Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D253D00A811C11F1A2C5D0C0CE1D38B0.roa
File: D253D00A811C11F1A2C5D0C0CE1D38B0.roa (raw, json)
Hash identifier: uFQ9z9Ef32A7JafS56P86rB6Ab03QlM5lHFK9X3LS9I=
Subject key identifier: 80:64:50:66:EC:DF:32:C3:19:DE:70:16:56:50:D5:C7:9D:FB:BB:31
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CDF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D253D00A811C11F1A2C5D0C0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:47:02 +0000
ROA not before: Thu 16 Jul 2026 13:46:58 +0000
ROA not after: Wed 31 Dec 2036 13:46:58 +0000
asID: 7029
IP address blocks: 165.49.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:46:58 2026 GMT
Not After : Dec 31 13:46:58 2036 GMT
Subject: CN=6a58e0d5-6b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:31:af:45:ab:6d:dd:4a:75:d9:aa:36:2f:
12:dd:ac:de:ca:0e:33:99:45:a5:56:69:e4:79:e0:
d3:d1:80:a3:a0:72:83:27:f4:1f:b5:d2:eb:60:79:
a5:09:0a:77:a8:31:33:70:b4:e3:30:b6:44:cd:92:
40:29:b9:21:2f:cf:62:6a:4c:25:7d:b0:ca:09:e0:
cb:56:ca:67:09:40:30:a3:fb:92:90:fb:81:4d:16:
46:4a:f4:20:c4:1e:9e:dd:32:48:ec:16:f6:96:db:
4c:fd:34:37:2b:b5:0a:b1:d1:a0:b7:93:f2:98:94:
31:b1:b2:1d:25:5e:aa:4f:5d:e2:e6:23:da:ed:3e:
7f:df:6e:00:8c:b1:d4:10:47:ed:50:dd:01:a7:12:
2f:9b:a8:d7:33:45:0f:13:5f:6c:ac:92:28:45:e0:
bc:47:85:89:a1:38:e8:33:b8:1b:69:4f:70:30:ca:
89:e2:b9:39:ba:19:29:25:50:1e:15:1d:9a:8c:4f:
35:2d:72:a3:ff:3f:08:aa:2d:e4:4d:13:eb:ef:bf:
22:e0:a7:90:b7:52:63:13:32:67:d4:42:27:73:59:
10:49:5a:3e:5a:4d:a6:5e:ab:d7:d5:e1:66:22:d9:
5e:84:93:a1:e3:39:34:9a:a6:5e:65:87:99:57:4e:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:50:66:EC:DF:32:C3:19:DE:70:16:56:50:D5:C7:9D:FB:BB:31
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D253D00A811C11F1A2C5D0C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.100.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:7d:69:ce:5f:32:71:1a:03:87:76:fd:a9:3e:e5:63:12:1d:
f0:fd:35:73:4c:c3:24:23:8b:71:6b:4d:e9:c5:32:b7:50:12:
8a:5a:0a:46:b0:9e:d6:8a:c4:d7:9b:75:6b:a1:6d:23:df:33:
30:04:e5:75:4a:73:66:5b:a7:80:fe:eb:2c:a3:f4:41:21:fe:
b5:7c:a1:32:b0:11:57:18:cd:e6:46:34:d7:dd:cb:b1:43:99:
8a:4a:23:0a:44:96:de:03:8e:df:15:47:d4:49:85:e6:17:48:
81:cd:e5:6d:9b:18:ec:f6:44:33:98:ea:5c:0f:46:25:2b:20:
20:81:fd:5f:10:1f:b1:0d:b8:78:78:39:62:62:04:28:df:6b:
15:4e:fe:45:6b:5e:c7:f6:59:55:cc:09:7a:25:a7:df:aa:8a:
28:00:b4:a4:85:3a:26:a6:d1:b5:09:ed:21:84:2f:85:aa:1a:
ad:84:2b:76:45:b0:95:6c:43:e8:3e:fd:20:23:35:f0:73:f1:
3b:9c:cc:5d:e7:6d:a9:c7:5e:9f:86:f7:31:48:f3:ba:34:a7:
0d:bf:de:78:c5:e3:fa:85:ae:d6:5b:c3:0a:85:4b:be:52:8c:
3e:d2:b2:dd:92:81:0c:d3:0c:d2:48:a5:30:3a:f1:95:4e:33:
d0:0a:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:25 2026 by rpki-client