Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CEE5EEDA802C11F18FA917C7CE1D38B0.roa
File: CEE5EEDA802C11F18FA917C7CE1D38B0.roa (raw, json)
Hash identifier: r+8QmLKOQ+BScwqZ+O5YhcIWpqZ1I4e0gy83SdH0+CI=
Subject key identifier: C8:B9:81:4F:7B:77:28:D8:88:A9:09:59:C6:FD:41:EA:EC:1B:2B:96
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C85
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CEE5EEDA802C11F18FA917C7CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:08:57 +0000
ROA not before: Wed 15 Jul 2026 09:08:53 +0000
ROA not after: Wed 31 Dec 2036 09:08:53 +0000
asID: 12083
IP address blocks: 165.49.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:08:53 2026 GMT
Not After : Dec 31 09:08:53 2036 GMT
Subject: CN=6a574e28-9299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:a8:54:05:f6:fe:e9:8c:0b:e2:31:2a:f6:
ca:d4:8f:89:a3:60:9f:e1:54:c3:fa:22:c9:52:c1:
31:71:1f:3a:9b:37:cc:17:3c:52:02:82:fa:2d:6a:
9d:ef:ee:87:f4:20:9d:a4:7d:0b:e3:e2:9c:e3:af:
cd:b3:19:8f:2e:4e:9a:c0:da:03:97:9f:ef:44:56:
6a:23:00:bc:ed:00:82:77:21:50:9d:20:2b:df:8e:
a3:39:15:86:c7:93:4e:20:42:eb:68:df:ff:9b:eb:
54:37:06:44:b0:2a:91:16:04:11:6a:57:3f:fc:cc:
24:bf:6f:87:c7:00:87:72:73:d6:e0:3c:66:31:3a:
55:eb:99:04:85:d4:16:e1:04:37:6d:59:25:a3:68:
00:17:bd:1c:d4:84:e2:57:57:7c:8a:11:19:fc:ae:
1c:c1:e3:9f:3d:1d:1e:8d:10:e2:20:45:76:43:93:
d4:f2:2a:de:be:0f:b3:a9:61:b3:ff:8e:42:87:ac:
29:2a:a0:33:e6:a4:50:d6:a9:d0:e0:32:db:ff:82:
1e:a9:91:a8:c4:b5:0f:11:d3:fe:64:f2:c1:5a:a2:
01:0c:f2:5e:ca:69:83:15:4e:46:0f:ab:44:c2:49:
32:45:f6:44:7a:ff:b1:c9:1a:fe:a7:a2:c3:c6:41:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:81:4F:7B:77:28:D8:88:A9:09:59:C6:FD:41:EA:EC:1B:2B:96
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CEE5EEDA802C11F18FA917C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.125.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ef:34:86:ce:b0:d3:0b:39:33:37:f6:94:73:59:6a:41:77:
97:97:b4:f9:f4:b6:6d:a6:b7:e1:0a:ab:67:c9:80:30:bf:66:
df:53:e0:a0:4c:da:ae:b0:7f:01:96:2b:0b:b0:1d:57:0b:dd:
a6:84:8e:67:6a:e2:c7:02:0f:eb:cd:d0:6a:9c:3c:fc:4c:4a:
a9:78:be:ee:6b:ff:4f:69:a7:69:ce:d4:c6:dd:04:60:cd:dc:
a9:79:2b:52:33:eb:c0:4d:6a:d4:21:70:36:1b:5f:b6:be:88:
01:f0:8d:ce:3f:60:da:dc:47:1a:49:3d:b0:8e:ae:ab:ed:18:
7c:a8:09:e5:c8:bc:e5:34:f1:02:76:34:bb:00:86:9a:68:c6:
c4:d0:ea:20:70:d2:ba:bf:0a:8b:49:16:4c:ef:0e:6f:20:08:
d9:45:cc:a4:92:45:b4:7b:ab:5c:32:48:f1:0c:22:86:51:17:
07:a7:26:37:11:38:db:62:f8:55:56:39:22:06:a6:12:d2:7a:
e9:4e:bf:55:17:00:16:7c:40:a5:d3:f0:9b:66:ba:ae:97:f2:
c3:47:40:52:9c:72:8f:70:36:d1:ef:2f:4e:30:43:f9:da:ce:
d7:a2:88:59:24:b0:ef:7a:cb:09:be:2a:01:63:05:7a:86:a2:
a4:ea:31:e5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTUwOTA4NTNaFw0zNjEyMzEwOTA4NTNaMBgxFjAU
BgNVBAMTDTZhNTc0ZTI4LTkyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0eqhUBfb+6YwL4jEq9srUj4mjYJ/hVMP6IslSwTFxHzqbN8wXPFICgvot
ap3v7of0IJ2kfQvj4pzjr82zGY8uTprA2gOXn+9EVmojALztAIJ3IVCdICvfjqM5
FYbHk04gQuto3/+b61Q3BkSwKpEWBBFqVz/8zCS/b4fHAIdyc9bgPGYxOlXrmQSF
1BbhBDdtWSWjaAAXvRzUhOJXV3yKERn8rhzB4589HR6NEOIgRXZDk9TyKt6+D7Op
YbP/jkKHrCkqoDPmpFDWqdDgMtv/gh6pkajEtQ8R0/5k8sFaogEM8l7KaYMVTkYP
q0TCSTJF9kR6/7HJGv6nosPGQYFhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUyLmB
T3t3KNiIqQlZxv1B6uwbK5YwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0NFRTVFRURBODAyQzExRjE4RkE5MTdDN0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMX0wDQYJKoZIhvcNAQELBQAD
ggEBAFbvNIbOsNMLOTM39pRzWWpBd5eXtPn0tm2mt+EKq2fJgDC/Zt9T4KBM2q6w
fwGWKwuwHVcL3aaEjmdq4scCD+vN0GqcPPxMSql4vu5r/09pp2nO1MbdBGDN3Kl5
K1Iz68BNatQhcDYbX7a+iAHwjc4/YNrcRxpJPbCOrqvtGHyoCeXIvOU08QJ2NLsA
hppoxsTQ6iBw0rq/CotJFkzvDm8gCNlFzKSSRbR7q1wySPEMIoZRFwenJjcRONti
+FVWOSIGphLSeulOv1UXABZ8QKXT8Jtmuq6X8sNHQFKcco9wNtHvL04wQ/naztei
iFkksO96ywm+KgFjBXqGoqTqMeU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:10 2026 by rpki-client