:cf:8c:0e:bb:dd:a3:
2c:a8:52:48:bc:9b:55:07:fb:a8:a8:0e:84:19:c1:0b:ad:e3:
17:5e:06:61:d7:68:19:0e:e0:db:6a:52:f9:09:e8:7e:df:1d:
fd:c8:f8:19:aa:39:02:75:17:21:dd:69:36:c1:67:e9:fc:68:
85:e8:c0:bd:3f:ae:50:11:96:5a:e7:e1:35:2a:22:7b:4d:62:
d5:a2:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:10 2026 by rpki-client