Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A16D8576811C11F1AF7237BDCE1D38B0.roa
File: A16D8576811C11F1AF7237BDCE1D38B0.roa (raw, json)
Hash identifier: MdVwfh7GwEr9h5eVFfbBU0x92ShNGYdeD2QlQpJVRBI=
Subject key identifier: AF:2E:3A:89:14:D7:9B:A4:B2:FE:8A:3A:E5:F0:B9:65:A1:56:31:76
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CD7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A16D8576811C11F1AF7237BDCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:45:39 +0000
ROA not before: Thu 16 Jul 2026 13:45:36 +0000
ROA not after: Wed 31 Dec 2036 13:45:36 +0000
asID: 7029
IP address blocks: 165.49.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:45:36 2026 GMT
Not After : Dec 31 13:45:36 2036 GMT
Subject: CN=6a58e083-cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:d6:23:63:41:58:e1:d2:87:ec:1a:18:36:
08:53:2b:75:7e:6e:dc:29:01:49:8a:95:fe:d7:6e:
f5:35:34:8f:b7:f5:d5:f7:4c:4e:cc:e9:32:b9:6b:
e2:22:a2:0c:31:d6:df:c5:60:a4:1d:2a:19:6b:21:
44:4b:17:00:57:44:33:ce:86:27:53:3b:a0:a1:d3:
ab:60:c2:75:7c:87:48:e9:09:92:10:fd:5e:45:07:
a5:b4:24:fb:c9:d6:30:bd:28:3b:56:1b:a1:fa:66:
8f:24:d1:e9:9a:f9:e6:32:9f:0c:1d:2d:31:38:8b:
f2:34:44:84:d8:04:21:39:c3:7a:07:1b:5c:d8:21:
ac:6f:0a:27:43:c5:ba:cf:ca:b5:f8:d3:a0:33:d4:
3c:18:ac:86:16:0f:2b:dc:2e:bf:f5:df:9a:8b:c5:
8b:69:83:21:67:67:b1:90:07:85:98:38:1c:67:29:
36:7f:48:52:d5:f3:e4:96:01:e6:3a:45:ff:5f:21:
6b:8c:d0:4d:de:34:81:b7:c5:0b:83:17:ae:78:89:
d7:c2:cc:b3:6e:83:74:78:14:22:db:ae:5f:31:99:
e3:64:1f:ff:fa:b1:45:4e:24:b6:2b:6f:16:7a:85:
43:9f:ed:b1:82:b8:96:8e:6c:73:48:a9:d0:51:12:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:3A:89:14:D7:9B:A4:B2:FE:8A:3A:E5:F0:B9:65:A1:56:31:76
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A16D8576811C11F1AF7237BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d9:31:4a:92:5e:42:38:09:cc:c1:a8:74:a8:54:07:d1:87:
0c:a8:9f:00:73:99:69:14:95:d3:ef:68:83:30:1a:9d:a0:6e:
bf:84:75:a4:4f:dd:02:ab:eb:98:43:b0:ac:1a:01:d6:24:6d:
c9:13:bb:1f:42:14:43:c1:c3:ad:05:8b:37:04:b9:e8:14:bc:
2d:3c:b9:5f:b5:e9:74:a2:58:00:6b:05:fd:d2:ee:16:fb:5b:
29:0b:8d:68:ef:95:ee:11:16:cb:8a:7c:bb:49:61:9c:be:ba:
ee:4c:eb:59:dc:e7:10:ca:e7:d8:0c:9f:93:41:dd:69:a7:7d:
fd:f1:a4:98:ce:47:4b:ab:c8:70:13:f5:d5:d6:03:08:f0:2f:
ec:5f:31:b6:94:18:80:32:b8:f3:b2:94:a9:d5:f8:36:44:40:
3a:b7:e2:c6:51:9f:1d:3f:7e:27:11:80:0e:f9:b9:83:4c:fe:
0e:3a:90:fe:9e:51:4a:1d:31:b7:81:86:3c:ce:7c:ab:73:cd:
8f:41:67:36:10:da:2c:a1:86:50:74:07:92:14:27:85:69:15:
21:5e:67:78:59:c6:36:41:a3:03:97:1d:c0:45:09:3e:0a:2c:
94:c5:d9:5a:c2:a3:be:aa:af:14:f6:97:1a:6c:ca:65:46:ed:
18:a2:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:42 2026 by rpki-client