Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B898B2C4802D11F1BB38CFCBCE1D38B0.roa
File: B898B2C4802D11F1BB38CFCBCE1D38B0.roa (raw, json)
Hash identifier: KEpgUGv2inHeGOQvn7rlbaTUJeGrUYSLM9AEHmDzNJ8=
Subject key identifier: 99:B6:2C:60:F1:48:BA:99:81:ED:37:43:95:34:44:49:6B:38:E2:F9
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CA1
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B898B2C4802D11F1BB38CFCBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:15:29 +0000
ROA not before: Wed 15 Jul 2026 09:15:25 +0000
ROA not after: Wed 31 Dec 2036 09:15:25 +0000
asID: 12083
IP address blocks: 165.49.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3233 (0xca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:15:25 2026 GMT
Not After : Dec 31 09:15:25 2036 GMT
Subject: CN=6a574fb1-b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:22:3e:68:4b:55:68:c8:4f:1d:41:35:d5:
42:45:79:b7:18:80:35:ff:d2:7e:2c:04:fa:55:bf:
d5:c7:94:56:61:02:92:1b:e6:b8:14:19:ee:41:ba:
e1:85:73:c2:a2:08:aa:1c:a8:49:08:64:50:99:6f:
f5:7c:ce:c4:0d:d5:07:2e:7e:ef:5a:71:52:7d:59:
6a:ef:0d:f8:c8:ee:f4:1c:40:07:29:6f:55:6c:08:
44:67:73:ea:89:9d:62:80:5e:15:11:e7:44:de:81:
0b:6a:f2:35:a7:82:eb:30:0d:8f:dc:e1:b7:6e:64:
d7:14:4d:6e:e3:e4:dd:78:27:9f:d4:3e:09:37:04:
0c:58:24:5e:ce:44:08:89:83:d5:8f:8f:6d:c9:a3:
f1:7e:2e:b9:bf:fd:18:99:ee:46:37:53:3c:36:6d:
ef:6b:37:ff:0c:80:45:56:a0:5f:93:72:aa:b4:42:
4d:a1:ae:10:e7:76:b7:eb:4e:32:8f:ee:f9:f4:12:
42:4c:82:7f:de:11:09:95:41:8e:70:97:d6:a7:cf:
de:63:4d:33:65:85:dc:de:9d:27:a8:5a:ef:82:c0:
c7:d9:cf:12:1e:d6:da:95:ea:68:95:5b:1a:3e:3c:
00:1c:e5:79:3f:d4:f1:03:99:76:b7:a8:a5:d2:8e:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:2C:60:F1:48:BA:99:81:ED:37:43:95:34:44:49:6B:38:E2:F9
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B898B2C4802D11F1BB38CFCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.100.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c3:57:75:f3:8f:15:b3:86:71:b6:2e:aa:01:1c:da:0a:f1:
b5:f9:f5:10:22:cf:b1:ca:84:26:7b:ec:0c:b4:25:0f:9d:59:
7b:fd:e2:15:49:bf:75:3d:f3:55:36:d3:50:8e:fb:c4:b3:b9:
7e:3a:4c:9a:fd:b5:29:55:5f:e5:32:db:4f:9b:f0:90:4f:94:
50:fc:c8:4f:17:74:cb:a8:05:d3:5d:d3:0d:d5:66:99:f4:2a:
e6:c7:0a:1d:6c:8c:fa:60:fc:60:ad:3c:b5:92:0e:bd:6e:b0:
36:49:4c:1e:57:04:37:0d:e1:60:b5:38:39:a2:69:7b:1c:7e:
8e:ae:5b:9a:bf:48:82:ca:4c:94:e8:ea:93:01:9b:5d:82:bd:
7d:19:de:cd:79:76:9e:46:99:c0:8d:75:bb:c8:bb:14:ce:09:
e9:9d:02:4d:16:87:61:3d:25:0d:59:0d:1f:90:24:95:6c:45:
4d:46:09:c4:ad:08:71:98:84:e8:3c:3c:e4:0f:f0:35:98:d0:
b9:40:37:dc:8e:45:b4:26:bf:e0:ee:ac:88:c9:e3:5c:67:70:
83:b0:27:f7:4a:cc:11:bd:13:2b:54:d0:3b:e7:21:d4:ae:58:
9e:32:6f:ed:f1:05:75:37:43:02:3b:c7:dd:4f:b3:db:4b:43:
84:b3:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:15 2026 by rpki-client