Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BAD24880802C11F199920DC7CE1D38B0.roa
File: BAD24880802C11F199920DC7CE1D38B0.roa (raw, json)
Hash identifier: CmJ32CfD1BiEYcrDhuK5aUUOZ/sVIWmNfXz5FcZyh5o=
Subject key identifier: DC:C1:20:15:CB:73:FB:E7:C7:9B:B9:21:8C:16:18:27:F3:B3:4F:EF
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C81
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BAD24880802C11F199920DC7CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:08:23 +0000
ROA not before: Wed 15 Jul 2026 09:08:19 +0000
ROA not after: Wed 31 Dec 2036 09:08:19 +0000
asID: 12083
IP address blocks: 165.49.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:08:19 2026 GMT
Not After : Dec 31 09:08:19 2036 GMT
Subject: CN=6a574e07-ddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:69:51:10:30:27:00:bc:e4:1b:85:95:95:
45:e6:81:2e:29:9b:51:6b:c4:83:0a:1a:1e:e5:0a:
45:4c:cd:2f:29:0b:25:68:3a:8b:8d:70:55:15:7b:
96:63:b0:1e:2d:00:a4:42:85:60:99:d2:90:d8:65:
18:15:81:a6:cb:9f:c8:0a:a8:3b:6b:8b:7b:cf:84:
9c:21:d4:fb:38:ce:be:f2:a2:ae:5f:f4:2c:58:65:
61:00:91:b6:c6:20:58:b4:2d:6a:1c:c2:17:9e:0e:
71:3c:0d:9c:8c:68:5c:4e:82:5f:ee:71:36:e0:29:
d1:34:a4:a8:a4:f0:86:ce:e5:19:ed:1b:57:a2:5c:
72:ae:0a:05:16:f7:f9:98:8c:ef:aa:60:43:f3:e8:
62:eb:a3:ba:d7:ce:64:6d:58:65:c5:10:e7:52:13:
bd:29:6e:ac:89:72:e3:cb:03:55:41:88:00:8b:92:
f2:7f:aa:a9:e3:9a:aa:67:cc:fd:90:3d:d9:20:be:
a1:e7:65:de:f6:75:16:3d:51:f0:e9:c5:49:a8:b4:
23:64:2e:e2:a8:a1:b9:d0:90:36:d1:1a:31:71:ea:
1b:d5:c1:5a:2f:88:06:2e:4b:d1:5e:da:d8:9c:39:
4b:9e:28:4e:b6:7e:d6:6c:84:41:a0:f5:e2:70:97:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C1:20:15:CB:73:FB:E7:C7:9B:B9:21:8C:16:18:27:F3:B3:4F:EF
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BAD24880802C11F199920DC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a0:49:f9:c3:de:4a:7d:62:b5:47:13:e8:bc:a2:e7:e2:ff:
24:51:6e:3e:69:92:99:0b:40:b8:21:0a:99:12:66:a9:af:b5:
98:bc:6e:6a:58:86:4f:cc:9b:5f:a5:4e:8e:06:37:11:7c:1b:
f9:67:8d:1a:d2:b7:cd:40:ae:eb:3a:53:2e:41:a3:a5:b4:ef:
5c:5f:77:ff:03:54:88:f7:6a:f0:41:4c:30:e9:ac:87:94:2e:
31:db:14:c8:a8:d2:4f:8e:ca:e9:96:b2:e5:cd:08:a7:70:f7:
d8:80:73:f2:12:4a:74:0e:a4:43:15:7a:a4:6d:39:a8:07:36:
e7:ba:e5:15:b2:6c:e5:b3:9c:25:5a:ea:42:e3:20:ab:a3:d6:
82:9e:83:25:56:38:3e:60:b1:f8:fb:29:51:a1:39:3e:68:06:
c0:3f:d4:00:31:2b:08:b0:9b:51:c1:f9:6f:b5:3b:59:95:d8:
6e:b7:22:41:86:b1:be:d6:37:eb:16:eb:97:3a:24:22:9b:70:
d9:a1:5f:ff:d7:d2:4e:c0:6b:96:90:fc:d3:62:55:78:32:ea:
61:90:0c:42:6b:88:4d:15:85:13:22:47:88:9d:53:52:c1:cb:
eb:8c:3c:87:07:aa:3f:2c:26:c1:41:e2:42:0c:3e:23:0c:58:
d9:cd:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:11 2026 by rpki-client