Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CD6F6ACE811A11F190E244B4CE1D38B0.roa
File: CD6F6ACE811A11F190E244B4CE1D38B0.roa (raw, json)
Hash identifier: VqpB1OctlaBHQysW9X5tgSnXLa4D/ko3jio9o8D//uw=
Subject key identifier: E1:89:54:EA:15:F4:16:64:AA:73:F4:22:C1:41:CF:70:68:B3:DB:B8
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CB3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CD6F6ACE811A11F190E244B4CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:32:34 +0000
ROA not before: Thu 16 Jul 2026 13:32:30 +0000
ROA not after: Wed 31 Dec 2036 13:32:30 +0000
asID: 5650
IP address blocks: 165.49.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3251 (0xcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:32:30 2026 GMT
Not After : Dec 31 13:32:30 2036 GMT
Subject: CN=6a58dd72-7611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:2a:f4:c0:7d:88:9a:1a:64:3a:0c:bf:bb:
2a:e2:de:6a:15:dc:ff:9e:e5:3d:2a:02:0e:2e:cc:
f8:d6:3c:14:5a:c4:9a:6c:26:7e:0f:fb:53:da:6f:
7c:84:a8:48:3e:74:82:0d:54:c7:e4:b4:e9:87:e0:
a2:44:0a:78:4f:6a:a1:ed:fd:86:2d:ac:21:79:a4:
3d:c9:d7:d7:0a:9c:55:9d:fa:c6:ed:af:c4:0c:d9:
60:68:0c:48:09:2a:6a:5d:61:a6:0a:86:27:8a:08:
dd:3c:ca:42:1b:82:b2:e1:0f:bd:d1:06:4c:32:1b:
6a:a1:e6:4d:07:73:2f:d5:b9:d4:a3:b0:9e:a3:87:
06:4b:26:13:87:9a:25:50:10:6b:98:02:69:62:1a:
c8:9b:33:42:63:05:ef:e0:90:69:2c:5b:fc:5d:69:
1f:c7:30:42:94:a9:02:10:6e:6f:b2:91:94:0d:34:
74:46:e5:76:8f:3a:00:f6:a1:5b:8a:3a:a1:c4:6c:
fb:67:c0:c8:aa:3e:3a:a6:50:57:e2:8a:5f:2a:7d:
18:eb:5b:4a:6e:f5:4e:3f:58:81:10:72:a1:b6:d9:
d5:09:1c:3c:f6:28:a7:bd:1f:7f:d6:61:2c:0f:1f:
1f:00:b0:c2:e4:e5:e8:4a:9f:45:24:6e:06:fb:8d:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:54:EA:15:F4:16:64:AA:73:F4:22:C1:41:CF:70:68:B3:DB:B8
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CD6F6ACE811A11F190E244B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:91:b5:9d:09:c5:5f:13:6c:61:dd:d6:1c:f5:2e:4b:2c:16:
71:af:40:c8:55:ad:8f:4e:57:65:1f:54:c4:6f:98:9c:0b:fb:
43:94:31:7c:19:f0:f7:b7:9c:6d:d7:e8:0d:3f:39:29:c9:5c:
fd:3a:f5:97:a0:c7:3e:de:2a:a2:f3:39:19:cd:cf:b8:54:62:
ca:ab:41:ca:e6:62:d8:08:f5:e4:59:fe:cb:0f:12:bf:aa:b8:
f0:d9:51:d3:31:a8:4a:47:e9:29:b8:4b:d3:c5:61:09:4d:ef:
03:17:bf:ea:04:85:92:11:c6:76:67:8c:24:b5:93:03:33:8a:
cc:89:fe:62:12:15:6f:ee:01:3e:2a:66:43:52:70:bf:45:8f:
4f:bf:3f:54:1d:18:c7:d8:fb:0b:ef:cf:b1:55:bc:40:f4:81:
bc:33:1c:8b:5a:9e:00:3c:cb:e2:6e:2d:02:43:6f:9d:c1:48:
ee:8d:48:99:44:1f:87:85:33:b1:2f:17:38:92:36:59:6c:e3:
3a:a3:ce:ac:aa:ce:5b:ef:1c:8d:85:84:07:f5:7a:59:ca:e4:
d5:7d:b8:6c:7f:6d:3f:2f:c9:8f:dd:96:e6:ce:0b:66:8f:ea:
d5:da:22:dd:8f:7b:f6:4b:ff:bd:91:f8:bd:a8:d9:af:69:3f:
5e:10:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:48 2026 by rpki-client