Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7729142E802C11F1A452E7C6CE1D38B0.roa
File: 7729142E802C11F1A452E7C6CE1D38B0.roa (raw, json)
Hash identifier: oWDDIoge3dwjH/MJIBJmE8QyKfulYBvitjQ61Jbos+0=
Subject key identifier: 70:0B:DA:C7:66:5D:3E:6B:F7:7C:74:92:EE:80:A1:7F:FE:F5:8E:51
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C7B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7729142E802C11F1A452E7C6CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:06:29 +0000
ROA not before: Wed 15 Jul 2026 09:06:25 +0000
ROA not after: Wed 31 Dec 2036 09:06:25 +0000
asID: 12083
IP address blocks: 165.49.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:06:25 2026 GMT
Not After : Dec 31 09:06:25 2036 GMT
Subject: CN=6a574d95-3fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:93:c7:88:f9:c7:2b:e9:11:4e:51:48:51:
74:ee:8b:36:3c:58:3b:06:c6:ba:5a:f5:ae:18:50:
a9:b3:10:70:a4:3c:4f:d2:7e:9d:91:5e:64:63:b9:
cb:95:e3:d6:dd:b3:53:40:cf:b8:b6:2e:f5:14:2c:
ae:7a:50:32:f9:4c:91:33:e5:43:13:3a:65:fa:78:
5b:77:9a:b6:3f:c5:59:6e:07:37:83:7e:a6:99:81:
97:33:7c:b8:65:1f:83:b5:ec:c0:24:f3:ad:4b:d2:
9d:af:a0:c5:34:b4:ea:48:02:e9:ee:ad:8e:0e:74:
bf:7d:29:32:06:25:f5:c6:2b:db:99:75:6e:00:df:
68:ab:bb:15:ba:d5:f5:e0:eb:7c:f5:a8:e2:31:a3:
13:5b:c6:8c:63:d2:b8:2e:09:ea:fc:c3:e0:cb:bc:
06:6c:8c:51:ca:97:52:eb:ec:84:9c:a3:b9:09:12:
df:3f:4c:7f:cf:13:c3:40:62:cf:e4:16:dc:a6:9f:
da:07:d7:e9:19:8e:72:c3:aa:d8:40:a8:06:34:31:
58:a4:0c:06:88:55:ba:8b:5e:4c:06:7d:81:7f:cf:
d0:a4:da:d3:55:52:a5:af:2b:2a:5b:18:ac:cf:4f:
83:8f:43:4e:39:87:8b:d1:7d:e1:67:ab:83:ab:67:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:DA:C7:66:5D:3E:6B:F7:7C:74:92:EE:80:A1:7F:FE:F5:8E:51
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7729142E802C11F1A452E7C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e4:7e:0c:96:45:a3:1a:e7:2d:2d:99:d8:cf:5c:8c:16:70:
1a:32:64:dd:8d:c2:b8:63:ba:57:7d:67:cf:00:b6:76:52:f9:
3c:ae:ea:9a:fc:6d:ec:3f:f8:e2:8d:84:96:d9:ea:89:c8:51:
ad:7e:1b:40:bd:a1:0e:c0:94:44:5b:bf:92:d5:75:e4:c9:10:
00:b0:14:87:f7:57:a1:e0:e2:52:d1:58:94:1c:c5:57:2e:c6:
8b:17:72:b9:73:b8:1e:30:d9:fa:7c:69:b7:d9:c4:dd:1c:9c:
08:6d:0d:e9:5f:1a:0f:a8:a6:d5:0a:89:1e:39:06:89:86:2c:
7b:c2:3c:df:c1:38:10:72:5e:a2:4c:41:ba:c1:ec:4e:bc:77:
c1:9e:b6:d3:70:94:ac:5a:1f:67:32:0e:5a:22:b7:e0:39:1a:
96:26:57:84:51:7b:69:85:8b:46:85:4c:bf:27:af:13:2d:d0:
51:c3:eb:73:11:7f:03:50:d9:77:28:5a:1b:86:cc:3f:1b:95:
f9:ae:e7:e9:91:d7:bf:37:49:8b:43:da:6d:52:8b:45:6e:5c:
e1:b4:9f:8a:d7:65:1e:57:a6:3f:10:3a:c5:10:ba:50:07:ac:
db:b4:b2:0b:21:fb:14:bc:dd:19:96:51:0f:2a:de:2e:b5:27:
a4:b1:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:14 2026 by rpki-client