Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8C2728F2811C11F18134F4BCCE1D38B0.roa
File: 8C2728F2811C11F18134F4BCCE1D38B0.roa (raw, json)
Hash identifier: NZedfPTR48+QMfept+EqGXRQ0/EQoktosBnicoV5glQ=
Subject key identifier: C1:A2:4B:DA:1E:84:67:C2:DD:31:86:80:44:40:6C:B4:6B:A3:CD:A1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CD3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8C2728F2811C11F18134F4BCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:45:04 +0000
ROA not before: Thu 16 Jul 2026 13:45:00 +0000
ROA not after: Wed 31 Dec 2036 13:45:00 +0000
asID: 7029
IP address blocks: 165.49.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3283 (0xcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:45:00 2026 GMT
Not After : Dec 31 13:45:00 2036 GMT
Subject: CN=6a58e060-399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:2c:bb:ac:bd:6e:9d:c1:af:48:b1:49:61:
ae:96:63:4a:6c:94:c8:44:ef:86:88:ef:f5:a8:6f:
c1:d3:73:79:b5:16:1e:d2:30:67:a5:46:5b:51:cb:
62:c0:c4:07:19:d3:81:a7:34:be:74:a7:71:b8:ac:
99:45:4f:ef:51:d0:20:94:c0:cd:5d:0d:e4:7f:a5:
e1:2c:31:a2:65:a3:42:cf:b7:56:4e:6a:88:72:d4:
b2:58:20:33:63:d7:67:d0:23:60:53:7b:76:42:bd:
41:eb:99:de:e5:72:03:ca:6f:37:50:7c:6f:ee:45:
60:7d:ff:03:67:84:e5:15:d5:66:40:46:0d:f6:ac:
62:ec:10:1d:08:50:6d:0a:4e:84:91:c8:2f:5c:ae:
55:e2:9e:02:c6:35:fb:b6:16:f6:c4:74:80:e1:ea:
e8:94:af:b3:98:a2:62:c5:df:6b:08:5e:87:5d:f7:
24:6d:ab:6e:9d:ed:00:cc:6a:98:8f:36:b5:6c:f3:
e7:c1:1c:3e:f5:34:e6:ae:e2:9f:fe:e4:ab:c0:57:
77:9f:31:83:26:29:0e:91:77:9d:d8:2b:30:73:52:
66:ea:c5:f8:29:b0:42:3f:a9:89:78:42:f4:36:bc:
0f:d1:d7:8a:68:10:e7:45:46:b6:1f:dd:43:f2:48:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A2:4B:DA:1E:84:67:C2:DD:31:86:80:44:40:6C:B4:6B:A3:CD:A1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8C2728F2811C11F18134F4BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:80:6b:37:c3:f0:a3:1f:ab:f7:26:00:aa:81:07:14:ac:a5:
37:0c:25:88:94:ef:c9:c3:00:d6:9e:c1:3b:27:fc:0f:ab:8c:
39:d3:e1:bb:25:ad:e2:d7:42:85:00:05:48:35:98:ab:b6:d3:
b0:38:a9:0e:aa:cf:fb:cd:bb:59:f7:16:4f:be:3a:9b:0f:41:
87:8a:97:a5:64:27:13:df:6a:f4:08:ff:ee:a5:7e:2a:72:36:
f2:75:b7:52:a4:e8:9c:fb:28:7a:c1:03:24:2f:eb:8f:a2:c5:
b3:99:b1:e7:b2:a0:4a:14:d4:39:40:0b:f1:f6:f6:dc:46:79:
ea:37:4e:c0:b7:98:91:07:53:0c:54:b8:c1:cd:ff:91:22:82:
82:7b:76:c0:94:fa:80:3b:47:de:9f:5e:1a:29:c5:5e:da:d0:
25:32:b0:b7:b5:1e:61:d7:d3:9f:18:a4:5c:56:81:5c:32:00:
9f:94:4e:6f:23:29:2c:2a:fb:e3:d3:d7:77:44:b2:6d:5f:76:
0f:2f:74:27:5e:86:03:0d:8b:a6:eb:e5:cf:b8:e6:99:da:58:
4c:7c:e7:fd:f9:92:7c:b8:3b:07:86:01:8c:95:da:53:c9:64:
87:7c:f8:7b:91:a4:ea:54:29:30:6b:e8:df:6c:42:82:56:e1:
d0:f2:5f:ad
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTYxMzQ1MDBaFw0zNjEyMzExMzQ1MDBaMBgxFjAU
BgNVBAMTDTZhNThlMDYwLTM5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrPiy7rL1uncGvSLFJYa6WY0pslMhE74aI7/Wob8HTc3m1Fh7SMGelRltR
y2LAxAcZ04GnNL50p3G4rJlFT+9R0CCUwM1dDeR/peEsMaJlo0LPt1ZOaohy1LJY
IDNj12fQI2BTe3ZCvUHrmd7lcgPKbzdQfG/uRWB9/wNnhOUV1WZARg32rGLsEB0I
UG0KToSRyC9crlXingLGNfu2FvbEdIDh6uiUr7OYomLF32sIXodd9yRtq26d7QDM
apiPNrVs8+fBHD71NOau4p/+5KvAV3efMYMmKQ6Rd53YKzBzUmbqxfgpsEI/qYl4
QvQ2vA/R14poEOdFRrYf3UPySDsRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUwaJL
2h6EZ8LdMYaAREBstGujzaEwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzhDMjcyOEYyODExQzExRjE4MTM0RjRCQ0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMV4wDQYJKoZIhvcNAQELBQAD
ggEBAMmAazfD8KMfq/cmAKqBBxSspTcMJYiU78nDANaewTsn/A+rjDnT4bslreLX
QoUABUg1mKu207A4qQ6qz/vNu1n3Fk++OpsPQYeKl6VkJxPfavQI/+6lfipyNvJ1
t1Kk6Jz7KHrBAyQv64+ixbOZseeyoEoU1DlAC/H29txGeeo3TsC3mJEHUwxUuMHN
/5EigoJ7dsCU+oA7R96fXhopxV7a0CUysLe1HmHX058YpFxWgVwyAJ+UTm8jKSwq
++PT13dEsm1fdg8vdCdehgMNi6br5c+45pnaWEx85/35kny4OweGAYyV2lPJZId8
+HuRpOpUKTBr6N9sQoJW4dDyX60=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:20 2026 by rpki-client