Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DC846ADA811C11F19A6FD5C0CE1D38B0.roa
File: DC846ADA811C11F19A6FD5C0CE1D38B0.roa (raw, json)
Hash identifier: LwxXCX3Mopo5dEOtJV9R/Nk+TMa37axRM56ceFFKNQc=
Subject key identifier: 1E:B8:4A:F0:10:EF:9B:AA:D8:36:5F:7F:54:B5:2C:28:FB:64:11:2D
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CE1
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DC846ADA811C11F19A6FD5C0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:47:19 +0000
ROA not before: Thu 16 Jul 2026 13:47:15 +0000
ROA not after: Wed 31 Dec 2036 13:47:15 +0000
asID: 7029
IP address blocks: 165.49.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:47:15 2026 GMT
Not After : Dec 31 13:47:15 2036 GMT
Subject: CN=6a58e0e7-8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:4c:af:93:e6:83:98:51:dc:09:20:87:10:
1e:ee:b5:3c:a6:d9:88:c0:c4:12:b8:76:52:0e:60:
52:51:8f:17:fa:68:90:cb:45:47:c2:c2:db:f0:4a:
2f:48:6b:49:ce:5b:08:1b:68:c5:f2:5c:46:17:a3:
f5:23:df:33:39:d6:7b:8d:21:e8:49:10:f8:e4:38:
1f:a2:25:49:af:66:c6:6c:f9:a9:e1:fa:cc:9b:66:
17:d4:eb:19:bd:8d:2a:d0:91:65:7f:6e:56:5b:9c:
73:f7:2f:fc:fc:3a:47:6d:d5:a3:eb:88:b4:98:aa:
25:47:91:b7:50:0f:63:fc:90:eb:b1:ae:fd:c0:48:
b4:e0:3b:bc:47:c0:a5:7c:fe:e0:f3:7a:ec:0e:30:
01:75:b2:3e:22:62:68:98:55:d4:ab:8c:77:78:f1:
da:25:ef:32:18:81:b2:14:50:7d:35:52:bf:6d:12:
72:8d:d8:98:9b:91:0c:c1:fe:f7:bb:11:ba:7b:58:
e7:6f:8e:b3:ad:f3:44:36:23:0f:c2:58:03:eb:91:
7a:55:c8:12:46:fa:fa:1e:05:3d:0c:dd:81:9c:f0:
33:1d:da:94:ed:74:ea:75:75:c4:fe:bb:25:8e:dd:
f4:e8:e5:6f:dd:2a:e5:48:b0:7e:3d:2f:a5:70:fa:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:4A:F0:10:EF:9B:AA:D8:36:5F:7F:54:B5:2C:28:FB:64:11:2D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DC846ADA811C11F19A6FD5C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.101.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1c:bb:64:6b:18:07:a2:11:13:f3:c1:23:48:57:47:3c:05:
7c:24:3f:7d:1b:6a:7c:97:57:a6:95:86:a6:f5:78:fd:52:82:
1e:9b:9a:53:6a:c3:6b:f8:10:a1:e8:01:7f:c4:3b:00:f3:05:
49:4e:24:fa:a0:30:28:b3:e5:b3:bb:23:b9:7a:da:15:53:29:
bf:9c:f4:b0:fd:de:d0:01:20:c4:a8:6d:64:5a:de:31:23:fd:
10:80:46:d0:eb:74:4d:1e:0a:04:72:91:0f:1e:ab:95:c3:28:
07:cb:42:8d:c2:62:02:08:92:8d:6a:f6:fc:07:45:17:7e:61:
24:3b:f0:20:00:da:15:17:a3:b5:c0:fe:a8:5d:13:54:dd:89:
cc:3a:74:6e:cb:63:6d:76:e3:7a:b0:e2:2c:ab:27:72:62:93:
80:a1:39:e6:30:eb:e0:5c:59:7c:3f:a7:a6:1b:8c:f9:55:70:
b7:d9:34:6d:ac:7f:7e:be:62:86:2b:ec:cd:f6:59:c5:4d:5e:
20:1f:ea:ac:6a:d0:09:1a:64:83:96:af:e9:df:b7:e3:6c:93:
5b:4d:e1:d3:83:2d:34:5b:3e:12:7f:ab:ac:4c:d0:9d:17:7e:
65:fc:b4:06:71:d6:25:60:09:c7:d1:1f:d9:89:12:2c:80:a5:
95:e5:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:21 2026 by rpki-client