Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CF1474121BB911F18C304CE5DAE4EC9C.roa
File: CF1474121BB911F18C304CE5DAE4EC9C.roa (raw, json)
Hash identifier: GOnZ8eJETNF/bCRuEaWV2eA1/Z4RWSUOVgtO5vrCXWA=
Subject key identifier: 25:9A:56:35:11:49:B7:FD:54:C1:5F:79:03:C5:4A:1E:81:2C:17:04
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B23
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CF1474121BB911F18C304CE5DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 13:13:49 +0000
ROA not before: Mon 09 Mar 2026 13:13:43 +0000
ROA not after: Wed 31 Dec 2036 13:13:43 +0000
asID: 834
IP address blocks: 165.49.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2851 (0xb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Mar 9 13:13:43 2026 GMT
Not After : Dec 31 13:13:43 2036 GMT
Subject: CN=69aec78d-4548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4f:c9:53:74:b5:e2:7c:46:f4:4e:66:e9:57:
a7:fb:47:69:54:ec:d6:c8:99:94:61:3d:b7:f1:80:
61:64:a1:5e:ae:c3:e9:a4:10:fa:d5:6b:e1:55:02:
1c:90:8f:64:fc:2f:1f:6a:8c:01:37:0a:54:cd:79:
0f:08:64:78:f3:95:25:7b:4f:df:41:d6:d4:9c:19:
05:1f:55:e5:3c:5f:47:d2:46:bb:fd:02:41:41:5a:
06:58:da:3e:8e:04:7f:2b:1e:fe:45:24:6d:83:2a:
fc:90:44:2c:01:1f:f5:64:82:f5:7e:2e:0f:63:c5:
e2:3e:e3:8b:48:27:4c:d6:6e:a3:df:d1:7b:22:64:
23:47:06:52:d2:ed:aa:5e:d3:3b:e2:a7:45:8c:bd:
89:d0:0c:bb:26:2a:b7:89:41:5c:91:05:92:7f:67:
4a:92:14:49:7c:ed:b9:42:bc:64:41:84:1e:1a:66:
ae:68:ab:15:ec:8c:54:e4:a9:76:ac:73:47:1a:51:
3f:ad:50:9d:14:4c:54:6f:f2:e6:06:f4:7f:cc:3d:
86:77:65:d1:ef:86:37:9a:51:ec:0b:d2:f5:b3:3e:
52:24:b4:cf:2c:7e:ea:a5:88:f5:7d:8d:ee:81:31:
5c:06:ec:2f:23:be:5f:bc:90:a1:7f:0e:17:20:7c:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:56:35:11:49:B7:FD:54:C1:5F:79:03:C5:4A:1E:81:2C:17:04
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CF1474121BB911F18C304CE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.223.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ed:8f:a1:46:31:e9:ac:72:8f:c8:9a:a0:9a:cc:a8:2a:f6:
ff:15:4f:5d:6f:a7:1e:5f:d9:ea:2d:88:0e:d4:d1:5f:36:9c:
a4:b3:53:ca:23:76:a1:63:5e:ca:03:96:af:62:f1:71:b9:6c:
c8:83:51:a1:74:bd:e6:43:0d:7a:a1:14:82:42:0e:7b:37:54:
8b:2b:b3:dc:75:8b:55:cd:96:e3:c5:c4:8d:8d:77:eb:01:3a:
ff:4b:14:ac:b4:93:a1:f3:9d:34:1d:55:11:fd:28:8f:2b:9c:
6d:f5:90:ad:00:3b:a5:97:25:94:b9:d2:ca:1d:80:0c:60:80:
21:05:b2:78:5c:00:d0:17:6f:44:93:61:dc:41:4a:bc:ce:9d:
1d:f9:69:43:db:98:17:57:ac:4c:33:41:37:2d:ad:51:0c:67:
3c:39:59:fe:93:8b:57:92:9d:27:0b:ca:df:bf:ad:3e:2f:bf:
61:4b:30:86:4d:9e:9b:1d:b1:fb:c0:7c:4b:9f:42:f9:17:b1:
bc:1b:4f:76:1c:68:0c:e3:d9:d9:9c:02:bd:2f:ed:ba:d6:f5:
48:65:4c:4c:62:9b:ec:cc:5f:dc:eb:81:0e:6e:17:a4:a6:2a:
d9:1f:ed:0a:b1:51:bf:46:72:c5:8c:9e:ec:ea:a9:5f:01:fc:
93:26:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:56:45 2026 by rpki-client