Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FAFB7978811B11F189EE88BACE1D38B0.roa
File: FAFB7978811B11F189EE88BACE1D38B0.roa (raw, json)
Hash identifier: XlPb2yYwIc71PufwbningLvh8AdXsE5vZok7Xt1epdA=
Subject key identifier: 1A:65:16:9B:EB:77:B8:B6:45:A9:75:36:A7:63:FC:33:74:AF:09:FE
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CBF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FAFB7978811B11F189EE88BACE1D38B0.roa
Signing time: Thu 16 Jul 2026 13:41:00 +0000
ROA not before: Thu 16 Jul 2026 13:40:56 +0000
ROA not after: Wed 31 Dec 2036 13:40:56 +0000
asID: 5650
IP address blocks: 165.49.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 16 13:40:56 2026 GMT
Not After : Dec 31 13:40:56 2036 GMT
Subject: CN=6a58df6c-1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:02:57:95:20:87:2a:f3:33:94:4f:c4:e6:
cb:7d:d5:ce:29:1c:62:20:80:eb:bb:61:65:af:7c:
81:39:a7:a8:f1:c6:55:f8:fd:f6:71:75:60:a1:c6:
6f:da:33:17:d5:c5:4f:65:e1:3b:5b:0f:0e:63:40:
f3:d9:07:53:11:4c:8d:4c:f1:c6:e9:1d:0c:cf:70:
09:e3:02:6f:30:4c:b9:ee:89:66:3a:fa:6d:78:8a:
5a:0d:59:34:25:8a:86:0f:83:d8:b9:cf:0c:83:03:
3c:97:0d:a3:aa:b1:82:92:17:e7:d2:cf:6a:29:97:
d9:ee:f9:31:12:f7:1b:ac:ce:0f:de:1b:36:93:90:
2b:15:54:90:a3:11:03:05:78:3e:c3:38:f0:0b:8c:
c8:ce:a8:59:ac:48:e6:6c:4e:e8:87:53:d6:e9:a7:
26:e8:10:c2:2d:79:d5:63:16:87:8b:23:7d:3b:97:
c3:77:a1:e5:cd:fe:a2:1b:87:02:0a:64:e9:51:f4:
8b:ff:ad:4c:cd:e0:84:4c:bd:76:5d:18:c5:6c:fb:
99:b1:44:23:0a:e0:3c:a1:17:68:89:cb:ba:73:38:
b3:9c:a3:d1:63:50:ef:e6:1d:da:b0:85:4c:37:8f:
9e:0a:52:af:7f:5b:b1:89:fd:6a:02:3b:0c:74:e7:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:16:9B:EB:77:B8:B6:45:A9:75:36:A7:63:FC:33:74:AF:09:FE
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FAFB7978811B11F189EE88BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e3:5c:50:e6:2f:cf:81:94:8a:50:95:95:f9:ae:5e:b8:7e:
7c:e3:55:0f:f4:44:5d:ca:78:5d:a8:78:76:ea:91:bf:a1:02:
8b:7a:aa:78:14:29:12:77:de:08:9d:9a:54:1f:c2:80:80:bd:
f2:95:09:94:ab:cc:d9:5b:20:9b:0d:01:83:71:86:f4:51:8e:
87:3f:8d:de:8e:64:ba:0b:be:d4:1e:0b:6a:f0:a4:76:ac:ea:
09:dd:02:c7:c3:40:f9:d4:8e:73:5f:d3:53:37:f9:33:9d:ed:
8f:61:d8:d8:fa:55:b7:5e:4d:9d:60:6b:01:ec:08:94:96:c8:
5c:78:cf:c9:cc:3a:85:9d:bc:f4:dd:58:68:11:ab:04:f2:08:
79:a0:67:12:ad:0e:da:d6:4e:72:00:e2:27:0b:7a:83:38:3e:
9a:f6:81:15:61:59:d6:6c:4b:4c:85:37:66:a6:31:4c:ef:94:
84:42:54:6c:11:59:f8:f8:f8:b2:72:f4:aa:da:2d:3a:61:e7:
52:ba:3a:da:68:41:37:e9:fb:e6:fc:29:e1:24:1a:6c:a5:e2:
38:58:b5:82:98:89:13:3e:68:09:bc:cf:00:a2:02:cc:68:fd:
5e:b9:0c:bf:c7:20:9e:18:51:d7:e9:84:16:ac:31:93:db:75:
07:c7:fa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:47:15 2026 by rpki-client