Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/240FFCB2126D11F188DF3CCBDAE4EC9C.roa
File: 240FFCB2126D11F188DF3CCBDAE4EC9C.roa (raw, json)
Hash identifier: iYE1RXBRjPdObBuGe88T3Gr8QIWWyrDp2PTWGCoETfI=
Subject key identifier: DD:45:D3:E9:57:9A:E2:F0:01:5E:4A:65:6E:5B:BF:54:50:BD:5D:23
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0AFF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/240FFCB2126D11F188DF3CCBDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 17:12:19 +0000
ROA not before: Wed 25 Feb 2026 17:12:15 +0000
ROA not after: Wed 31 Dec 2036 17:12:15 +0000
asID: 834
IP address blocks: 165.49.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2815 (0xaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Feb 25 17:12:15 2026 GMT
Not After : Dec 31 17:12:15 2036 GMT
Subject: CN=699f2d73-c7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:d7:78:82:6d:f5:a9:d8:59:1b:6c:6b:aa:
43:93:b3:7a:03:1e:f1:75:08:36:44:9b:4d:83:50:
7a:27:1d:fb:2b:08:4b:02:5a:6a:82:99:e0:38:fc:
a1:fb:ac:bd:68:8b:cc:95:5b:53:2f:19:3c:d7:e6:
b1:08:bb:42:eb:93:98:91:05:f4:4b:23:67:94:4c:
d2:42:74:86:06:7a:84:08:08:76:94:05:f0:86:19:
5f:23:b5:68:5c:c4:53:62:3d:28:54:11:ec:9d:76:
0a:ba:73:be:85:66:a9:6e:de:b1:02:4a:b4:1c:ba:
37:ec:50:06:9b:82:5c:02:59:c9:2c:ff:c6:18:0d:
1d:53:ae:ef:34:3f:31:2a:c8:9b:bc:1f:63:7b:81:
65:a7:5e:48:7c:cd:8f:3f:70:f6:11:0d:ab:6e:81:
49:d8:9d:ff:42:88:08:99:bc:a1:1b:54:6d:ca:58:
4e:74:b3:d1:3d:36:a4:5e:c4:db:6a:fc:d5:a0:f0:
7c:9c:30:ac:d3:db:e5:60:de:4f:5c:5d:90:30:eb:
bd:b5:72:af:42:11:72:8a:2b:9a:21:ca:81:4f:fb:
a2:22:ff:80:ea:18:01:d4:23:d4:62:85:28:28:7e:
5e:ac:bb:e5:d3:5d:54:1e:51:2e:bf:b7:8a:55:d5:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:45:D3:E9:57:9A:E2:F0:01:5E:4A:65:6E:5B:BF:54:50:BD:5D:23
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/240FFCB2126D11F188DF3CCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ab:cf:82:ec:2a:1b:1c:5c:43:27:41:7b:aa:25:39:fd:cd:
ab:84:60:0f:f1:90:8e:bf:19:d2:2c:65:08:02:68:32:ca:ad:
79:75:ff:f4:ba:d5:c8:08:50:3c:17:2d:f3:ce:2b:4d:32:29:
0c:30:1d:f6:c7:7b:41:85:37:7c:fb:5e:75:9b:ec:4f:d7:b0:
18:19:ed:df:25:c5:c2:4b:8e:56:cd:34:48:12:c8:91:83:d6:
c3:3d:42:57:fb:fb:1e:99:ec:b4:22:60:fd:71:c7:90:7d:c3:
0d:03:eb:1d:c1:11:7a:a3:33:ce:84:4f:c7:9b:51:f3:32:fd:
e0:05:50:9d:c6:a7:68:47:4d:a6:1b:21:c1:f8:5a:3f:8b:fc:
74:0c:de:fd:4d:12:73:b1:52:72:60:7a:41:68:dc:72:64:6b:
6c:15:52:6f:47:64:3c:89:c3:a9:de:ce:6d:54:55:c3:9f:83:
eb:d6:7b:cc:9d:39:20:14:f7:85:80:18:9a:ff:bb:35:f6:f7:
84:a7:82:0b:ce:b4:8f:6b:71:ed:6c:66:40:56:4f:7f:59:f0:
9b:81:88:ca:0e:49:2d:b2:e9:f4:f5:87:fd:e0:35:df:16:51:
fd:3e:32:10:d3:cf:64:d1:c7:cf:bc:62:11:a7:6a:3a:66:cf:
85:12:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:43 2026 by rpki-client