Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C855A434811C11F1950CCBC0CE1D38B0.roa
File: C855A434811C11F1950CCBC0CE1D38B0.roa (raw, json)
Hash identifier: VRG/IfJEgTH1bpCqsQJY5CYGDwB3IDiKH4sl8x2KEnA=
Subject key identifier: F8:77:F7:DA:05:6A:1C:66:35:D5:FF:A7:12:FB:8A:51:DE:94:26:D4
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CDD
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C855A434811C11F1950CCBC0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:46:45 +0000
ROA not before: Thu 16 Jul 2026 13:46:41 +0000
ROA not after: Wed 31 Dec 2036 13:46:41 +0000
asID: 7029
IP address blocks: 165.49.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:46:41 2026 GMT
Not After : Dec 31 13:46:41 2036 GMT
Subject: CN=6a58e0c5-cb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:f5:46:fd:24:38:10:f5:7e:e5:6e:4d:7e:
af:84:93:5f:c8:96:97:f2:47:3c:b1:72:a4:c3:46:
e6:7b:08:0e:9c:74:4e:b9:e7:e2:a2:5e:8a:2f:65:
ec:af:4f:25:55:7a:53:eb:60:ba:45:51:6b:da:8c:
47:8c:30:20:5a:95:9b:f0:91:6c:cf:a8:ba:44:c8:
98:cd:c3:c3:01:17:ae:2c:ac:01:d5:14:5f:51:f8:
4f:8b:82:e6:b6:38:73:73:df:17:b3:02:23:cd:0f:
4c:d9:a8:48:0e:da:c4:f0:da:3f:67:36:ac:7f:3b:
a1:b8:57:bb:ea:10:8f:9c:8f:0b:2e:ea:d2:f2:d8:
55:6f:87:8a:d9:9f:0a:d9:8a:3c:d5:6f:65:70:da:
87:1d:37:34:06:92:49:90:9b:2b:78:ec:0d:e0:91:
2b:22:a0:eb:e2:3e:5c:75:90:51:93:3c:c6:26:04:
be:40:d0:43:7c:33:87:c0:47:a8:3d:23:29:59:86:
60:1f:40:eb:76:86:59:4e:61:ef:4e:e4:24:8d:03:
f2:7e:7a:09:a4:a6:6e:02:2f:cf:5c:45:3c:0e:cb:
63:d6:1a:89:05:63:58:07:43:71:c6:00:6c:e6:a0:
0c:d3:bc:34:17:dc:6d:61:eb:22:25:08:d9:67:98:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:F7:DA:05:6A:1C:66:35:D5:FF:A7:12:FB:8A:51:DE:94:26:D4
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C855A434811C11F1950CCBC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.99.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e0:5a:5f:f5:46:f0:95:2e:21:98:1c:d2:0b:90:11:83:2c:
33:0e:f8:83:74:07:46:06:6a:ad:5c:5c:29:70:cd:69:36:4c:
95:61:c0:ae:13:4c:30:8a:37:ca:be:d9:36:ff:95:28:82:7f:
9a:43:bb:c5:2f:38:a7:12:9f:b3:2a:8f:cf:31:19:1d:e0:f8:
b4:cd:54:fd:61:46:37:8b:1c:4b:5a:d6:7a:9e:93:ba:d6:94:
ed:7d:89:08:3e:a1:b9:9f:dc:98:31:2a:c4:d0:83:a4:27:58:
73:8a:bb:8d:ec:68:93:c8:3d:9d:49:a0:41:16:54:b2:c2:c1:
0b:b5:8a:6d:f1:2c:6e:80:6e:f3:be:0c:00:eb:5f:25:f5:fa:
60:c7:18:2f:2a:7e:d5:6a:b7:a9:38:c8:e4:7f:68:4c:3b:ef:
07:50:2e:0f:a5:dd:88:e6:c0:89:36:77:79:e5:af:5e:c7:d0:
aa:9a:55:15:f8:11:6e:4b:12:c9:3d:6c:77:26:8d:56:d1:ec:
2c:8a:89:e5:3b:4b:28:09:90:1f:6f:54:5b:4d:9a:11:62:e5:
74:88:1e:3b:74:88:e1:f2:be:0a:28:5d:7f:76:09:ec:08:30:
da:89:af:40:6e:ce:4f:29:c5:10:18:ab:7c:e1:e1:5b:25:2f:
b8:a1:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:24 2026 by rpki-client