Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E9E3AE1C802B11F18CF5B8C2CE1D38B0.roa
File: E9E3AE1C802B11F18CF5B8C2CE1D38B0.roa (raw, json)
Hash identifier: G9NHftpCO4nheXkohy/EZ4gl+VtiQwy72OruuXvz62w=
Subject key identifier: 7E:BC:AC:C9:7B:75:9A:FA:24:98:95:DD:03:FF:E8:89:B3:15:41:8F
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C6D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E9E3AE1C802B11F18CF5B8C2CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:02:32 +0000
ROA not before: Wed 15 Jul 2026 09:02:28 +0000
ROA not after: Wed 31 Dec 2036 09:02:28 +0000
asID: 13347
IP address blocks: 165.49.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:02:28 2026 GMT
Not After : Dec 31 09:02:28 2036 GMT
Subject: CN=6a574ca8-7aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:66:a7:83:8a:35:98:b5:97:e0:4e:f2:71:
71:53:10:f5:33:0b:36:22:b7:2c:15:79:3d:a2:67:
7a:a9:d7:8d:09:b1:60:d5:c8:f9:f5:8d:58:88:22:
98:10:03:bc:96:25:73:e1:8a:d3:c6:89:cc:99:f0:
32:00:6f:70:cc:fd:70:b2:36:10:f1:cf:2a:ea:30:
93:d0:e4:02:42:43:77:df:25:af:6c:b8:85:1b:5e:
6b:14:10:86:4c:91:99:b8:fd:a6:d6:ef:ab:cf:ee:
54:57:0c:2b:57:78:66:1a:11:f4:f3:da:0f:9f:f7:
e9:c7:36:5f:0a:6f:3b:7f:6c:e4:43:75:8c:05:fb:
da:9e:ff:94:9b:56:90:31:77:99:33:8c:20:6f:16:
1d:c5:39:f7:7f:a6:0a:bb:e7:13:7b:0a:04:fe:57:
d5:20:7a:bb:dc:73:e2:84:c5:5c:57:b8:08:dc:c8:
94:5d:3b:7a:c2:e3:35:5b:c4:e0:51:73:68:82:73:
00:aa:12:4c:df:4a:87:54:e0:29:8e:db:bc:e9:01:
00:3a:79:4f:5d:71:c1:be:be:9b:2c:59:41:d0:78:
09:90:dc:ea:cb:30:d2:5f:fe:15:2a:6f:77:17:cb:
83:19:0a:25:6e:d1:e4:d9:f2:12:37:50:1d:1e:2e:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BC:AC:C9:7B:75:9A:FA:24:98:95:DD:03:FF:E8:89:B3:15:41:8F
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E9E3AE1C802B11F18CF5B8C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f6:2a:9a:4a:f2:d9:0e:d0:99:a0:98:d6:c7:32:80:a6:5a:
b5:d9:59:02:1d:9b:43:2e:46:6c:76:de:a6:15:a1:e4:0c:cf:
84:28:82:9f:80:9d:4c:bc:f1:1b:74:75:37:3f:7a:0c:ff:d3:
ba:75:5e:fc:cd:8c:4b:f9:e2:67:ef:60:33:80:a5:52:44:4d:
c7:59:ba:51:4a:22:8a:c4:1a:8d:ea:16:bb:24:4b:b5:e8:2e:
fc:23:c5:2b:f5:0f:25:aa:0d:c7:2e:c5:d9:39:45:ac:3a:f1:
0d:45:f5:bd:af:1f:49:96:d2:6e:6f:03:ef:21:10:85:fb:23:
97:89:69:25:53:08:b9:fd:52:bd:05:98:29:84:56:94:5d:5a:
96:55:47:ed:16:21:7d:42:19:82:0f:67:5b:00:12:0f:c5:e0:
a8:8f:79:79:53:85:51:ea:e7:88:56:b3:39:7e:01:d1:57:04:
b0:11:39:c6:7e:a2:9b:13:2b:ef:5f:83:7f:60:63:10:0a:02:
1a:93:24:aa:a3:e6:b9:16:65:ab:c5:a4:3f:b1:0f:7f:e4:a9:
6b:75:3a:a4:a0:69:ff:93:e7:23:e1:f5:4f:77:ca:21:8f:c4:
3e:b1:92:59:c0:db:d2:53:c4:49:0b:80:35:99:d6:4d:72:7b:
a1:01:73:09
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTUwOTAyMjhaFw0zNjEyMzEwOTAyMjhaMBgxFjAU
BgNVBAMTDTZhNTc0Y2E4LTdhY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpsGang4o1mLWX4E7ycXFTEPUzCzYitywVeT2iZ3qp140JsWDVyPn1jViI
IpgQA7yWJXPhitPGicyZ8DIAb3DM/XCyNhDxzyrqMJPQ5AJCQ3ffJa9suIUbXmsU
EIZMkZm4/abW76vP7lRXDCtXeGYaEfTz2g+f9+nHNl8Kbzt/bORDdYwF+9qe/5Sb
VpAxd5kzjCBvFh3FOfd/pgq75xN7CgT+V9Ugervcc+KExVxXuAjcyJRdO3rC4zVb
xOBRc2iCcwCqEkzfSodU4CmO27zpAQA6eU9dccG+vpssWUHQeAmQ3OrLMNJf/hUq
b3cXy4MZCiVu0eTZ8hI3UB0eLnuTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfrys
yXt1mvokmJXdA//oibMVQY8wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0U5RTNBRTFDODAyQjExRjE4Q0Y1QjhDMkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMXgwDQYJKoZIhvcNAQELBQAD
ggEBAAT2KppK8tkO0JmgmNbHMoCmWrXZWQIdm0MuRmx23qYVoeQMz4Qogp+AnUy8
8Rt0dTc/egz/07p1XvzNjEv54mfvYDOApVJETcdZulFKIorEGo3qFrskS7XoLvwj
xSv1DyWqDccuxdk5Raw68Q1F9b2vH0mW0m5vA+8hEIX7I5eJaSVTCLn9Ur0FmCmE
VpRdWpZVR+0WIX1CGYIPZ1sAEg/F4KiPeXlThVHq54hWszl+AdFXBLAROcZ+opsT
K+9fg39gYxAKAhqTJKqj5rkWZavFpD+xD3/kqWt1OqSgaf+T5yPh9U93yiGPxD6x
klnA29JTxEkLgDWZ1k1ye6EBcwk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:07 2026 by rpki-client