Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/00103BAA50E911F1AF6AD9E4CE1D38B0.roa
File: 00103BAA50E911F1AF6AD9E4CE1D38B0.roa (raw, json)
Hash identifier: cXv53lt3ugMd2A+Lvu1Z1+NnSAiOuGqACUfSM5+EDo8=
Subject key identifier: 54:D6:88:CD:19:DB:CE:13:1A:3B:FB:59:68:25:37:20:6D:30:9C:6C
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0BD5
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/00103BAA50E911F1AF6AD9E4CE1D38B0.roa
Signing time: Sat 16 May 2026 05:35:09 +0000
ROA not before: Sat 16 May 2026 05:35:03 +0000
ROA not after: Wed 31 Dec 2036 05:35:03 +0000
asID: 834
IP address blocks: 165.49.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: May 16 05:35:03 2026 GMT
Not After : Dec 31 05:35:03 2036 GMT
Subject: CN=6a08020d-b6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ca:8c:a2:3d:0d:a4:08:3c:95:3b:c8:f1:78:
c9:9e:e7:40:85:68:0a:14:ac:41:aa:7b:a3:25:4f:
1b:6d:32:f3:4f:4d:8f:82:c6:c5:60:ac:ba:85:9d:
e1:83:47:04:5d:b2:28:f3:36:6e:ed:08:1a:89:3d:
76:9b:5b:71:2c:78:c9:ee:1a:0f:0b:54:3a:78:a4:
28:d9:4d:f7:ea:17:f2:fd:d6:44:8a:c8:87:b1:bc:
a0:2b:12:e9:6e:50:79:15:31:64:9a:1c:9e:ee:ab:
48:0e:f0:9c:2d:2c:4c:6c:e6:66:23:8a:5e:f9:0f:
9f:ef:a8:28:88:bc:c3:dd:b5:f2:00:8a:35:83:55:
09:c8:7b:88:a9:41:02:18:4c:70:d8:26:47:1e:8e:
61:20:de:8d:c9:3d:bf:6d:4d:36:33:1e:35:10:af:
82:7f:5b:f7:8e:6e:df:68:de:a2:d5:4b:6d:51:7b:
0d:fd:c4:85:2a:5f:fa:f4:f5:d0:6c:20:ee:b4:34:
9a:a9:35:5a:75:55:97:7d:21:c3:50:9b:6b:b2:80:
41:cd:b6:b8:f8:a1:5e:38:2c:d8:31:4f:6b:f7:b8:
05:b6:20:33:ae:6d:c2:4e:50:90:4d:e1:45:f9:3f:
3e:79:32:04:16:c6:43:80:e6:a9:d0:9f:86:33:23:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D6:88:CD:19:DB:CE:13:1A:3B:FB:59:68:25:37:20:6D:30:9C:6C
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/00103BAA50E911F1AF6AD9E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.109.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f4:f4:d8:8d:22:94:86:65:05:5f:c8:f0:24:bb:14:08:87:
a9:d1:73:f5:b4:e8:37:af:b4:07:f2:4d:45:ce:9d:7a:0a:43:
8f:e5:54:ce:8e:af:38:97:bc:54:b2:46:ba:b6:4f:2c:9f:c4:
f9:6e:f3:f1:3b:7d:10:25:22:9f:27:ca:68:64:47:60:d5:9e:
c1:12:8e:ae:39:bd:88:9e:d9:ec:b4:d7:fa:d9:91:f7:0d:67:
77:f4:92:5a:cb:b7:44:94:34:ed:d1:d2:11:4a:fb:4d:ba:79:
30:fc:7e:37:b7:fc:5a:db:0e:45:2d:21:08:d4:80:f8:9b:4a:
66:a0:6d:44:0e:cf:1c:4a:fe:a1:04:b1:7d:9f:38:3e:e5:e5:
40:cb:37:58:bf:c3:49:bb:00:0b:ae:5a:fd:3a:4a:d8:c4:af:
bc:cb:17:70:df:5b:74:2b:ec:3e:fa:a5:6b:d9:a5:80:4d:d9:
03:42:50:c6:c0:de:82:d7:16:c1:cb:93:3b:51:a6:71:0c:4e:
25:21:84:18:fa:02:24:d5:68:fb:84:26:30:d5:57:76:5b:71:
11:d3:ff:a1:4f:b9:97:60:39:f7:37:e3:f8:73:48:d8:a3:78:
6e:93:e4:26:fa:d9:aa:d1:f5:1e:b8:9c:4a:e4:57:60:cd:6a:
60:85:5a:7e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA1MTYwNTM1MDNaFw0zNjEyMzEwNTM1MDNaMBgxFjAU
BgNVBAMTDTZhMDgwMjBkLWI2YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzyoyiPQ2kCDyVO8jxeMme50CFaAoUrEGqe6MlTxttMvNPTY+CxsVgrLqF
neGDRwRdsijzNm7tCBqJPXabW3EseMnuGg8LVDp4pCjZTffqF/L91kSKyIexvKAr
EuluUHkVMWSaHJ7uq0gO8JwtLExs5mYjil75D5/vqCiIvMPdtfIAijWDVQnIe4ip
QQIYTHDYJkcejmEg3o3JPb9tTTYzHjUQr4J/W/eObt9o3qLVS21Rew39xIUqX/r0
9dBsIO60NJqpNVp1VZd9IcNQm2uygEHNtrj4oV44LNgxT2v3uAW2IDOubcJOUJBN
4UX5Pz55MgQWxkOA5qnQn4YzI3MzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVNaI
zRnbzhMaO/tZaCU3IG0wnGwwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzAwMTAzQkFBNTBFOTExRjFBRjZBRDlFNENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMW0wDQYJKoZIhvcNAQELBQAD
ggEBAJT09NiNIpSGZQVfyPAkuxQIh6nRc/W06DevtAfyTUXOnXoKQ4/lVM6OrziX
vFSyRrq2TyyfxPlu8/E7fRAlIp8nymhkR2DVnsESjq45vYie2ey01/rZkfcNZ3f0
klrLt0SUNO3R0hFK+026eTD8fje3/FrbDkUtIQjUgPibSmagbUQOzxxK/qEEsX2f
OD7l5UDLN1i/w0m7AAuuWv06StjEr7zLF3DfW3Qr7D76pWvZpYBN2QNCUMbA3oLX
FsHLkztRpnEMTiUhhBj6AiTVaPuEJjDVV3ZbcRHT/6FPuZdgOfc34/hzSNijeG6T
5Cb62arR9R64nErkV2DNamCFWn4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:02:26 2026 by rpki-client