Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AED701D41F9611F1BBC1F17CDAE4EC9C.roa
File: AED701D41F9611F1BBC1F17CDAE4EC9C.roa (raw, json)
Hash identifier: L8U3daI3bwdToEuND/SLdWFtyG4SuE5HbIjKVtJbIjY=
Subject key identifier: B8:DB:DD:F8:9F:A6:DC:23:D6:C5:55:94:7B:E6:C7:44:CB:AC:66:70
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B31
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AED701D41F9611F1BBC1F17CDAE4EC9C.roa
Signing time: Sat 14 Mar 2026 11:12:27 +0000
ROA not before: Sat 14 Mar 2026 11:12:22 +0000
ROA not after: Wed 31 Dec 2036 11:12:22 +0000
asID: 834
IP address blocks: 165.49.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2865 (0xb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Mar 14 11:12:22 2026 GMT
Not After : Dec 31 11:12:22 2036 GMT
Subject: CN=69b5429b-8cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:df:51:22:b7:9b:67:fe:e1:8a:99:c6:2e:
86:ea:51:57:47:f1:f0:64:55:94:89:1f:fc:f3:59:
e7:15:77:00:e6:2c:f5:61:ff:b8:a4:96:d0:26:1d:
d6:33:6b:06:a5:bb:42:7f:9b:f8:67:2b:68:e2:5b:
a5:64:a6:67:32:de:e3:c5:de:fc:1c:a4:f0:ab:fb:
26:ba:8e:46:51:b6:07:1a:cd:67:43:d5:15:75:6b:
c1:6a:81:40:a7:55:4e:58:61:4c:f0:14:98:d0:fc:
5b:be:cd:aa:51:74:ba:ff:00:e1:d8:73:a2:aa:a5:
5a:5c:43:15:50:86:d7:c0:66:3b:28:0f:84:db:a8:
68:29:b8:71:54:4a:63:6e:9c:3a:89:fb:4c:4f:8f:
63:63:2f:a3:7d:a8:da:d0:9f:0b:a7:b3:9b:5b:01:
59:e8:bb:dd:e7:3a:aa:44:66:29:74:ae:ad:7e:dd:
a2:8b:c0:50:f2:09:ff:91:75:54:a4:62:ec:ef:f1:
a5:e5:3a:e6:52:06:32:0e:e1:54:9e:3b:8c:77:e2:
1d:0d:f0:7a:01:83:07:d5:22:97:bb:f3:1b:9c:d1:
bb:3f:98:fb:27:5b:c3:bc:f3:86:db:92:48:05:23:
7e:03:b7:a9:fe:97:05:69:c4:2b:98:3f:b3:ad:af:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:DD:F8:9F:A6:DC:23:D6:C5:55:94:7B:E6:C7:44:CB:AC:66:70
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AED701D41F9611F1BBC1F17CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.245.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8e:04:97:f3:b4:cf:0c:f2:b5:df:b2:87:0f:d3:06:1b:c7:
bd:83:41:fd:09:de:b9:55:eb:f4:e3:b7:ed:d7:86:8e:db:f5:
3b:ba:13:a1:59:a3:f1:72:cd:13:6d:d9:b9:4c:3b:02:5e:ff:
0e:94:f5:d4:d8:c7:86:cd:06:fa:d9:26:b9:e8:af:f6:f9:40:
bb:c6:f5:9e:b1:e3:33:c8:74:10:e8:98:c8:67:60:6b:0b:18:
81:b7:4c:e0:75:fe:bf:d9:bf:57:3c:7d:73:4a:47:f9:08:85:
f5:a3:93:b7:6d:50:f1:97:6f:6e:bc:24:d2:b2:19:04:5e:9a:
33:dc:43:35:5c:9c:c8:8f:8c:d1:e5:99:70:da:4a:db:0f:88:
35:0f:7b:0e:da:a3:df:40:d2:a9:99:e3:2b:32:61:29:22:47:
ce:a7:4d:e8:0d:ed:84:0f:7e:74:7f:05:31:08:21:54:32:ac:
ca:ac:88:59:45:a2:b9:dc:60:b6:55:19:53:67:2f:73:46:cb:
e5:98:0d:7b:18:a5:2e:5c:43:7b:b4:36:7e:cc:95:12:96:72:
69:48:fd:42:a6:40:68:4a:34:33:0d:57:08:8e:50:a1:02:09:
a3:59:c1:3d:63:df:13:ef:29:e6:95:f9:da:c9:cf:dd:ed:ad:
6e:37:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 10:03:41 2026 by rpki-client