Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/087BF8322C5511F18BE19481DAE4EC9C.roa
File: 087BF8322C5511F18BE19481DAE4EC9C.roa (raw, json)
Hash identifier: j8Y+u3yIa67ouBKH1l7Tj+TMUeLVGPfMkQEEDBrqn4E=
Subject key identifier: 19:78:FE:D6:EA:8F:91:93:97:BA:98:A1:E0:06:69:E0:59:6F:88:FC
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B4C
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/087BF8322C5511F18BE19481DAE4EC9C.roa
Signing time: Mon 30 Mar 2026 16:25:15 +0000
ROA not before: Mon 30 Mar 2026 16:25:10 +0000
ROA not after: Wed 31 Dec 2036 16:25:10 +0000
asID: 198087
IP address blocks: 165.49.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2892 (0xb4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Mar 30 16:25:10 2026 GMT
Not After : Dec 31 16:25:10 2036 GMT
Subject: CN=69caa3eb-dafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:f0:76:c9:31:f6:cc:cf:45:f3:a0:9c:55:
a8:57:e0:34:de:6b:44:d7:36:bb:23:b9:eb:4e:35:
e1:b9:cd:eb:f2:1a:70:b7:cb:dd:1b:30:71:da:4c:
db:12:1e:78:47:6f:7a:fa:7d:fc:ba:a6:4b:0b:38:
bf:73:a7:4e:a2:7f:4f:15:34:43:71:1d:bf:69:81:
8b:d4:06:46:f9:e2:f3:d6:77:11:73:0e:be:cf:4f:
6d:13:14:73:03:48:65:bd:a2:67:65:84:87:2e:d2:
2f:1e:ee:5e:61:5f:1b:ea:21:25:7c:a5:ab:42:33:
b9:49:9b:5c:45:9a:90:e6:2a:8c:42:b5:0b:80:0d:
23:27:1d:5a:ce:0b:41:07:fe:da:4c:c4:26:93:55:
ce:49:2f:c7:4d:81:65:de:57:0f:b8:ac:d1:6b:97:
ca:32:05:5e:e2:91:80:3a:4c:28:32:5d:1a:a9:ec:
c2:f2:3e:89:a9:c0:7f:a4:76:61:4c:8c:c7:51:95:
4f:65:3d:ce:8e:d6:af:be:fb:75:da:47:af:f9:91:
39:29:da:68:10:8b:8f:13:36:d2:63:05:13:18:d3:
6b:43:36:3d:aa:05:3f:24:66:84:4b:27:c3:33:fe:
3a:c8:97:dc:2a:82:4a:41:25:bd:3b:7f:dd:d4:c3:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:FE:D6:EA:8F:91:93:97:BA:98:A1:E0:06:69:E0:59:6F:88:FC
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/087BF8322C5511F18BE19481DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
31:83:25:ad:a1:e9:3c:76:87:85:3a:e9:91:26:2f:cc:f5:0a:
a6:2a:47:d5:9f:2d:f5:7b:e5:ff:2d:65:47:7d:8b:da:dd:5a:
e9:8c:27:ad:c8:ca:c0:f6:05:13:da:1a:d4:2e:42:51:49:82:
ba:ca:bb:08:0b:fe:e6:5c:e0:d8:8b:04:ee:0c:44:a6:bf:7c:
61:4a:d8:cc:ec:f2:b6:f4:b4:a7:65:00:6b:59:7b:70:bc:e0:
52:81:7e:16:50:94:10:d0:a9:e9:a4:88:ee:34:cc:21:09:dc:
64:e2:c6:2e:f5:8b:ff:74:1d:25:25:0f:0e:b3:c5:31:a9:6c:
8e:e0:b8:d8:4b:18:e9:15:e4:74:1e:2a:49:93:65:86:23:94:
1c:88:1a:7a:04:00:e4:5e:c5:ec:54:11:8f:f1:2a:f9:c2:7e:
88:2b:20:87:bc:ac:da:7c:58:1f:df:d5:3b:a3:0e:8b:d5:11:
b3:75:79:fa:44:45:c4:9d:f5:11:69:16:e7:85:95:f7:38:54:
77:6d:04:56:3b:7b:a0:ed:e4:15:f4:9b:4d:8b:4c:be:92:3c:
23:4f:da:f1:bb:94:a6:18:c0:89:db:de:fa:c1:f7:4b:b6:9b:
00:8d:c3:92:cf:37:0c:04:4d:c9:54:f5:99:9e:06:aa:33:19:
e6:75:02:2a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjAzMzAxNjI1MTBaFw0zNjEyMzExNjI1MTBaMBgxFjAU
BgNVBAMTDTY5Y2FhM2ViLWRhZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC57vB2yTH2zM9F86CcVahX4DTea0TXNrsjuetONeG5zevyGnC3y90bMHHa
TNsSHnhHb3r6ffy6pksLOL9zp06if08VNENxHb9pgYvUBkb54vPWdxFzDr7PT20T
FHMDSGW9omdlhIcu0i8e7l5hXxvqISV8patCM7lJm1xFmpDmKoxCtQuADSMnHVrO
C0EH/tpMxCaTVc5JL8dNgWXeVw+4rNFrl8oyBV7ikYA6TCgyXRqp7MLyPompwH+k
dmFMjMdRlU9lPc6O1q+++3XaR6/5kTkp2mgQi48TNtJjBRMY02tDNj2qBT8kZoRL
J8Mz/jrIl9wqgkpBJb07f93Uw3RLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUGXj+
1uqPkZOXupih4AZp4FlviPwwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzA4N0JGODMyMkM1NTExRjE4QkUxOTQ4MURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMWwwDQYJKoZIhvcNAQELBQAD
ggEBADGDJa2h6Tx2h4U66ZEmL8z1CqYqR9WfLfV75f8tZUd9i9rdWumMJ63IysD2
BRPaGtQuQlFJgrrKuwgL/uZc4NiLBO4MRKa/fGFK2Mzs8rb0tKdlAGtZe3C84FKB
fhZQlBDQqemkiO40zCEJ3GTixi71i/90HSUlDw6zxTGpbI7guNhLGOkV5HQeKkmT
ZYYjlByIGnoEAORexexUEY/xKvnCfogrIIe8rNp8WB/f1TujDovVEbN1efpERcSd
9RFpFueFlfc4VHdtBFY7e6Dt5BX0m02LTL6SPCNP2vG7lKYYwInb3vrB90u2mwCN
w5LPNwwETclU9ZmeBqozGeZ1Aio=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:02 2026 by rpki-client