Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/907C1086211B11F1816DA5D8DAE4EC9C.roa
File: 907C1086211B11F1816DA5D8DAE4EC9C.roa (raw, json)
Hash identifier: TPUIPkket2pCo9w2IUmRL6i35BLl+yVleDe7FtRQxEw=
Subject key identifier: 6C:BB:4F:09:EB:6A:7D:F1:AD:D8:00:5C:A6:D9:BC:FA:26:8E:48:54
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B39
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/907C1086211B11F1816DA5D8DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 09:36:10 +0000
ROA not before: Mon 16 Mar 2026 09:36:05 +0000
ROA not after: Wed 31 Dec 2036 09:36:05 +0000
asID: 6079
IP address blocks: 165.49.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Mar 16 09:36:05 2026 GMT
Not After : Dec 31 09:36:05 2036 GMT
Subject: CN=69b7cf0a-31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fd:31:88:c2:7c:97:47:43:d2:34:35:1d:56:
fd:ea:06:30:31:06:f1:4e:dc:51:28:9f:72:ba:94:
6d:02:7e:43:d7:97:32:35:cb:ed:83:1a:73:50:8b:
01:58:85:ca:38:19:0e:4a:86:fc:06:8c:08:ab:f2:
90:2a:cf:cc:06:15:18:e6:b9:f2:85:0d:3f:ac:81:
b0:08:8e:23:57:43:be:70:97:18:d6:6d:76:74:bc:
08:3e:d8:f2:11:56:22:31:a0:60:98:4b:89:98:dd:
d2:96:7a:3e:fd:e5:76:e4:6b:2c:5b:88:98:5f:0f:
45:55:fe:41:72:6d:b6:7b:c8:a5:9a:ec:26:1a:2d:
80:0b:f2:e3:fc:52:a4:c4:e6:7a:e3:4c:4b:d7:22:
ff:8c:b5:10:a4:84:d7:86:f9:9f:5f:fe:7a:ab:03:
29:ce:e9:b7:24:e2:7f:53:50:8c:43:b7:eb:9f:63:
6d:04:7a:f0:c3:b7:a6:3c:1c:45:03:9f:20:2e:bd:
32:e5:51:5d:ad:41:df:e8:e4:a2:4d:6c:9e:41:c9:
bc:0b:63:34:5e:6a:9a:bd:4e:f5:00:a0:12:53:63:
27:fd:a6:1b:49:3e:52:bb:72:94:6d:56:bc:c4:69:
4f:27:90:14:c5:66:a9:db:d8:bf:a3:8b:81:48:2b:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:4F:09:EB:6A:7D:F1:AD:D8:00:5C:A6:D9:BC:FA:26:8E:48:54
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/907C1086211B11F1816DA5D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.211.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5c:dd:e8:e5:17:3e:b1:7f:83:1f:97:8d:8d:1c:6c:c5:c5:
2a:d4:d7:c1:c5:83:47:26:b7:26:79:f4:41:eb:4b:24:15:97:
e4:84:fa:93:fe:ee:28:0b:cf:a9:6e:e3:ba:5d:99:9d:99:48:
2d:ed:78:63:11:46:3a:dd:7f:4e:40:b1:32:e3:d6:43:b3:81:
34:de:ec:b6:3d:6f:70:71:7f:d1:c6:57:65:b9:88:e1:b3:64:
c2:24:33:0a:ab:d7:11:f1:25:fb:b1:fd:9c:c0:0b:6b:b4:52:
8b:64:58:01:f1:a2:97:5e:7d:7b:90:83:4c:28:d1:12:21:b2:
13:ed:83:e6:84:13:62:1b:1f:66:0a:11:c1:fc:76:f2:f8:fd:
ab:74:69:07:81:44:e0:80:05:28:dd:25:1d:10:11:ec:ec:98:
2a:80:89:b8:4c:7d:72:4c:19:48:7e:94:1d:e8:42:c7:7f:fa:
e7:67:ec:30:7d:8d:20:fb:3c:f3:77:41:52:98:d0:da:1f:63:
0a:4c:2f:6c:f0:b3:79:97:67:3a:66:1d:60:ea:8e:45:2a:b3:
2d:85:85:1b:bb:de:31:5b:42:60:0f:44:b8:0c:d3:d9:d8:91:
3d:7e:46:2f:51:c1:d7:1d:24:2e:cc:4d:36:3b:4a:f3:e0:1e:
b3:99:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:56:07 2026 by rpki-client