Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AB883F56811C11F190503CBDCE1D38B0.roa
File: AB883F56811C11F190503CBDCE1D38B0.roa (raw, json)
Hash identifier: L0JeT/POyiQWEAqWpGMYUfMoJUFQKNVBrVAXdGPAgZI=
Subject key identifier: 2A:A4:50:59:2B:81:3E:AD:F6:14:6F:52:39:94:BC:7B:D6:4A:5D:F9
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CD9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AB883F56811C11F190503CBDCE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:45:56 +0000
ROA not before: Thu 16 Jul 2026 13:45:53 +0000
ROA not after: Wed 31 Dec 2036 13:45:53 +0000
asID: 7029
IP address blocks: 165.49.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:45:53 2026 GMT
Not After : Dec 31 13:45:53 2036 GMT
Subject: CN=6a58e094-3b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:ff:62:f7:2e:fc:b8:c7:29:f6:7c:95:c9:
55:60:72:4b:b2:15:47:2e:27:15:18:05:85:0f:d0:
84:19:e3:0b:be:2e:3b:4c:a0:13:7f:a7:a4:00:c0:
fb:19:69:bf:0b:5e:29:53:7f:d2:38:b3:be:36:1c:
98:f9:c3:ad:2d:6e:1b:03:ef:c1:84:cf:55:a8:12:
46:62:85:d6:fb:51:a5:2b:07:97:6b:25:0d:03:4f:
13:5d:45:00:d1:37:af:62:69:f1:ff:4c:b3:20:4f:
04:a6:33:53:c2:8b:6b:39:c9:c1:a6:5d:de:b5:de:
36:ce:d1:0c:af:4f:5a:13:37:9d:0a:53:59:2d:89:
d4:6e:09:31:df:c7:b9:dc:53:98:fd:63:4f:e0:da:
74:e4:dc:92:57:0a:42:0d:56:ce:59:a1:02:3d:79:
12:2a:18:a2:8b:16:69:6c:bb:ce:78:b8:19:91:71:
c5:c3:00:c9:49:87:49:9a:e1:c1:bf:94:c6:12:74:
16:a4:af:11:d3:11:58:78:51:cd:16:a9:8c:b4:c7:
d4:ee:52:41:d7:74:09:af:15:10:65:46:f6:18:a2:
4f:8d:90:33:a1:54:f3:b6:1a:73:fb:4d:8c:02:f4:
0c:d8:86:6a:61:33:8b:fa:5d:28:1e:9f:84:50:87:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:50:59:2B:81:3E:AD:F6:14:6F:52:39:94:BC:7B:D6:4A:5D:F9
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AB883F56811C11F190503CBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:19:e2:1e:c8:9e:79:85:a5:80:91:8e:6e:0e:78:2c:59:dd:
a9:ac:29:4c:d8:4a:2c:14:ef:b3:bd:fd:2f:f1:7a:b7:70:5c:
68:dc:ad:4f:87:59:dd:80:20:7c:a8:64:dd:88:7c:6b:59:4e:
13:bb:e4:7b:7c:68:ec:7e:a0:90:6b:9f:76:1b:ca:dc:0f:11:
66:9c:55:6f:78:74:ee:6a:5f:30:95:0a:a9:51:b9:ee:09:88:
15:dd:d1:67:8b:cf:5e:13:18:ca:7d:92:18:fa:08:c1:2b:f2:
89:1f:6a:02:ec:aa:cf:7e:cb:63:e0:cc:32:3a:d1:b6:99:4c:
5f:90:6c:43:8e:6c:26:47:6a:72:51:01:28:ac:80:7b:cd:13:
31:ff:9b:54:cf:e9:6d:95:20:99:88:88:c2:58:31:d8:23:43:
d3:3a:59:63:41:fc:d5:fb:f0:72:01:64:14:96:74:d7:1e:2d:
cf:7e:70:96:3d:bb:72:45:19:4f:c4:82:4d:38:7c:15:ac:07:
0d:b3:ce:72:fa:c5:68:1a:ff:d3:3c:bb:7e:8b:32:46:0c:92:
31:26:a0:3f:49:ea:93:c1:73:eb:6d:b8:fc:7d:f1:27:16:d1:
80:ac:71:d1:3a:fc:18:0b:ab:c8:4f:c9:61:5a:a9:e3:97:99:
a2:ae:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:18 2026 by rpki-client