Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B406B574413711F1994EDDF3CE1D38B0.roa
File: B406B574413711F1994EDDF3CE1D38B0.roa (raw, json)
Hash identifier: 5WA4hCdlQmmW2xY7Ir6eSOpIClKIROo+L01HemJ1a/I=
Subject key identifier: EF:98:EA:69:A5:2A:1C:1B:42:3F:7F:BB:E6:32:A8:B9:04:D8:37:4D
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B90
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B406B574413711F1994EDDF3CE1D38B0.roa
Signing time: Sun 26 Apr 2026 06:18:13 +0000
ROA not before: Sun 26 Apr 2026 06:18:07 +0000
ROA not after: Wed 31 Dec 2036 06:18:07 +0000
asID: 16509
IP address blocks: 165.49.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 05 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2960 (0xb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 26 06:18:07 2026 GMT
Not After : Dec 31 06:18:07 2036 GMT
Subject: CN=69edae25-6e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:3f:2b:ea:5f:db:48:51:cb:24:b3:18:cf:
7c:cc:ab:c1:a6:40:97:0a:50:31:d0:df:9b:c1:63:
f1:f5:93:de:01:58:af:35:cc:3e:5c:cb:93:84:80:
62:ff:06:17:4f:b5:d3:ea:aa:32:37:9d:ae:1a:fd:
d5:ba:b9:47:3e:8d:b8:de:ba:33:e1:2e:83:55:20:
16:6a:7e:2f:31:b0:33:5b:35:b9:0e:d4:06:71:6c:
c4:13:36:08:f5:2d:3a:e4:49:70:66:e1:74:ab:2e:
4d:de:57:39:83:27:bb:5d:8e:d2:87:12:3b:48:db:
48:48:b5:2d:56:11:e2:45:36:19:26:17:e9:c3:9a:
a0:14:21:d6:bf:cc:5b:0b:e6:5a:06:af:4a:65:66:
6e:fd:93:69:bd:46:bb:de:85:a8:17:f2:45:74:0e:
80:80:94:e9:9a:bc:80:eb:0e:47:31:67:15:ec:2e:
b6:6f:b5:1c:be:28:9e:9e:ab:c5:df:f6:cc:18:31:
14:cd:9a:32:ef:94:10:b6:01:30:25:90:ad:b2:cb:
6c:04:63:a3:7c:95:6c:fe:71:bb:42:26:f8:cb:72:
6a:77:c3:c2:f9:75:8b:11:96:96:f3:89:c2:af:5e:
4f:dd:72:e0:50:10:3a:e1:07:03:e4:e0:ad:5c:be:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:EA:69:A5:2A:1C:1B:42:3F:7F:BB:E6:32:A8:B9:04:D8:37:4D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B406B574413711F1994EDDF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.250.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2c:5a:92:66:95:be:5c:70:6f:3a:91:91:62:86:0b:01:fa:
60:57:f0:07:29:ab:23:6c:b4:03:8f:f9:6a:d3:5b:f8:d9:6a:
e8:a0:d7:3d:15:f0:11:61:98:17:23:9f:a6:3a:1f:a0:bd:d9:
00:1f:06:d4:7a:bb:1c:2f:46:05:a3:7d:b5:11:da:18:13:6f:
84:20:e7:89:81:a4:f7:1c:50:f0:65:20:b4:52:3f:20:45:00:
ae:f0:57:64:2e:9e:ad:a2:c1:f5:d2:7b:58:28:a3:2c:ee:97:
60:b8:91:5b:7c:48:5c:84:58:00:fd:4b:93:67:a8:b9:31:0c:
90:db:17:e6:c9:27:6d:cd:00:95:6f:c7:0a:24:7f:65:e2:af:
5d:92:49:01:71:74:47:16:f0:53:c7:d9:14:d6:b4:29:3d:f7:
e7:a1:d6:cd:d4:ed:36:be:c6:08:28:4e:f5:a4:80:6c:8f:95:
4d:68:b8:0d:bd:0e:7e:e4:49:37:60:12:ef:99:60:aa:79:3f:
e0:9b:2a:bb:1c:53:9e:e1:e0:98:c9:75:a5:d3:20:e2:f1:92:
a3:62:26:39:8f:b4:e4:04:40:34:78:24:e0:83:9f:56:53:3e:
59:65:89:27:c4:1d:be:2a:f4:cc:a4:82:df:da:85:c0:68:46:
22:9c:60:fa
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA0MjYwNjE4MDdaFw0zNjEyMzEwNjE4MDdaMBgxFjAU
BgNVBAMTDTY5ZWRhZTI1LTZlOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClzD8r6l/bSFHLJLMYz3zMq8GmQJcKUDHQ35vBY/H1k94BWK81zD5cy5OE
gGL/BhdPtdPqqjI3na4a/dW6uUc+jbjeujPhLoNVIBZqfi8xsDNbNbkO1AZxbMQT
Ngj1LTrkSXBm4XSrLk3eVzmDJ7tdjtKHEjtI20hItS1WEeJFNhkmF+nDmqAUIda/
zFsL5loGr0plZm79k2m9RrvehagX8kV0DoCAlOmavIDrDkcxZxXsLrZvtRy+KJ6e
q8Xf9swYMRTNmjLvlBC2ATAlkK2yy2wEY6N8lWz+cbtCJvjLcmp3w8L5dYsRlpbz
icKvXk/dcuBQEDrhBwPk4K1cvhdzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU75jq
aaUqHBtCP3+75jKouQTYN00wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0I0MDZCNTc0NDEzNzExRjE5OTRFRERGM0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMfowDQYJKoZIhvcNAQELBQAD
ggEBAIAsWpJmlb5ccG86kZFihgsB+mBX8AcpqyNstAOP+WrTW/jZauig1z0V8BFh
mBcjn6Y6H6C92QAfBtR6uxwvRgWjfbUR2hgTb4Qg54mBpPccUPBlILRSPyBFAK7w
V2Qunq2iwfXSe1gooyzul2C4kVt8SFyEWAD9S5NnqLkxDJDbF+bJJ23NAJVvxwok
f2Xir12SSQFxdEcW8FPH2RTWtCk99+eh1s3U7Ta+xggoTvWkgGyPlU1ouA29Dn7k
STdgEu+ZYKp5P+CbKrscU57h4JjJdaXTIOLxkqNiJjmPtOQEQDR4JOCDn1ZTPlll
iSfEHb4q9Mykgt/ahcBoRiKcYPo=
-----END CERTIFICATE-----
Generated at Sun May 3 14:47:49 2026 by rpki-client