Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/83578DE2811D11F1A07118C5CE1D38B0.roa
File: 83578DE2811D11F1A07118C5CE1D38B0.roa (raw, json)
Hash identifier: Gw9rfyFrJdTwoL/vTRw2ncP5S1E3RXqDiuq9V1ZXclY=
Subject key identifier: 21:DF:E1:03:87:D6:BD:DC:4C:C4:33:38:DF:B4:5F:E6:D7:D6:A9:4A
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CF9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/83578DE2811D11F1A07118C5CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:51:58 +0000
ROA not before: Thu 16 Jul 2026 13:51:54 +0000
ROA not after: Wed 31 Dec 2036 13:51:54 +0000
asID: 13347
IP address blocks: 165.49.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:51:54 2026 GMT
Not After : Dec 31 13:51:54 2036 GMT
Subject: CN=6a58e1fe-9f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:e0:f6:ef:31:62:34:0e:06:1c:8f:3d:be:
d9:01:39:c6:17:01:59:aa:fe:63:ea:27:07:22:ab:
32:53:76:99:f4:da:01:bf:0c:e2:35:70:67:9a:40:
34:1d:18:b2:bc:a1:51:d6:cc:19:96:e8:5f:ab:29:
22:4c:bb:5c:ad:21:ee:79:18:b8:05:17:88:53:91:
df:c6:18:5e:c4:a1:ea:2e:ae:23:27:b8:ba:f7:1c:
84:c5:f9:30:4c:37:6c:64:34:ff:93:3d:91:52:1a:
db:ab:e5:c1:a3:4d:59:dd:b4:d3:7a:39:ee:f3:18:
76:38:b1:4b:a2:26:23:f1:c9:32:4a:06:c3:a5:8c:
5d:ef:04:bc:ea:a3:0f:fb:ed:02:b5:14:21:7b:55:
02:f1:1e:d7:15:f5:41:d6:98:01:33:92:b6:0a:9b:
e2:1f:a5:37:75:ef:c8:3a:93:f3:1e:62:ca:05:ff:
78:67:cb:c7:4c:e2:e9:a1:0d:45:27:fe:40:ed:90:
83:77:92:50:98:33:69:1f:e8:68:85:79:70:fc:76:
8f:5e:fe:63:d1:ae:4b:2f:eb:83:2d:89:53:d2:95:
11:96:c6:7a:40:87:29:3b:b4:5d:68:05:92:de:99:
46:dc:e2:44:8c:ae:dd:f9:01:df:ea:77:e7:ed:2f:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:E1:03:87:D6:BD:DC:4C:C4:33:38:DF:B4:5F:E6:D7:D6:A9:4A
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/83578DE2811D11F1A07118C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.100.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6c:72:88:d8:22:b5:9f:f1:b3:21:a9:a7:64:42:8e:d9:e4:
03:51:fc:7a:a2:88:b2:35:d4:00:b7:76:61:c1:56:35:a9:9c:
ea:6b:7b:32:56:19:96:ed:02:84:5b:26:f8:08:fd:47:a9:00:
4e:62:26:9c:5f:fc:9f:6c:00:3f:59:1c:88:5f:b2:04:bc:c6:
c9:67:ba:e7:66:cb:db:3a:68:71:d1:9d:63:b0:05:d4:6a:c8:
88:93:eb:59:08:ec:a5:af:71:e9:28:40:8a:e5:7d:5b:f1:a8:
cd:6f:bf:87:3a:a7:f0:b6:04:0a:96:5d:9a:45:04:af:35:2b:
19:bb:66:b0:eb:67:b1:40:b8:c9:ed:49:ce:6d:22:d8:47:57:
97:e8:cc:46:8f:28:c0:df:ff:43:4b:cc:80:3a:02:99:1e:75:
0d:97:b0:dd:20:8f:d9:aa:80:5f:48:8d:51:a8:54:87:76:75:
68:a9:85:8f:f9:db:ce:08:cb:90:62:2a:ab:71:5f:de:53:87:
56:6a:25:76:60:77:08:5f:7c:16:4f:1f:a4:cf:9a:29:96:d6:
d4:e1:bf:02:a0:a8:72:4a:ac:3f:fe:0a:7c:ab:41:21:ae:2f:
28:27:04:3d:ba:b5:82:bb:24:b7:78:b2:59:3d:fd:55:23:24:
f1:dd:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:03 2026 by rpki-client