Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6157166802D11F1811D67CFCE1D38B0.roa
File: D6157166802D11F1811D67CFCE1D38B0.roa (raw, json)
Hash identifier: Rm1oC05qwSLaeFGxxHrUgiQ8D0BKKaXvkipJswxYh3o=
Subject key identifier: 50:5F:36:8F:BD:4D:46:D9:2E:EC:B7:CB:C6:6C:EC:93:5B:71:BF:21
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CA7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6157166802D11F1811D67CFCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:16:18 +0000
ROA not before: Wed 15 Jul 2026 09:16:14 +0000
ROA not after: Wed 31 Dec 2036 09:16:14 +0000
asID: 12083
IP address blocks: 165.49.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3239 (0xca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:16:14 2026 GMT
Not After : Dec 31 09:16:14 2036 GMT
Subject: CN=6a574fe2-8cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:1c:47:5d:7d:45:09:3a:2b:9e:2e:ca:1f:
28:b7:70:01:d8:57:92:d2:41:f7:63:55:7a:d7:49:
5d:c5:08:32:58:e5:1f:86:e2:7b:c0:74:92:92:0d:
75:a7:5b:62:c0:1c:34:5a:ba:b1:1b:f1:fd:24:29:
9a:c9:95:8d:a1:b7:2c:71:24:c9:1c:86:7a:1a:23:
64:62:b8:dc:4f:5d:29:b2:e0:20:69:4a:ac:e8:b4:
68:a8:aa:d7:b2:83:c2:10:fb:c1:42:b4:8d:d4:5a:
89:b5:86:93:b4:2e:c2:b4:7e:ba:c0:63:66:43:4d:
5a:e4:2e:83:0c:e7:72:1f:db:f7:30:50:17:6d:24:
39:a2:ce:ee:d4:d9:ec:b8:96:89:e4:15:c9:cf:8e:
83:6e:81:a9:3c:41:cf:e4:56:ae:11:8f:a4:0b:a9:
17:de:1f:70:20:81:d9:58:77:54:e5:d9:7b:3a:91:
8a:41:d4:97:c3:ae:a1:44:65:43:15:89:4d:2c:d3:
81:8f:15:d6:bb:8e:83:7e:38:12:b6:87:2b:f7:0d:
cc:2c:42:95:9b:7f:66:40:48:45:76:43:88:fc:a4:
8e:6d:3b:cb:5f:1d:c1:4d:50:51:bd:18:28:72:f4:
d6:ab:27:10:97:7f:cb:ac:55:4b:99:11:4b:62:cd:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:36:8F:BD:4D:46:D9:2E:EC:B7:CB:C6:6C:EC:93:5B:71:BF:21
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6157166802D11F1811D67CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0a:5e:69:da:b8:2b:0d:bc:8e:6f:07:00:ae:10:6f:94:83:
a1:c6:58:1a:51:bc:55:f2:2b:8b:85:60:ae:0a:9b:b5:eb:67:
b6:4e:04:02:dc:52:77:3d:0e:17:b5:d6:d7:d3:37:19:9b:7a:
cd:55:16:01:d6:1f:f3:4c:f6:5c:2d:7d:d5:5d:82:c2:32:59:
50:57:9c:e2:2a:71:5f:ff:9f:8b:f1:d8:3a:a5:0e:7e:a5:01:
4d:ac:f8:6e:71:e5:d1:53:be:7d:6c:9f:a7:44:c6:2a:30:21:
e7:1b:a1:a7:e5:6e:21:ca:13:1e:19:bb:e3:73:e7:e0:be:49:
c6:7f:24:9c:e1:3b:56:42:73:18:66:1c:c0:7b:f9:84:17:00:
f8:85:54:33:39:35:2d:72:43:4a:d9:a8:34:ba:84:09:f1:12:
2f:af:48:cc:ff:f7:22:d2:45:ef:63:51:74:ee:d7:0d:d6:16:
f6:3b:e2:7c:5a:05:7a:c0:7f:51:bd:18:d8:74:98:f1:0e:25:
39:6e:32:9d:8d:76:7e:80:4d:63:cd:7c:f6:c9:9b:87:ea:53:
95:08:a6:d3:a0:ca:b0:62:3b:5f:a8:d4:56:86:6e:5b:5e:c8:
87:64:81:7e:0c:e8:f0:c9:3c:63:3a:83:58:f9:e6:f2:5d:d3:
e4:f5:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:14 2026 by rpki-client