Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A4759BE0802D11F190597DCBCE1D38B0.roa
File: A4759BE0802D11F190597DCBCE1D38B0.roa (raw, json)
Hash identifier: vpLc2sNVM7749eCmpBTAplkG5AZg+mkhh1hrAooPRPc=
Subject key identifier: 64:1C:50:F6:70:6A:27:09:BE:9E:FE:33:7C:BE:02:C5:01:AA:3B:56
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C9D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A4759BE0802D11F190597DCBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:14:55 +0000
ROA not before: Wed 15 Jul 2026 09:14:51 +0000
ROA not after: Wed 31 Dec 2036 09:14:51 +0000
asID: 12083
IP address blocks: 165.49.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:14:51 2026 GMT
Not After : Dec 31 09:14:51 2036 GMT
Subject: CN=6a574f8f-d424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:bf:51:43:c9:f2:c2:26:af:99:3e:e7:7e:
ad:fa:b3:a0:d5:eb:20:f6:c4:c0:3c:64:7d:35:34:
61:1e:18:c0:97:f5:c0:4e:c0:da:6d:4a:63:59:b8:
46:4a:56:38:6e:dc:94:d0:6f:69:bf:d8:1f:ee:0a:
28:ee:da:d5:52:cc:2a:92:ba:d3:80:f6:b1:81:90:
08:2c:e4:89:77:99:5d:65:3a:34:b2:67:14:b7:13:
a6:93:43:1e:fd:ff:0c:ac:3a:f5:11:2a:8a:c6:93:
92:4a:d7:23:a2:ac:89:af:d9:78:17:fe:40:7f:d2:
e1:98:38:e8:48:51:c4:3c:59:32:75:87:68:c1:39:
c8:4a:32:af:f5:27:3c:d5:d8:2b:6f:9d:56:0f:4d:
2c:01:01:24:95:00:17:59:9d:28:1a:b6:2e:23:22:
3c:fd:53:f9:03:70:4d:21:65:e0:df:59:82:9e:2b:
b0:ee:ea:0c:08:00:41:9a:f8:66:1a:a6:29:93:ec:
93:34:a3:7b:3b:1d:c5:58:3c:81:7c:2f:46:4c:dd:
3c:42:84:60:26:e3:35:80:db:32:27:c2:7a:09:d5:
30:5a:78:76:c9:0a:10:5e:be:5a:eb:f6:55:79:fb:
39:8a:9a:33:85:c0:56:2c:4f:cc:2e:e8:8c:29:27:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:50:F6:70:6A:27:09:BE:9E:FE:33:7C:BE:02:C5:01:AA:3B:56
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A4759BE0802D11F190597DCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.91.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:16:21:7b:78:84:14:bc:32:bb:c9:22:e3:f6:e2:40:7e:7d:
19:43:ca:78:3a:e0:0d:73:70:c5:d1:fa:c4:b3:26:1a:72:2b:
07:76:43:f7:a2:ef:ee:c4:82:2e:5a:e3:7a:23:18:b0:18:75:
07:50:dd:fc:3f:d5:77:30:b0:50:71:11:03:4a:b6:dd:7e:85:
50:5b:1c:78:fa:16:54:ea:a5:4a:3a:89:a3:44:c2:2c:f3:4a:
85:d4:d8:fb:95:3d:3c:c7:a1:a2:a7:08:82:75:f9:c8:47:cb:
0c:22:0b:32:e2:36:a8:68:2f:9d:27:e0:d6:c5:77:98:71:08:
f0:21:37:df:e6:bc:c3:c0:42:d2:36:ba:51:60:a0:f9:db:67:
4c:7e:7f:4e:bd:30:23:20:8d:b9:93:8b:32:60:ce:46:f3:e1:
f3:8c:08:31:cf:14:0c:00:25:de:f5:db:28:60:6a:40:38:55:
52:2a:90:d7:06:c0:ed:e1:16:da:26:8f:01:3c:c7:7b:14:a7:
4f:b2:52:be:fd:58:f7:99:fa:d2:a3:4c:20:e0:6f:3a:72:79:
0c:51:eb:92:b3:55:7e:2e:43:84:cd:83:a1:e2:26:32:8f:f4:
35:83:28:a6:8f:eb:1e:6c:c8:b8:66:9b:6a:8c:d2:de:0b:55:
31:b1:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client