Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC5BC26A802D11F1B80F8BCCCE1D38B0.roa
File: CC5BC26A802D11F1B80F8BCCCE1D38B0.roa (raw, json)
Hash identifier: dlh03h5uVUdOfZPJRdQsSAef7b6Z1FCXn9CjuU52U70=
Subject key identifier: 03:33:73:5E:D9:CF:B8:C3:75:C7:54:FF:A8:EA:51:03:A1:81:08:E1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CA5
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC5BC26A802D11F1B80F8BCCCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:16:02 +0000
ROA not before: Wed 15 Jul 2026 09:15:58 +0000
ROA not after: Wed 31 Dec 2036 09:15:58 +0000
asID: 12083
IP address blocks: 165.49.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:15:58 2026 GMT
Not After : Dec 31 09:15:58 2036 GMT
Subject: CN=6a574fd2-da12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:b3:a2:ac:8d:e7:80:0d:73:2e:2b:bd:45:
44:30:70:1b:6e:13:eb:ac:f4:cf:46:85:d4:22:f7:
56:08:72:53:0b:f7:7b:c1:44:ba:fc:cd:c2:84:eb:
6c:b3:aa:ae:e0:1b:bd:af:63:1f:65:13:a2:59:8d:
77:1a:1a:b2:bc:03:c0:21:e4:c3:8b:97:4d:30:91:
09:e0:df:5c:d6:73:e6:3d:a2:e3:4a:a2:ee:1e:72:
f5:2a:ec:4c:71:35:db:99:e5:d6:ce:41:7c:8b:48:
3a:39:c3:08:71:ae:19:b1:12:b3:d0:8f:15:31:b4:
b7:32:9f:df:a8:38:ca:04:77:a8:52:28:f4:52:96:
33:30:22:ee:7f:41:b6:30:df:11:ea:e6:92:7a:e0:
ee:44:a9:d9:9c:58:44:a8:66:33:6c:64:d4:d0:a5:
25:55:c6:03:14:bc:7d:b9:af:c8:71:39:98:b4:95:
ca:82:52:76:76:04:20:b1:ce:d3:34:31:12:d9:05:
f7:51:4a:0c:9c:49:e3:17:9a:1d:39:8a:91:54:fb:
8d:db:4d:3b:62:60:d9:e5:70:d8:61:c3:bb:7d:41:
63:3c:80:7d:d9:45:c7:9e:d5:18:f3:aa:de:e1:72:
69:00:e1:eb:22:de:07:bd:d4:73:36:42:3b:5a:b1:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:73:5E:D9:CF:B8:C3:75:C7:54:FF:A8:EA:51:03:A1:81:08:E1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC5BC26A802D11F1B80F8BCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:51:7e:d8:4e:ba:22:0b:d9:a3:5d:f0:4e:78:19:05:10:2d:
6e:fb:17:c7:ce:71:fe:81:56:43:d4:f0:8b:80:15:05:15:47:
23:98:28:f5:85:0b:47:e8:45:02:1a:c4:4d:2e:3b:4d:36:72:
36:f5:bc:dc:47:44:40:2b:1c:8b:35:25:8f:9a:70:6d:e1:77:
fe:e6:bd:8f:69:0a:4a:00:fd:9b:e7:9e:33:d6:3e:b9:56:0d:
2d:98:94:4d:e8:bb:f6:1f:59:78:5b:84:fb:c0:6c:e8:d6:df:
91:64:76:2a:ce:ac:73:d3:61:d0:c9:c7:3e:d0:90:f3:f0:5f:
40:fb:3f:20:9d:a3:bd:19:4b:6c:63:f4:70:f2:36:03:e2:bf:
b6:fc:9d:df:ad:b0:a9:63:83:aa:3c:00:1a:08:c0:fb:ee:92:
7d:ae:36:7c:02:7e:5e:f4:b9:0f:fd:25:71:14:34:38:53:e5:
0b:e4:ce:77:e5:62:df:a9:e1:f1:87:b5:c1:05:fa:ab:93:e2:
77:ca:3d:b3:47:6f:80:04:34:90:0c:89:ee:25:b9:bd:2d:46:
25:3a:e0:94:49:26:20:00:3c:bd:06:0a:5f:1e:78:bf:45:e2:
89:9d:57:06:eb:d6:5f:7f:e0:d4:c1:d3:05:3f:fc:31:74:23:
bf:71:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:10 2026 by rpki-client