Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DF4DBA8E448411F1B074A901CF1D38B0.roa
File: DF4DBA8E448411F1B074A901CF1D38B0.roa (raw, json)
Hash identifier: 0DKeggyQQ2NW+X6782FmsxVy/ykUhSBX8XQEusvxieA=
Subject key identifier: C3:74:83:C9:E1:36:77:04:F2:BB:96:37:71:8F:38:E2:3D:A7:4A:9E
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0BA4
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DF4DBA8E448411F1B074A901CF1D38B0.roa
Signing time: Thu 30 Apr 2026 11:08:10 +0000
ROA not before: Thu 30 Apr 2026 11:08:06 +0000
ROA not after: Wed 31 Dec 2036 11:08:06 +0000
asID: 402298
IP address blocks: 165.49.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 May 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2980 (0xba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 30 11:08:06 2026 GMT
Not After : Dec 31 11:08:06 2036 GMT
Subject: CN=69f3381a-5741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:6e:c6:56:11:f2:48:e0:16:83:09:bb:2a:
95:65:ca:b7:cc:3a:34:2e:df:0b:3c:6a:de:89:09:
bf:8a:2f:46:3e:64:b5:8a:3d:49:a9:6e:9e:a3:60:
4c:20:28:ea:6d:5a:17:ce:2a:a7:bf:58:01:bd:25:
75:1f:c0:e7:8c:ef:a1:77:df:75:f1:1d:52:fc:e8:
e7:a1:1d:de:bc:1a:16:d6:90:91:7f:b2:9f:b6:29:
05:c6:d4:87:c3:60:fa:28:d8:19:2a:f2:ff:94:0e:
c4:ce:9f:ea:3d:34:2f:68:0e:d4:71:61:25:94:ad:
12:17:b0:53:a8:c6:a5:43:f9:7c:29:b5:a6:17:1b:
66:e4:e5:a2:f5:b9:0a:42:1d:20:61:5f:8d:53:8c:
54:99:b0:11:f4:8a:38:d1:27:b3:7a:be:43:e8:fa:
38:29:96:8f:40:21:d6:37:4e:24:3d:28:9f:b9:df:
c6:4f:bd:94:53:c1:66:42:5b:7d:76:56:4d:7f:65:
d9:f6:c4:d0:95:ac:d3:a3:d9:fe:b9:f7:07:03:17:
1f:08:ee:a6:c1:78:c6:e7:03:b8:22:c9:41:f6:eb:
ad:e4:58:aa:d1:59:6e:73:73:b0:3d:f5:3d:73:25:
a5:44:2b:2e:13:5a:7b:52:0c:7d:72:39:0a:1a:95:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:83:C9:E1:36:77:04:F2:BB:96:37:71:8F:38:E2:3D:A7:4A:9E
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DF4DBA8E448411F1B074A901CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.73.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f7:fb:6c:4c:93:3f:54:0c:90:b6:29:28:2e:de:06:3d:2c:
b6:62:9f:66:b4:fe:e7:3a:6d:21:db:f3:91:f1:d0:03:9e:cd:
b4:33:ea:07:8e:ba:3a:b2:a1:45:ec:42:6b:f8:7b:02:c0:e3:
32:09:40:3c:0d:59:1e:84:c4:7d:74:a1:a4:5c:3d:42:83:49:
ad:c0:6c:57:38:b8:bb:74:bd:8c:14:82:32:75:e3:c8:ce:b9:
4a:fb:86:e7:8c:6c:b6:74:0d:7d:ce:7a:1b:66:66:12:da:7b:
15:64:67:c7:82:eb:37:7d:09:89:9f:ff:bb:07:e5:63:f3:7a:
17:8a:28:78:47:2f:8e:bc:03:0e:12:97:c4:59:ff:82:95:b7:
6b:0b:05:bd:57:8e:17:1f:9a:e6:ea:5d:bd:1c:1e:80:a9:99:
17:31:f5:fe:86:c6:9d:6d:03:58:cd:e5:ac:b5:c3:19:10:b1:
5f:98:83:e2:f6:96:3d:30:bb:cf:a9:33:35:6b:d1:0d:43:3d:
5b:c1:99:2b:57:74:ef:26:3c:25:87:a5:c3:96:16:8c:ac:71:
2d:96:25:1a:83:25:d8:6d:a9:26:fd:30:0e:a9:3c:20:df:7b:
d2:c8:6b:7c:08:bc:c6:d4:93:0c:98:b7:c1:9d:aa:72:b0:43:
ce:99:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:47 2026 by rpki-client