Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/EACE5362811C11F1B15FDAC0CE1D38B0.roa
File: EACE5362811C11F1B15FDAC0CE1D38B0.roa (raw, json)
Hash identifier: a5kBObpJ1eze0qTxQ5jHI8nJOPC1qAvXiX6zeuUoTbU=
Subject key identifier: 1C:5A:7B:B8:68:E9:E9:0B:46:70:8B:A1:E8:6F:42:6E:12:B3:A8:BC
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CE3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/EACE5362811C11F1B15FDAC0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:47:43 +0000
ROA not before: Thu 16 Jul 2026 13:47:39 +0000
ROA not after: Wed 31 Dec 2036 13:47:39 +0000
asID: 7029
IP address blocks: 165.49.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:47:39 2026 GMT
Not After : Dec 31 13:47:39 2036 GMT
Subject: CN=6a58e0ff-3df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:c0:21:db:94:59:29:a5:ad:87:71:b0:73:
66:ea:59:1b:be:f0:a8:e1:17:63:c2:3a:c3:65:a8:
66:71:77:15:8d:39:60:fe:ed:f5:c2:b2:2f:90:14:
cb:57:07:5b:d4:a9:a7:0a:5e:8c:f8:92:67:96:01:
1a:51:fc:a7:8e:cf:b5:4a:e8:88:05:81:c4:87:57:
da:0f:87:98:34:f1:3f:d3:2a:b1:5b:b4:4e:59:57:
8e:c2:eb:c8:f2:8d:48:f8:03:94:90:c1:fa:90:67:
67:00:e0:4d:6f:5c:2d:69:d1:15:a9:ce:1f:83:3a:
55:2b:83:5e:6a:60:61:6c:5d:5d:40:10:2e:b5:71:
0b:fb:d8:da:3f:db:db:58:63:b8:77:ab:83:e9:b3:
95:36:d9:a7:72:cd:8e:0c:d5:4a:72:db:b2:18:3b:
5b:6e:8a:c2:2c:6a:7e:eb:17:38:b2:60:b6:33:25:
80:50:d6:03:ba:e4:b1:21:9a:f0:74:08:9c:34:d8:
42:61:29:08:8c:e1:7e:c9:18:4a:5c:55:64:58:ea:
c3:6b:44:30:6b:fe:cc:fd:78:d8:3c:72:63:52:74:
47:17:f7:0d:37:05:ab:34:53:b3:50:cf:41:80:58:
13:51:f8:5b:4a:73:7e:78:12:a3:1d:81:72:ea:2e:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:7B:B8:68:E9:E9:0B:46:70:8B:A1:E8:6F:42:6E:12:B3:A8:BC
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/EACE5362811C11F1B15FDAC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.120.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fc:34:03:05:85:5c:d9:23:f9:e8:d7:ea:94:1e:55:6b:4c:
fe:6e:02:f7:10:24:47:b5:d8:22:92:5f:92:6e:52:f5:a7:46:
f7:28:23:65:12:ad:6e:ca:21:fb:66:2f:ff:59:63:a4:75:a0:
a9:3c:2f:91:55:58:40:f5:eb:a9:e8:68:c4:78:b3:55:d2:fa:
10:05:8a:cf:8e:f4:1d:85:ab:45:59:28:da:b6:a4:e3:d8:05:
a4:07:22:ae:19:a3:f9:dd:de:93:f9:5f:bb:40:6f:f9:a8:d5:
33:4a:70:9f:86:a8:e4:03:e6:cd:30:a0:73:ad:40:e5:9d:c6:
c5:d4:8f:1d:5b:b7:9c:7d:30:5b:6a:45:28:76:64:99:8b:0c:
36:d9:3f:ab:cb:f7:23:9c:78:79:c9:9e:68:29:66:76:2c:6e:
b8:fc:17:2f:47:e7:42:e9:d8:6a:2a:d3:1c:ab:be:b8:38:56:
f7:3a:32:dc:f6:cd:72:1e:b1:77:84:cf:4e:8d:73:df:ad:ab:
70:3b:3d:4c:dd:c2:f9:ac:7f:99:b5:6e:03:b5:a8:44:82:70:
1c:ac:99:90:85:eb:5f:4b:58:e2:8f:9c:7f:87:c5:31:fd:5c:
82:80:8e:60:8b:49:16:3b:7a:9b:50:47:9b:4b:d8:46:3b:72:
9f:d7:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:32 2026 by rpki-client