Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F009FF76811B11F193BCE9B8CE1D38B0.roa
File: F009FF76811B11F193BCE9B8CE1D38B0.roa (raw, json)
Hash identifier: Pxmkkf8nP3DnSq044vVjfG1k+WKjpRlWI11VyX2Mebk=
Subject key identifier: 6C:16:FE:19:D1:2B:79:7E:44:DD:FC:BE:CD:9A:B7:49:15:EB:77:A8
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CBD
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F009FF76811B11F193BCE9B8CE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:40:42 +0000
ROA not before: Thu 16 Jul 2026 13:40:38 +0000
ROA not after: Wed 31 Dec 2036 13:40:38 +0000
asID: 5650
IP address blocks: 165.49.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:40:38 2026 GMT
Not After : Dec 31 13:40:38 2036 GMT
Subject: CN=6a58df5a-0194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:c5:c4:f9:c7:a6:bc:9a:ed:02:75:08:03:
b4:4e:4f:45:5b:e5:0f:e7:b9:e7:66:17:99:32:1d:
f4:f8:f0:0c:21:23:da:49:bd:61:72:d5:32:e4:07:
41:c7:ca:40:ce:fc:18:00:10:8c:54:2e:2b:ac:93:
ec:0d:18:2f:ba:b9:fe:81:18:74:bc:af:1f:df:d8:
45:f2:c3:bb:cd:0d:95:2e:c9:46:88:a4:67:f5:9a:
42:d2:38:66:79:8c:eb:ce:12:ab:d4:5b:c7:90:a8:
b2:9c:bb:7d:a2:68:d0:fd:c8:35:d9:6a:06:e1:00:
a2:d8:45:ac:c6:88:70:7d:0a:b6:72:6e:8f:29:29:
13:d6:65:cb:58:78:05:fd:17:92:8b:90:f8:a7:e5:
af:61:5d:05:57:91:80:11:5f:64:2d:76:41:4b:53:
30:85:41:3c:73:ff:e8:07:20:e8:39:7e:36:2b:01:
e4:b0:04:de:84:4b:05:61:91:93:44:14:23:b4:70:
06:9a:81:36:23:98:fc:85:15:64:c0:08:db:d6:3a:
fe:d3:9f:15:1a:21:50:ee:eb:7a:d1:2a:ee:2d:0e:
27:55:85:e1:81:f6:93:77:7f:27:5f:7f:06:96:a7:
d5:9b:da:ef:cf:c0:f4:65:96:de:b8:f0:11:02:76:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:FE:19:D1:2B:79:7E:44:DD:FC:BE:CD:9A:B7:49:15:EB:77:A8
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F009FF76811B11F193BCE9B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0e:36:b6:24:5d:06:23:67:29:93:da:0b:4f:90:bd:3b:47:
62:f4:fe:ae:fa:90:50:23:75:a5:aa:db:f8:4e:9f:3f:18:ec:
28:2f:d0:e9:91:12:f4:87:03:3a:8e:b8:30:15:c4:1c:f7:9c:
db:f3:f3:08:e1:ed:38:20:86:dc:a5:69:2b:78:c2:fd:ff:61:
3e:d8:17:16:61:bd:ef:3e:b6:49:36:65:2f:b1:67:a1:57:07:
cd:2b:27:ea:a4:e7:ff:4d:01:2e:a1:30:2d:2d:84:aa:9f:85:
e0:2b:f8:37:1e:7b:d3:12:f0:43:7e:7f:55:da:72:bf:18:d6:
27:30:d5:ca:bd:86:45:4d:d3:5e:74:4c:0d:d7:13:e1:1d:9c:
d3:07:90:69:42:ca:40:56:0d:53:af:47:2e:08:2f:0d:bc:73:
96:e8:fb:1a:d2:b7:1c:9e:b0:55:15:7d:f5:96:5b:a8:94:f6:
87:6f:95:06:37:2f:6c:12:cb:dc:f9:f8:37:03:0f:09:ce:b3:
b1:3b:23:68:98:3e:43:21:47:e5:7f:60:70:c7:19:28:1f:f3:
f0:3e:c9:30:17:a4:99:19:aa:7b:2a:7d:54:f8:22:42:3d:5d:
31:44:81:96:e7:e6:21:9e:82:36:fb:2c:af:10:ac:14:56:b9:
7e:29:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:15 2026 by rpki-client