Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AEBEDB0C802D11F19937C3CBCE1D38B0.roa
File: AEBEDB0C802D11F19937C3CBCE1D38B0.roa (raw, json)
Hash identifier: sx4aueY8zWTiC5bofXLFL55LRg8c4yZpDS9ZcYrGiPw=
Subject key identifier: 0B:FA:F0:6C:BB:4A:9F:A0:0A:49:E1:C8:9B:6F:D1:41:8F:3E:07:EC
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C9F
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AEBEDB0C802D11F19937C3CBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:15:12 +0000
ROA not before: Wed 15 Jul 2026 09:15:08 +0000
ROA not after: Wed 31 Dec 2036 09:15:08 +0000
asID: 12083
IP address blocks: 165.49.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:15:08 2026 GMT
Not After : Dec 31 09:15:08 2036 GMT
Subject: CN=6a574fa0-1278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:79:69:7a:d9:a8:5a:1f:20:b4:45:ed:c4:
c8:df:e0:bd:99:35:b9:e1:e0:a3:f7:82:2b:19:f1:
58:dc:c3:35:13:bd:57:16:73:bd:ef:e2:74:ea:43:
b6:60:e2:ad:47:5f:83:da:21:53:75:10:3c:f4:15:
6a:38:b1:85:f9:48:23:35:b2:2d:8a:f9:5c:12:24:
d2:42:25:75:3c:41:c6:40:72:7e:db:7d:38:d1:57:
a9:76:a7:37:f2:0a:1c:7c:48:72:e6:fc:5f:60:0a:
d3:1d:cc:52:f0:8e:2f:f5:e3:72:7f:40:40:16:54:
60:ed:bd:29:50:27:3c:e1:6b:d8:8b:06:ac:c4:67:
56:df:af:76:84:1e:d9:6f:72:0c:fd:9d:bd:d9:18:
e8:a0:be:02:5c:a6:cd:c5:c3:9e:f9:83:2b:11:6e:
b1:03:5a:e9:c9:28:f5:60:48:2e:10:84:6d:a9:bb:
35:81:3c:cf:85:cb:69:33:0e:c2:98:bd:f5:38:b3:
4a:f5:f2:5d:1f:e8:e8:28:77:28:df:55:67:6d:a9:
5e:54:1e:39:e4:08:c7:8a:31:c0:3c:13:ff:8b:ea:
36:ef:84:ca:58:a2:0b:5d:16:fe:8f:ed:c9:ff:e2:
28:48:d4:c5:3f:49:83:a4:1c:68:51:a3:26:3c:c8:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:F0:6C:BB:4A:9F:A0:0A:49:E1:C8:9B:6F:D1:41:8F:3E:07:EC
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AEBEDB0C802D11F19937C3CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.90.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ed:97:d3:49:6b:74:f2:ec:48:3d:de:39:c8:2e:97:36:aa:
f5:ca:bc:25:83:cb:8b:e3:14:6e:3f:72:cb:28:d1:9d:c7:35:
52:a5:67:69:56:b7:2e:c4:e9:f5:40:a9:38:a7:e3:0e:83:20:
f2:75:90:42:e9:a4:93:6d:b9:89:76:06:22:e8:26:a4:30:e5:
4e:74:77:fa:0a:ee:7c:42:58:09:51:d7:b4:d0:4b:53:19:80:
c4:7f:6b:16:83:14:be:1b:0b:b2:da:38:4e:e8:e3:11:33:f3:
7b:9c:79:46:d8:e2:f9:96:24:c0:4d:33:73:b4:58:91:2d:e3:
1d:ce:60:5f:bc:5a:de:ba:5d:cb:9f:7c:5a:b1:f7:4e:51:18:
d8:e5:16:6f:f3:2f:ba:f8:f9:80:b2:00:d3:8b:d1:a2:12:02:
0c:8f:f8:69:7f:96:42:1d:39:0c:1d:a2:5b:22:07:e0:1b:74:
a7:8c:b8:63:d7:8a:30:ee:09:a7:61:dc:bb:4e:aa:2d:53:23:
5b:b9:95:b1:f2:72:8c:0f:14:c5:9a:ca:4b:6c:cd:27:bc:4c:
b3:79:16:8a:ad:b6:86:54:b1:ac:95:53:4f:a0:28:0d:0b:99:
dd:a0:eb:41:01:7e:56:40:0b:c4:f9:83:90:ec:af:5f:fb:64:
1c:67:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:10 2026 by rpki-client