Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/87A82334802D11F1938867CBCE1D38B0.roa
File: 87A82334802D11F1938867CBCE1D38B0.roa (raw, json)
Hash identifier: /2CDuNZ6BsFZ5xYMtjQMziGMpGGrgMm1Eec2IIcMJT8=
Subject key identifier: 2B:70:BD:A9:9F:DD:FE:40:CE:3F:FE:03:26:0E:FE:C8:05:F3:CE:1F
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C9B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/87A82334802D11F1938867CBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:14:07 +0000
ROA not before: Wed 15 Jul 2026 09:14:03 +0000
ROA not after: Wed 31 Dec 2036 09:14:03 +0000
asID: 12083
IP address blocks: 165.49.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3227 (0xc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:14:03 2026 GMT
Not After : Dec 31 09:14:03 2036 GMT
Subject: CN=6a574f5e-c948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:49:a0:a6:df:ca:b8:67:78:e6:ec:4b:32:
4f:4b:aa:9f:11:13:89:3b:de:6e:9d:4f:50:d8:d6:
9d:f7:2e:64:70:b2:ea:24:92:07:a9:5b:ad:10:ac:
0f:45:38:7c:7d:d6:8d:e9:93:a6:df:cf:41:24:63:
a5:de:9e:a8:ac:53:7f:22:a9:70:69:ff:71:ae:3a:
c8:ce:28:00:7b:36:5f:4e:3a:b3:a9:0e:dd:ad:91:
12:cb:ff:02:47:74:a7:e2:50:9b:cd:f4:a6:fe:44:
df:64:cf:25:3f:38:f8:86:3b:e0:06:d7:81:37:5d:
20:53:5e:e5:a2:1d:11:1d:5b:19:77:f0:7b:f2:a6:
27:d7:e4:22:39:a8:4a:6d:3f:e0:d0:80:b5:6e:95:
16:e5:e2:11:57:98:09:b0:9a:e9:8c:a0:e9:0d:29:
91:35:fe:67:2f:b3:5e:7a:43:28:1b:ac:78:cf:35:
7a:13:20:25:37:48:2a:d2:3d:62:b2:bc:4d:c3:99:
76:46:c0:b4:0f:44:94:6f:8b:56:b2:82:d9:50:a9:
3b:4e:7a:9b:7f:2a:5c:5d:29:cd:03:fb:1e:91:9d:
29:ed:5a:7c:cd:64:b9:c9:cf:17:9f:69:eb:96:16:
3c:52:55:3b:18:fd:64:9a:e8:ba:e4:77:1d:3a:01:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:BD:A9:9F:DD:FE:40:CE:3F:FE:03:26:0E:FE:C8:05:F3:CE:1F
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/87A82334802D11F1938867CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.112.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d0:ab:7d:36:fa:fd:ea:99:68:54:d0:54:3f:91:1a:f4:70:
39:ed:41:1e:50:7a:68:6b:a1:f5:35:e4:10:e2:06:d4:14:cf:
93:64:d6:a7:9f:6d:38:88:bc:eb:98:a5:11:73:ae:a7:18:50:
83:57:51:42:47:12:ac:1b:5c:c4:44:a4:1a:53:1d:5b:ad:66:
6a:d3:60:3f:2d:24:cc:67:86:4f:59:07:c2:83:cf:85:03:e7:
01:02:13:9b:29:ec:c8:72:cb:12:4f:e8:8d:6b:b2:36:d6:be:
c5:de:47:32:0f:21:62:d7:15:97:1f:64:83:de:4f:c5:03:f5:
5a:fe:1f:fc:b0:e7:67:78:54:ec:94:a3:c3:3a:8a:3f:dd:b9:
ea:5b:92:fe:e3:17:83:43:99:1a:99:f7:43:3c:fc:43:a7:4b:
8f:13:bd:79:9c:18:d4:69:e7:7d:90:eb:5c:24:0c:ef:eb:15:
30:48:3f:9a:5d:c7:e4:65:44:e4:72:9a:21:6a:c6:e5:1c:63:
18:9a:1e:f3:89:65:0e:97:38:f8:72:8f:49:ea:e5:f5:c0:22:
37:e9:62:ee:99:98:cd:29:32:17:88:39:38:8f:17:53:81:fb:
62:fe:98:d4:28:d7:1b:96:47:96:e6:fa:b5:72:f9:b1:93:c0:
1f:30:2b:a6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDJswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTUwOTE0MDNaFw0zNjEyMzEwOTE0MDNaMBgxFjAU
BgNVBAMTDTZhNTc0ZjVlLWM5NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC17Emgpt/KuGd45uxLMk9Lqp8RE4k73m6dT1DY1p33LmRwsuokkgepW60Q
rA9FOHx91o3pk6bfz0EkY6XenqisU38iqXBp/3GuOsjOKAB7Nl9OOrOpDt2tkRLL
/wJHdKfiUJvN9Kb+RN9kzyU/OPiGO+AG14E3XSBTXuWiHREdWxl38HvypifX5CI5
qEptP+DQgLVulRbl4hFXmAmwmumMoOkNKZE1/mcvs156QygbrHjPNXoTICU3SCrS
PWKyvE3DmXZGwLQPRJRvi1aygtlQqTtOept/KlxdKc0D+x6RnSntWnzNZLnJzxef
aeuWFjxSVTsY/WSa6Lrkdx06AYdjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUK3C9
qZ/d/kDOP/4DJg7+yAXzzh8wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4Lzg3QTgyMzM0ODAyRDExRjE5Mzg4NjdDQkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMXAwDQYJKoZIhvcNAQELBQAD
ggEBAELQq302+v3qmWhU0FQ/kRr0cDntQR5QemhrofU15BDiBtQUz5Nk1qefbTiI
vOuYpRFzrqcYUINXUUJHEqwbXMREpBpTHVutZmrTYD8tJMxnhk9ZB8KDz4UD5wEC
E5sp7MhyyxJP6I1rsjbWvsXeRzIPIWLXFZcfZIPeT8UD9Vr+H/yw52d4VOyUo8M6
ij/duepbkv7jF4NDmRqZ90M8/EOnS48TvXmcGNRp532Q61wkDO/rFTBIP5pdx+Rl
RORymiFqxuUcYxiaHvOJZQ6XOPhyj0nq5fXAIjfpYu6ZmM0pMheIOTiPF1OB+2L+
mNQo1xuWR5bm+rVy+bGTwB8wK6Y=
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:26 2026 by rpki-client