Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C2AD75CE802D11F1A4FAD9CBCE1D38B0.roa
File: C2AD75CE802D11F1A4FAD9CBCE1D38B0.roa (raw, json)
Hash identifier: SFT3SyPwJjM0zCKzwtmrFPPuKv+IXrNzOhzhaiCboGc=
Subject key identifier: 90:D1:67:DA:52:80:10:99:27:C9:1C:4F:67:49:89:AC:EB:5D:45:57
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CA3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C2AD75CE802D11F1A4FAD9CBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:15:46 +0000
ROA not before: Wed 15 Jul 2026 09:15:42 +0000
ROA not after: Wed 31 Dec 2036 09:15:42 +0000
asID: 12083
IP address blocks: 165.49.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:15:42 2026 GMT
Not After : Dec 31 09:15:42 2036 GMT
Subject: CN=6a574fc1-51e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:28:5c:fd:7b:b6:22:0e:62:1d:05:83:40:
e0:dd:0a:4f:47:94:b3:76:ee:cf:cd:08:ed:bb:77:
47:72:c6:91:e3:92:2f:4a:63:9b:69:27:83:6c:f1:
de:be:12:cb:4d:9e:33:83:39:e1:4f:ca:2b:a6:f5:
c9:dd:01:59:2b:1e:68:84:2a:e7:e1:18:f7:d7:ca:
fb:df:50:35:e1:11:20:47:97:cd:2e:bf:ba:5b:85:
89:44:7c:50:0f:8b:d1:9b:34:46:53:68:db:f6:1d:
5a:0a:d2:84:a6:1f:61:a0:cd:19:49:0a:e5:61:ce:
d5:3f:48:1b:6f:eb:d1:51:ed:4d:43:19:84:59:0b:
23:3e:38:a6:c4:da:9d:55:a9:ed:3e:f5:51:df:ce:
7d:8e:e8:f4:cb:9d:c9:65:35:b8:41:e1:bf:e7:b7:
d2:1f:c2:80:64:f9:3b:eb:17:e8:3a:78:d6:eb:97:
6e:58:81:4a:71:eb:25:c9:3e:fd:0a:df:af:75:13:
06:93:92:e2:d6:85:df:2d:93:b0:fb:93:4e:24:8d:
4f:48:47:ff:80:37:08:ad:c5:75:36:f3:d9:75:6b:
dd:d5:29:cc:5b:df:2d:0f:90:c8:22:90:f8:60:7c:
1b:f8:1d:06:6c:15:ec:aa:71:2f:c9:02:c3:5a:59:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:67:DA:52:80:10:99:27:C9:1C:4F:67:49:89:AC:EB:5D:45:57
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C2AD75CE802D11F1A4FAD9CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.95.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ca:26:c5:0e:30:70:b1:64:27:48:79:8f:42:44:70:2e:7a:
39:40:01:17:d3:86:52:c9:70:a5:5b:fc:d3:51:72:0b:c3:69:
7d:f1:ac:af:de:fc:6e:67:06:10:13:03:3d:88:43:60:33:2b:
08:4a:89:3b:61:bb:49:5b:2a:0c:85:7c:70:6c:19:dd:98:5c:
38:7d:32:2e:67:df:46:dd:f4:09:26:f5:d0:cf:44:a2:da:e7:
4e:41:ef:4e:38:8c:9f:4b:00:c7:10:65:13:6d:74:4f:ad:64:
0e:48:d9:17:3d:5f:83:3f:ad:7e:80:6b:84:62:0e:cc:7c:75:
8d:8a:71:c3:91:3d:22:af:a4:68:3b:2e:e2:cb:8b:98:26:3e:
f7:74:e6:0e:6d:48:93:2a:03:fc:80:3e:7f:5e:04:c7:2f:34:
03:7b:ea:14:f4:59:3d:a3:7b:0b:59:93:32:f4:49:61:3b:b9:
ad:4d:ce:d6:50:ce:2a:7e:ec:76:cb:34:7b:6a:30:b3:d3:4c:
ba:50:b3:8e:8b:80:1b:f7:c1:70:60:85:01:26:63:41:50:c0:
84:1c:3a:92:d9:af:39:e7:0c:17:cb:dd:85:d7:97:0f:1d:88:
3b:e7:85:4b:64:6d:cd:df:5c:de:85:80:f9:e6:00:1e:10:00:
67:64:85:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:11 2026 by rpki-client