Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8D8662CA811D11F1AE851DC5CE1D38B0.roa
File: 8D8662CA811D11F1AE851DC5CE1D38B0.roa (raw, json)
Hash identifier: MHJ+Fodpj/EeB/yOPxCflXwgYfxdNfxM/UouBZ80oS8=
Subject key identifier: FF:26:C1:D4:55:1B:C8:E9:A9:DE:CD:0A:10:D4:20:6F:2F:BF:B2:5D
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CFB
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8D8662CA811D11F1AE851DC5CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:52:16 +0000
ROA not before: Thu 16 Jul 2026 13:52:12 +0000
ROA not after: Wed 31 Dec 2036 13:52:12 +0000
asID: 13347
IP address blocks: 165.49.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:52:12 2026 GMT
Not After : Dec 31 13:52:12 2036 GMT
Subject: CN=6a58e210-3384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:44:f9:4e:cc:65:e5:43:f2:2c:b5:ae:ce:
f6:d1:ee:86:00:08:b4:fd:c2:78:f2:49:b4:df:2c:
59:6d:18:68:ac:cd:e2:ad:40:f6:f7:64:43:90:45:
9b:3f:a6:11:2c:6f:70:34:03:f9:d2:56:19:46:13:
78:74:61:dc:96:e0:96:45:dd:f7:df:6e:a0:e4:e9:
c0:da:0a:53:87:6f:81:9b:8f:6d:91:27:52:57:56:
ea:c7:c5:79:cf:29:fc:a1:6a:d4:7b:85:cf:79:e4:
87:da:ca:9c:06:a6:d6:2c:fa:0d:65:70:53:a3:c4:
c7:d6:67:a3:21:d0:6e:59:37:77:fb:3c:a8:f8:46:
ca:6e:d5:15:50:ca:6c:e5:11:f3:3c:42:46:c9:5d:
27:ec:89:db:e3:23:7c:4e:7f:f5:44:f3:8b:1f:d0:
90:c9:49:62:9f:ba:15:4a:63:76:b7:07:f9:ff:b2:
25:b6:ae:73:92:22:78:ca:ae:a4:90:ea:73:ea:84:
64:3f:be:a9:ab:8d:0f:f1:24:b1:6f:d2:28:df:e2:
94:a5:8b:b0:68:22:92:7e:c4:36:98:9c:80:59:d1:
dd:21:7e:7b:69:41:c6:26:9c:81:11:17:c3:ac:cc:
ee:14:11:70:e9:e5:df:f0:ff:fe:de:78:90:33:bf:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:26:C1:D4:55:1B:C8:E9:A9:DE:CD:0A:10:D4:20:6F:2F:BF:B2:5D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8D8662CA811D11F1AE851DC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.101.0/24
Signature Algorithm: sha256WithRSAEncryption
21:58:30:84:75:a3:ba:9f:e9:38:c8:56:f6:ba:25:82:13:e6:
6c:96:c9:d7:7b:27:c1:17:c8:24:09:f2:8b:bf:14:f2:f6:fd:
0e:2f:09:cf:ef:f6:70:f1:b7:ac:88:81:6a:e8:26:07:cd:6e:
39:64:0e:f1:0e:8a:0a:8e:b1:3a:d4:9d:21:09:77:d5:22:dd:
f1:e8:8c:8a:49:77:ba:4c:ad:41:e1:8c:80:6f:7f:1e:86:08:
da:52:8d:c9:24:38:65:aa:16:6a:f5:8a:3a:0b:53:60:1a:7e:
e1:42:42:32:85:45:d6:f8:5c:56:7c:c3:a7:58:06:a6:29:17:
f0:1e:c6:75:d1:b7:35:dd:cf:46:4a:46:ec:3c:ed:45:9e:66:
a7:0a:37:af:c6:4c:03:9e:e7:b7:7a:6b:58:fd:f5:ca:d0:d2:
e8:b5:87:ff:fa:a5:ea:21:d0:e0:ab:3e:31:fc:63:5b:6a:5f:
a7:28:43:66:bd:da:fa:b6:07:87:83:60:74:79:91:3a:6f:db:
79:94:49:55:84:02:6a:5d:72:1c:31:bd:47:a4:0e:c8:a4:e1:
8e:76:8d:28:e6:8f:6a:ff:98:26:8e:dd:1a:ee:d3:6b:1c:06:
4b:16:3c:f0:65:d4:54:5b:04:1c:cb:ba:cf:c5:6a:22:21:e6:
0f:62:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:01 2026 by rpki-client