Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2BD25FB8557411F1BD3163F8CE1D38B0.roa
File: 2BD25FB8557411F1BD3163F8CE1D38B0.roa (raw, json)
Hash identifier: sfxiEzsQFdQP7rwIQH76TN2dvUFaV9rdjjf188XrFZI=
Subject key identifier: 7B:07:82:AD:C3:D6:64:FE:EC:89:C8:89:96:4D:27:BD:0F:D5:EA:29
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0BE8
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2BD25FB8557411F1BD3163F8CE1D38B0.roa
Signing time: Fri 22 May 2026 00:21:27 +0000
ROA not before: Fri 22 May 2026 00:00:21 +0000
ROA not after: Wed 31 Dec 2036 00:00:21 +0000
asID: 152324
IP address blocks: 165.49.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: May 22 00:00:21 2026 GMT
Not After : Dec 31 00:00:21 2036 GMT
Subject: CN=6a0fa187-3103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:3d:b7:46:18:f2:82:fe:b2:e3:91:eb:70:
f9:de:9b:e4:da:1b:ec:53:ef:18:6e:ea:6a:12:98:
db:76:1a:1b:a4:e6:a4:cf:7c:ad:fa:b4:5d:6c:80:
f9:5c:71:76:ca:9f:79:2c:fd:50:8f:d6:d2:6d:23:
89:da:a3:a8:c4:aa:f1:04:04:78:5b:9a:ad:a9:ee:
3a:5a:00:b5:6f:ec:fc:95:8c:7a:14:79:fe:f6:9c:
bd:ec:89:2b:dc:36:f1:ce:c6:ff:a7:87:5e:e9:e0:
18:1a:87:2d:65:3a:b2:1d:8d:00:a0:39:0a:b9:5e:
cb:06:11:d0:ae:c9:92:65:20:a3:3c:9f:b8:ca:c1:
09:b7:22:9b:6c:d9:b1:89:88:91:3a:14:24:e9:fa:
0e:4a:af:dd:34:1d:7d:5a:8e:1c:e9:bc:92:2a:7f:
cf:ec:61:34:c3:bf:54:da:70:83:c4:ae:7a:57:8f:
09:3d:ba:5b:7d:af:16:44:a5:e2:99:30:78:56:ab:
4b:73:ea:d6:60:3d:8d:e7:ad:90:d4:97:02:fa:28:
f2:5b:0f:ef:2b:83:b5:eb:97:f6:e0:71:a0:d2:f8:
65:67:1d:a7:bd:83:07:bb:49:f9:16:a7:04:d3:24:
3c:1d:9f:07:73:4e:96:e0:e2:6c:c0:d8:95:47:21:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:07:82:AD:C3:D6:64:FE:EC:89:C8:89:96:4D:27:BD:0F:D5:EA:29
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2BD25FB8557411F1BD3163F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.248.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6f:76:b7:e5:f9:67:8c:4f:d8:eb:0c:ff:aa:bd:d8:78:3a:
85:a4:e8:0d:7d:ad:58:66:a5:1e:0a:f9:51:ba:36:47:19:78:
63:65:00:91:76:a5:67:4a:72:20:1e:79:d5:40:4b:62:73:e3:
93:60:d1:07:c9:c3:32:1d:85:24:03:6b:9d:24:01:34:81:3f:
19:dd:8f:62:6e:de:8f:2b:c9:8c:35:f5:2f:d5:50:aa:fa:46:
44:58:4d:d4:f7:0f:48:6a:ef:b8:9c:ea:bf:b3:de:32:b2:eb:
c5:71:b3:0a:7f:ee:8b:a5:69:6d:5c:0f:03:02:de:e8:f8:c8:
85:26:a4:c1:2a:e8:77:eb:e1:86:04:33:0e:2a:5c:e4:9a:d2:
e8:80:3e:74:39:c7:06:55:86:4c:ab:a9:50:e5:25:3c:b8:f6:
35:1d:f1:b0:2d:08:4b:70:9f:76:36:20:b9:8b:f0:3c:4c:2d:
b0:5b:da:45:63:32:c7:79:10:ba:57:e2:4d:4b:83:18:b3:8c:
20:2f:ff:c0:6a:59:5f:b2:27:2e:69:1d:3b:75:94:f2:ec:29:
a1:fe:e7:44:37:97:53:9c:4d:5f:34:e2:3b:40:db:c8:3e:2e:
39:99:16:1f:d9:4e:ed:1f:3d:11:84:6f:03:23:94:9b:6a:aa:
1c:be:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:05:32 2026 by rpki-client