Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A7A52AF2802C11F19F70F8C6CE1D38B0.roa
File: A7A52AF2802C11F19F70F8C6CE1D38B0.roa (raw, json)
Hash identifier: ZnGnRxK5VCXjJroGsipydIcTODg6JE/XUbw6dauAEck=
Subject key identifier: EC:D4:68:8C:06:C7:4C:0A:16:42:76:2E:03:63:BF:16:FD:7D:60:D1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C7D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A7A52AF2802C11F19F70F8C6CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:07:51 +0000
ROA not before: Wed 15 Jul 2026 09:07:47 +0000
ROA not after: Wed 31 Dec 2036 09:07:47 +0000
asID: 12083
IP address blocks: 165.49.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:07:47 2026 GMT
Not After : Dec 31 09:07:47 2036 GMT
Subject: CN=6a574de7-d68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:6a:9c:00:8e:4a:d9:31:d9:a7:db:79:6b:
1a:79:64:d6:14:d7:3b:0e:53:d5:2d:bd:62:59:80:
fb:85:72:ce:4c:a2:b9:5a:a1:d9:b4:9b:cf:ea:58:
41:91:bb:37:1f:4f:95:aa:69:62:8f:a5:53:c9:7a:
5b:44:4a:df:ff:b0:e1:ac:96:f8:07:27:51:53:d8:
18:9c:e3:7c:b6:18:b1:98:c2:cb:0e:42:92:79:85:
9a:48:46:77:c6:57:08:66:5e:c3:41:33:d2:dc:3c:
5a:77:ba:b3:dc:bd:56:63:18:2d:de:85:73:74:b2:
5f:33:5e:09:ad:65:13:6b:2a:73:b6:3c:6c:ff:c3:
ae:ce:c1:1e:6a:ca:3a:64:f0:8a:3c:4e:58:c9:22:
24:a4:87:5d:87:b1:21:7a:51:8a:03:ef:29:e5:68:
5b:1f:6d:71:5b:5b:c5:1d:b2:f6:e3:a4:e6:1a:eb:
f9:fa:b9:f1:9e:38:aa:27:1b:14:97:20:1b:df:d5:
9e:8c:29:01:21:fd:b0:cf:35:c3:dc:6f:ed:28:b9:
e3:cc:f7:6c:ef:be:7b:dd:f8:01:50:49:74:9b:54:
72:d6:95:c9:a0:4b:ce:8c:bc:07:bc:5e:0c:75:b3:
31:09:aa:6e:69:ea:6a:82:b5:e2:06:29:77:26:4f:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D4:68:8C:06:C7:4C:0A:16:42:76:2E:03:63:BF:16:FD:7D:60:D1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A7A52AF2802C11F19F70F8C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a8:36:07:e9:9d:c8:c8:84:5d:92:00:9b:43:c7:3c:f5:3c:
01:f2:65:0f:68:ed:e0:b9:5a:cf:f5:2b:d1:25:70:2e:bc:d4:
56:29:21:60:9f:50:55:08:9c:65:0d:03:2e:5f:48:89:4e:79:
d7:1d:6b:9a:e6:18:5b:f5:7e:55:1c:74:e3:2e:ba:4c:73:5a:
c8:de:7f:e6:3c:00:b6:cc:e2:4f:4b:c2:32:6a:7a:ab:50:0a:
1a:4c:da:f4:86:7a:15:55:1b:e0:54:91:76:52:49:93:36:90:
f7:64:05:be:b1:1a:b7:32:67:74:a0:d9:07:34:98:94:02:38:
09:79:df:1f:c2:fb:26:01:e1:19:98:43:07:01:c0:51:15:f2:
57:14:36:b1:b4:5f:87:d7:0b:a1:b8:7b:a3:d9:87:59:f3:19:
03:28:91:a3:fb:81:b7:59:b1:07:62:4e:66:81:59:c2:84:59:
85:63:56:40:08:f7:2f:2b:e7:1b:4c:05:8a:8a:99:9a:9e:bc:
57:96:3e:85:c5:55:f0:df:ba:4d:20:b9:2e:da:44:d6:e3:18:
2b:12:38:09:86:7d:82:84:be:89:07:8f:00:09:55:9b:bc:8e:
60:4e:76:69:1c:20:53:5d:4e:f0:df:62:03:2b:ef:0c:5b:c7:
e1:e0:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:11 2026 by rpki-client