Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BDB03454811C11F1A553C5C0CE1D38B0.roa
File: BDB03454811C11F1A553C5C0CE1D38B0.roa (raw, json)
Hash identifier: ++gBB3eDlJZjDR9bDjgrpuA643XLIhI1CB/yuU1JPG0=
Subject key identifier: 71:A7:B8:31:8E:61:78:C6:8F:C4:02:DE:E4:C1:80:B7:FC:27:15:E4
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CDB
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BDB03454811C11F1A553C5C0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:46:27 +0000
ROA not before: Thu 16 Jul 2026 13:46:23 +0000
ROA not after: Wed 31 Dec 2036 13:46:23 +0000
asID: 7029
IP address blocks: 165.49.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3291 (0xcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:46:23 2026 GMT
Not After : Dec 31 13:46:23 2036 GMT
Subject: CN=6a58e0b3-0de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:cc:aa:a1:75:29:24:1f:ea:1b:06:a2:78:
d3:a2:67:1a:66:7a:7b:52:e1:7f:8f:3a:f3:b2:ff:
71:bf:ff:5a:7e:63:d2:4e:45:99:12:11:01:5c:9c:
92:c4:da:c1:11:ca:7e:e5:1b:83:dd:82:90:f3:b3:
24:b5:60:50:50:83:90:d4:a0:e1:32:b2:e3:35:69:
cc:a4:f1:6d:7b:fa:68:c0:13:d3:24:88:c1:41:0c:
ad:11:d1:a8:ce:79:9e:e9:e2:7c:c4:a3:a5:20:d2:
65:d2:19:d3:14:79:da:d6:42:d4:f5:a3:09:56:ea:
00:c9:48:98:4a:03:c4:bc:4b:ec:38:88:f6:b3:d1:
1f:e8:af:60:42:83:08:ee:21:27:63:e1:2f:ae:c2:
dc:a5:1c:a4:e1:8d:ed:76:18:67:2e:97:54:24:67:
76:c3:07:37:34:51:6d:c5:6e:0b:c1:61:fa:81:d6:
ee:24:16:0f:90:ef:1c:85:5a:1c:22:d5:1b:31:90:
d5:27:7f:24:26:bc:ba:56:58:78:81:df:d0:71:e0:
a7:4e:5d:3b:33:96:ef:6e:aa:2c:9f:89:89:24:ff:
b9:3d:51:28:c7:6d:39:12:91:07:e5:82:0d:35:0f:
7a:ff:27:a1:c3:a2:94:ed:09:fa:34:e7:ff:80:24:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:B8:31:8E:61:78:C6:8F:C4:02:DE:E4:C1:80:B7:FC:27:15:E4
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BDB03454811C11F1A553C5C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1c:c4:4f:fe:c5:07:d8:e8:f6:1a:2a:7b:54:be:a3:3b:2f:
71:40:94:4f:1e:55:66:0b:48:73:6e:ef:aa:6f:eb:85:6f:e5:
52:c4:12:b6:be:6c:29:b7:02:ae:28:c2:20:f6:a6:e7:22:76:
05:4b:12:53:29:90:37:55:3e:48:e8:c4:27:e6:d0:b8:31:36:
2d:f3:a3:c3:a6:39:af:ea:77:2f:19:26:c5:4f:9c:f3:fe:44:
17:17:54:70:ce:ee:6e:60:a6:e4:fa:d7:f5:1f:58:3e:64:db:
14:3d:58:00:bf:49:d0:54:77:e5:0b:70:21:cb:bf:af:0b:8c:
10:82:f4:e2:70:4d:29:af:76:19:4a:49:60:5f:b4:42:06:b1:
01:57:75:f0:8c:12:2a:e7:f8:b1:3b:e9:58:23:79:39:67:16:
2b:b7:a0:72:51:3d:b7:b3:4f:88:f9:4f:78:42:ae:96:22:12:
ca:70:11:37:8a:58:e8:30:e1:b9:fa:0f:bc:69:8b:53:70:01:
a1:e1:08:c0:6d:55:5f:fa:eb:a7:5e:f2:db:81:da:8a:f7:2a:
43:f9:6c:ed:1e:89:f6:ac:d6:de:b5:60:70:54:b9:20:6a:4a:
f5:48:a1:75:d6:ba:11:91:d6:ff:5e:ce:2b:62:e5:a3:1c:77:
2d:d7:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:23 2026 by rpki-client