Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/89405CFE811B11F1861E5DB8CE1D38B0.roa
File: 89405CFE811B11F1861E5DB8CE1D38B0.roa (raw, json)
Hash identifier: 4t8gg7QT8boddXrF8rzaG3AjgRR5zl5g/bh6hJlkUCs=
Subject key identifier: 73:EA:A8:B1:33:92:CA:4C:04:A1:71:5A:B6:DA:F1:2A:A2:A8:C1:26
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CB7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/89405CFE811B11F1861E5DB8CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:37:50 +0000
ROA not before: Thu 16 Jul 2026 13:37:45 +0000
ROA not after: Wed 31 Dec 2036 13:37:45 +0000
asID: 5650
IP address blocks: 165.49.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:37:45 2026 GMT
Not After : Dec 31 13:37:45 2036 GMT
Subject: CN=6a58dead-fcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:ac:4e:7a:92:8e:eb:53:ce:93:77:b6:c7:
0b:c6:03:52:26:7c:d3:cf:33:e9:a3:d9:70:5c:17:
42:39:7a:b1:4e:1c:6c:9a:42:8d:68:da:53:89:94:
5c:be:24:c8:00:ec:08:50:1a:e7:ef:ee:a3:dc:e4:
30:ee:e2:6c:bc:1c:35:b4:cf:82:42:13:f5:b1:f5:
c4:ba:56:81:c9:c2:f6:24:fa:13:b5:81:4f:c9:05:
13:2d:6f:ac:01:b6:bd:a6:14:77:74:99:cb:91:71:
1f:93:db:77:66:fe:c5:e9:19:13:e8:f6:f2:3b:50:
15:c9:7a:b7:69:8f:68:88:06:10:56:75:13:8b:77:
c8:83:eb:f8:eb:2d:34:d6:6d:17:00:87:a6:46:ae:
74:b5:08:20:74:28:63:09:1a:d0:34:78:0b:e8:53:
f1:cf:f8:e3:f2:e8:7c:a1:d6:d8:82:86:21:83:4f:
67:94:f3:b8:40:da:6c:37:60:cf:fd:e2:4f:b4:76:
91:cc:7e:bb:d5:f4:03:41:43:e7:50:6e:db:21:ca:
7a:a2:e0:4c:d5:58:3a:cb:e4:29:0e:82:b8:8a:54:
5a:50:a5:83:4c:db:78:0d:c6:e1:1d:cd:76:ad:39:
83:41:69:fc:a5:f2:67:2c:e5:53:27:a4:63:64:c8:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:A8:B1:33:92:CA:4C:04:A1:71:5A:B6:DA:F1:2A:A2:A8:C1:26
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/89405CFE811B11F1861E5DB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.92.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f3:2f:ee:f0:8b:02:5a:97:f9:55:95:a5:4f:64:fb:e2:c3:
af:e7:5c:04:61:1f:a8:51:a7:61:e9:78:7f:6d:c6:a8:cc:bd:
04:9d:7b:a4:f7:de:20:e9:63:6b:9c:ec:fa:65:d6:74:6a:aa:
88:f1:2a:10:4f:03:71:df:96:6d:a6:ca:76:a2:83:21:0b:56:
21:41:fb:6b:14:fd:35:d2:4d:fb:4e:88:bb:38:1d:cc:17:58:
e5:cd:7e:5c:72:cd:84:cd:df:2a:01:11:d7:1f:f9:93:20:5f:
b4:0d:1a:bb:fe:b2:21:03:5e:11:0f:53:a1:9e:39:bb:90:93:
66:73:4a:a2:6a:56:f9:88:0d:4c:67:ed:8d:33:b5:9f:e9:cb:
0f:78:dd:00:af:6b:e1:bf:9d:95:6b:0a:80:8d:34:c6:05:b9:
c8:89:51:ff:f3:b0:db:31:2a:a1:ff:a0:b6:f6:7d:72:c4:a9:
f3:2d:d2:f2:56:8f:5d:a2:b4:a4:05:a0:92:25:ef:40:28:5a:
95:41:09:c8:7b:b2:2b:7e:b3:3a:7f:df:00:5a:0d:c0:70:cb:
81:d3:03:26:62:7a:3d:3a:ab:19:9a:30:1e:e4:73:bd:3c:67:
a1:1d:e6:d4:85:2b:e7:00:2d:10:8f:08:9c:8b:35:2c:04:1a:
3c:93:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:54 2026 by rpki-client