Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E198B962637211F191DB051BCF1D38B0.roa
File: E198B962637211F191DB051BCF1D38B0.roa (raw, json)
Hash identifier: 0rqDxbtdUOw9ODC2hCSnCeCnH+DnTgSes1YvGOXmtP8=
Subject key identifier: 13:38:DE:39:EE:46:39:AE:D3:A4:56:7E:2E:15:D3:0A:3D:36:E6:D4
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C10
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E198B962637211F191DB051BCF1D38B0.roa
Signing time: Mon 08 Jun 2026 19:47:29 +0000
ROA not before: Mon 08 Jun 2026 19:47:24 +0000
ROA not after: Wed 31 Dec 2036 19:47:24 +0000
asID: 202036
IP address blocks: 165.49.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Jun 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 8 19:47:24 2026 GMT
Not After : Dec 31 19:47:24 2036 GMT
Subject: CN=6a271c51-6ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:60:14:b3:1c:fc:01:1f:d2:fe:c2:38:4e:
a2:1d:cd:a5:7d:b7:9c:02:fc:1f:7b:f1:75:0d:d9:
14:25:19:c7:97:50:b4:0c:d7:f8:87:a0:34:cf:a5:
1d:a6:d2:e4:c5:8f:87:41:a9:a5:d7:d3:89:03:59:
7e:58:00:e0:55:18:0a:50:d2:a3:9e:80:dc:3b:9b:
92:87:25:9a:d2:95:52:f8:42:a9:b4:37:e6:d5:64:
cd:f7:6a:b3:5c:17:d4:64:80:5e:74:5f:4c:6c:d2:
bf:f8:c2:05:df:97:5f:e1:d7:49:d9:41:b2:94:6f:
34:53:62:d0:0b:08:b0:8a:bb:10:10:fe:3e:59:f8:
4d:e3:93:95:66:4d:ce:38:aa:62:da:36:c3:4a:0e:
d9:95:de:8a:da:56:12:68:3f:ea:6a:13:f0:12:77:
a0:cd:e0:99:99:ec:44:4e:16:f0:b8:4a:2a:e2:6b:
83:70:bf:9a:6e:c5:2b:db:18:be:c7:a8:f2:6a:5a:
50:c2:37:46:99:f5:61:00:38:f5:8b:cd:47:0e:83:
60:31:eb:b3:d9:a6:0d:f4:64:4b:74:0b:08:79:d2:
bc:76:86:e7:2b:52:8d:ba:02:48:90:97:07:3e:11:
90:4d:96:85:3c:d9:71:14:5a:83:3d:7e:54:76:55:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:38:DE:39:EE:46:39:AE:D3:A4:56:7E:2E:15:D3:0A:3D:36:E6:D4
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E198B962637211F191DB051BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.242.0/24
Signature Algorithm: sha256WithRSAEncryption
01:94:b2:d0:e1:ff:76:2c:c8:c1:bd:63:6d:bc:33:a6:02:81:
d0:80:a7:ca:50:b4:81:92:7f:82:da:fc:7f:f6:63:fc:a0:d9:
89:4d:c0:a9:38:2f:df:93:cd:75:79:bb:42:aa:c5:d1:9c:4e:
bf:35:94:c4:2b:1e:39:87:55:b7:dc:0f:b8:61:e9:d6:d5:55:
59:2b:4a:2d:5d:29:63:4e:71:a4:06:15:a5:5f:c9:1d:3c:59:
51:16:ce:d3:a7:03:c2:e0:52:1c:7d:bf:ef:9b:d5:b7:89:68:
bd:44:d8:01:06:24:74:c4:a6:d7:f8:32:03:b4:21:1b:e8:df:
bd:7f:cf:73:9a:9f:1c:16:a6:68:a2:64:9a:72:97:ef:2c:cd:
98:20:56:0b:af:3f:71:7a:bd:a3:5a:83:a7:3e:d1:c5:49:17:
c8:a1:bf:73:2a:62:55:a7:28:3a:fe:7b:0e:82:26:2a:c4:27:
3c:11:56:a7:95:af:34:d7:b0:0e:ff:0a:6f:ce:29:b1:28:8a:
e0:c3:eb:a8:b7:c4:11:d1:08:6a:9e:2f:66:2d:41:78:f5:61:
8a:72:91:d8:fd:c5:22:89:4f:36:00:ff:bf:b3:f9:78:38:74:
0a:d6:db:dd:75:93:7d:7b:f5:f0:04:54:e6:dc:8d:36:dd:6b:
e9:49:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 12:53:49 2026 by rpki-client