Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/97494396811C11F1902C32BDCE1D38B0.roa
File: 97494396811C11F1902C32BDCE1D38B0.roa (raw, json)
Hash identifier: 5c1FGBkNK24MiNANt5X0WiH/roa+3su2RpyeV22QYhY=
Subject key identifier: 9B:39:2C:3F:D7:AD:1E:E7:98:14:72:F2:D1:F5:34:4F:0C:C2:40:12
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CD5
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/97494396811C11F1902C32BDCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:45:23 +0000
ROA not before: Thu 16 Jul 2026 13:45:19 +0000
ROA not after: Wed 31 Dec 2036 13:45:19 +0000
asID: 7029
IP address blocks: 165.49.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:45:19 2026 GMT
Not After : Dec 31 13:45:19 2036 GMT
Subject: CN=6a58e072-0c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:77:47:cf:3b:c9:7d:c5:69:e7:1c:04:87:
21:34:d2:56:ff:9a:3d:ca:ec:d5:5f:98:40:21:20:
50:d8:7a:8d:10:41:a1:0a:a9:57:3a:41:14:b7:7a:
56:8e:2e:7e:67:11:51:a6:ea:32:c0:25:4b:ce:14:
44:de:bd:00:82:20:0d:bc:f4:7b:ca:75:8c:57:f6:
ca:8e:cb:a3:65:5b:68:a0:0c:28:f5:26:44:24:f7:
27:ef:26:cb:18:68:22:cb:25:29:1f:7a:2f:75:de:
c0:22:08:34:82:25:a0:5d:32:6f:2f:7c:0e:2c:d6:
e5:b8:f0:f5:ed:a7:5c:f4:6d:4e:b3:21:28:85:0b:
82:5f:67:c6:fa:bb:9b:a8:b5:20:8e:59:a9:41:ca:
b3:85:0e:d6:c5:3d:3a:33:35:77:c9:6a:bc:66:4a:
d5:4e:1f:c9:e0:db:5f:e8:20:bb:29:bd:86:b7:99:
c7:46:ee:4d:df:52:8e:4b:ed:30:64:16:41:d3:2c:
e8:dd:9b:dd:c6:40:6e:61:f7:0f:dc:85:93:66:43:
e2:c7:ab:28:45:01:8e:d1:b4:64:ca:bc:21:cf:e5:
69:f1:20:c1:8c:99:0a:0a:9b:26:8d:27:a8:3e:5d:
bf:7e:2d:e3:f8:51:51:a7:22:e7:14:92:37:1f:a0:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:2C:3F:D7:AD:1E:E7:98:14:72:F2:D1:F5:34:4F:0C:C2:40:12
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/97494396811C11F1902C32BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.95.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cb:18:8c:0c:42:12:e2:45:c3:a7:b6:1c:d7:72:de:74:3d:
46:e3:f3:2f:c8:72:83:7b:56:59:c0:f1:8c:2c:f1:b8:a5:77:
7c:02:f2:ab:8d:be:1a:c1:30:5e:4f:f8:ab:75:2a:d3:8b:55:
26:19:19:33:a5:21:b6:c1:c0:1f:72:0d:2c:a8:7d:2a:2a:54:
b5:de:94:61:05:f1:8a:04:d4:5d:e2:3d:57:55:d2:99:cc:0a:
1a:d2:77:a2:52:7d:80:e3:45:be:07:89:56:7b:1a:8d:2d:96:
9f:7b:7e:d5:4f:68:78:4f:38:da:71:c5:0e:25:b9:c9:c2:26:
ff:c4:15:3c:9c:28:2f:ad:4b:60:22:9c:5d:88:4d:2f:31:f1:
a9:d0:2a:ce:9b:28:e6:4d:40:93:49:b4:e0:3f:6a:00:ae:4c:
ec:38:3d:5b:a4:a9:c3:f8:1d:63:9b:57:fd:54:a9:48:81:9e:
56:e8:d4:97:ee:1d:07:13:de:b2:a0:01:65:78:e5:c8:68:f9:
c9:b2:f1:c0:61:7c:d5:e5:9c:ff:f1:a0:12:02:61:a4:cc:0a:
ca:1c:cf:08:0b:7e:c6:da:16:bb:04:e8:80:75:df:24:d2:1c:
3d:12:4e:54:ef:44:85:99:c6:c8:5f:8c:27:be:60:d7:04:8a:
a3:fd:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:41 2026 by rpki-client