Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B1338FA0802C11F1A28201C7CE1D38B0.roa
File: B1338FA0802C11F1A28201C7CE1D38B0.roa (raw, json)
Hash identifier: 038eQbCRkYUNUdix+TLp6rqefvvAgoEhd6vNhcQ2kfc=
Subject key identifier: 38:59:FC:23:41:D2:B6:6D:55:5F:92:04:FA:F1:35:28:49:B6:51:3A
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C7F
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B1338FA0802C11F1A28201C7CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:08:07 +0000
ROA not before: Wed 15 Jul 2026 09:08:03 +0000
ROA not after: Wed 31 Dec 2036 09:08:03 +0000
asID: 12083
IP address blocks: 165.49.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3199 (0xc7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:08:03 2026 GMT
Not After : Dec 31 09:08:03 2036 GMT
Subject: CN=6a574df7-e7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:c5:63:4f:44:73:2b:14:04:a1:b2:5d:1f:
9d:62:53:9e:91:49:5c:d6:32:72:9b:be:64:c1:a1:
e9:da:30:de:72:64:27:49:3f:73:ad:77:23:01:92:
81:e7:e2:c5:3d:4a:80:5b:bc:39:b8:ec:c8:8c:83:
d7:42:47:0e:86:fe:6a:42:07:5e:4b:ff:ad:99:f2:
cb:2e:5b:16:a5:a4:3c:b3:89:94:b2:a0:d0:cc:d4:
a2:36:0a:8d:19:bb:17:15:a1:01:a3:23:41:9a:62:
73:a7:26:74:df:fa:33:31:88:41:22:46:6d:06:5e:
41:4a:de:d1:0e:92:cd:f5:df:b2:5f:e4:eb:4c:9a:
f8:4e:f9:94:15:6a:43:6a:1e:0b:9b:ad:86:f0:8f:
be:bb:27:e5:5a:8d:7b:07:40:8c:4b:f1:22:79:5d:
bd:d4:73:01:8d:ee:0c:60:58:58:5b:35:60:98:db:
e1:60:23:64:9d:b2:ad:79:af:b5:93:9f:27:08:9e:
7d:35:81:74:60:50:82:59:cd:19:2a:76:63:b0:03:
3d:b1:19:49:44:92:3f:2b:ce:01:f6:b7:c8:e5:ce:
33:69:a6:15:3e:03:bd:29:4b:3d:4a:e7:e4:11:4a:
02:f0:04:0b:8f:4a:01:12:b5:47:3f:7c:99:e2:ab:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:59:FC:23:41:D2:B6:6D:55:5F:92:04:FA:F1:35:28:49:B6:51:3A
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B1338FA0802C11F1A28201C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.99.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c7:fd:2c:c3:8b:cf:5c:c1:4d:4d:89:02:4c:81:d1:0c:50:
30:4e:a8:ec:44:e5:4b:55:31:2d:2a:19:8a:e0:c8:9c:4b:82:
06:68:de:0a:5b:34:1a:72:8b:00:32:4c:26:6c:a7:e8:28:64:
50:52:13:db:56:93:4e:e6:50:5a:46:91:aa:8b:2f:96:59:bc:
13:73:2a:f5:70:3f:03:ef:84:50:18:33:0b:e9:6a:14:12:88:
05:a1:8e:da:29:7d:24:75:5d:39:51:92:45:4c:f7:c9:81:64:
84:0b:eb:53:2e:ce:3e:cd:1a:4a:78:60:1a:1a:5b:81:27:f2:
95:99:15:db:e2:60:51:4a:74:8b:75:44:eb:9d:db:f9:c5:2a:
bf:55:f5:4c:bf:04:60:df:42:a1:e9:7a:67:f2:3a:a2:ac:80:
fb:66:ab:f1:99:6c:5e:c2:4e:34:70:4a:17:23:59:a2:21:5b:
91:f9:fb:e2:3b:49:94:f9:e7:a8:d7:d4:19:9f:a4:69:c6:4e:
24:f1:df:7f:cf:b4:93:62:63:03:08:4c:54:69:2d:90:fa:67:
13:c4:06:83:92:0b:82:31:77:d7:82:93:ee:86:e4:bd:44:94:
fc:30:67:d9:ee:44:37:2d:85:70:eb:7f:45:ba:3c:d6:ea:8d:
69:79:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client