Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7DA8BAA6802D11F18E2352CBCE1D38B0.roa
File: 7DA8BAA6802D11F18E2352CBCE1D38B0.roa (raw, json)
Hash identifier: fl0RL02+3+HvaodgfEjcYmHgfBSSUF+fPMsT58zChX4=
Subject key identifier: 27:3D:9B:FD:EE:C1:7E:3B:D9:97:6E:32:0D:2F:D0:4C:53:0A:C1:C5
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C99
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7DA8BAA6802D11F18E2352CBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:13:50 +0000
ROA not before: Wed 15 Jul 2026 09:13:46 +0000
ROA not after: Wed 31 Dec 2036 09:13:46 +0000
asID: 12083
IP address blocks: 165.49.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3225 (0xc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:13:46 2026 GMT
Not After : Dec 31 09:13:46 2036 GMT
Subject: CN=6a574f4e-80e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:4e:c6:84:93:37:dc:e9:27:60:e9:b8:36:
dc:49:df:6a:84:b1:4d:c1:af:c5:39:87:11:ca:80:
ad:33:49:3d:7c:77:fc:f4:cc:60:35:54:ed:37:2d:
6b:02:e0:c9:eb:f1:69:bc:92:38:08:2a:10:88:d7:
9b:63:90:3a:9c:2a:3d:ba:eb:f2:ed:8d:cc:6c:4c:
0b:e4:0a:b9:37:81:92:4f:45:81:fa:ec:6b:a0:1d:
ee:ff:29:a7:2d:c0:6f:b5:cb:9b:32:fd:e9:14:8c:
dc:95:09:3a:f5:ab:49:f9:aa:f6:55:b9:37:44:19:
48:2b:f9:02:e1:2c:1b:17:00:87:d6:6a:25:47:d6:
3a:13:0f:5f:90:3b:64:39:f9:1e:d2:24:3e:ad:ea:
93:b2:a0:14:0c:76:2f:92:e0:dd:78:c2:5a:c0:0f:
93:e2:ef:91:a9:d1:f1:c3:10:e4:62:4a:9d:c8:3a:
7a:bc:08:fb:e2:7c:f9:6f:7e:1f:c3:66:14:f6:5d:
58:26:a0:0f:1d:7c:94:d0:99:a9:45:2c:02:b8:53:
0b:3d:d6:c9:07:2a:67:37:cf:40:4f:6d:2b:7e:19:
e2:a9:52:43:1f:13:0d:99:71:2f:94:ee:68:0f:f0:
00:2e:0c:14:4c:47:e0:a6:62:08:85:b3:a4:4a:bd:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:9B:FD:EE:C1:7E:3B:D9:97:6E:32:0D:2F:D0:4C:53:0A:C1:C5
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7DA8BAA6802D11F18E2352CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.113.0/24
Signature Algorithm: sha256WithRSAEncryption
73:88:02:d7:db:70:95:f4:af:52:d2:08:e6:8a:5e:1d:fe:61:
d8:57:2d:77:6d:79:ba:74:ca:59:35:87:9f:da:76:d3:a3:52:
40:cc:dd:d3:3a:27:cb:64:80:41:98:5a:9a:6a:d4:29:a7:63:
8a:f2:d2:c9:00:6e:48:8e:b3:c9:d5:8d:57:3a:47:7d:92:cb:
e5:a1:58:66:5a:62:9c:6d:5f:e7:87:04:23:41:ca:6b:17:68:
d6:36:c3:dd:3a:11:f9:91:90:99:52:b7:ab:29:03:f2:d0:99:
83:a6:64:24:e1:95:f6:f3:a9:4b:2e:33:a9:c4:8e:90:03:cb:
cc:1d:ea:19:14:be:19:75:71:2d:78:0a:62:cd:17:49:52:6a:
e9:4f:33:b3:71:0b:c8:6e:07:28:c3:b0:7b:66:64:2e:d6:21:
b8:b2:98:7b:6d:31:fd:a9:dd:3b:0b:93:ea:24:d5:a4:3b:9d:
9c:5c:47:70:3a:63:21:70:3b:5c:c1:56:55:f4:51:fc:7b:88:
ff:5e:27:e8:65:7c:51:0b:c4:c7:a4:7d:90:5d:f4:38:16:0a:
24:79:ae:50:9f:87:5f:4e:0a:37:4e:8a:6f:fa:70:ff:dc:5e:
4d:96:a8:a2:94:2c:fd:92:b8:73:d1:4f:74:7f:67:fd:f4:a2:
94:d3:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:16 2026 by rpki-client