Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4707C934126D11F1B5775FCBDAE4EC9C.roa
File: 4707C934126D11F1B5775FCBDAE4EC9C.roa (raw, json)
Hash identifier: /+LsK3JIMWclih7U4n+jP3qkkm44oGcsX4cMQp8zaFQ=
Subject key identifier: BB:5D:2A:5F:1A:FE:AC:8C:FF:CD:0B:6B:DA:CA:D8:53:08:36:06:24
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B01
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4707C934126D11F1B5775FCBDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 17:13:18 +0000
ROA not before: Wed 25 Feb 2026 17:13:14 +0000
ROA not after: Wed 31 Dec 2036 17:13:14 +0000
asID: 834
IP address blocks: 165.49.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2817 (0xb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Feb 25 17:13:14 2026 GMT
Not After : Dec 31 17:13:14 2036 GMT
Subject: CN=699f2dae-ae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:49:51:cf:88:d0:33:68:07:db:dc:10:59:
f1:8f:54:e0:b0:17:f8:89:f5:19:ed:8c:d0:be:6d:
bf:8e:a7:04:2c:2a:40:57:44:23:17:2b:19:04:5c:
62:8d:c8:8d:ba:76:36:95:29:e7:aa:50:2e:4e:b7:
d7:fa:4f:63:da:98:ac:17:3d:f0:46:2f:a1:9b:8a:
76:3e:a2:60:83:06:9d:8d:19:d5:09:c7:f1:20:71:
15:a7:70:fb:d7:b2:cc:9e:3d:95:9b:1a:85:26:1e:
74:8a:55:86:40:da:86:5d:76:16:a1:9b:73:79:14:
22:19:43:e4:4f:d6:2b:a6:41:a0:51:4d:7f:5b:41:
ba:5b:e8:16:76:fa:76:b1:4a:c8:e7:3f:d5:98:82:
43:9a:e6:42:96:41:ea:9b:97:e5:28:dd:09:7a:0f:
2a:d2:13:7f:f7:b9:6f:bc:bc:25:85:39:8c:f9:fb:
38:35:b0:bb:43:7d:bd:d8:be:9e:8e:d7:f2:13:1b:
7f:75:a1:e7:37:c8:a3:0e:33:02:2d:8d:4e:ac:81:
a4:7d:ba:e9:c0:83:c1:44:5b:b9:13:3a:f1:6a:77:
b3:94:a5:98:d2:d7:4a:ce:1f:1c:44:4b:6a:64:cc:
18:84:f1:83:43:0c:89:31:23:1c:56:67:e9:d2:c0:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5D:2A:5F:1A:FE:AC:8C:FF:CD:0B:6B:DA:CA:D8:53:08:36:06:24
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4707C934126D11F1B5775FCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.105.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a9:ec:2b:8d:25:2f:72:15:7e:2c:39:31:a7:8d:6c:e1:24:
48:72:76:e2:f6:1c:43:7a:59:83:4a:0d:86:42:21:b0:28:85:
4f:09:69:5a:5c:4b:ac:af:41:04:4b:cf:6a:87:9f:92:95:c3:
9a:2e:b6:e5:cb:a9:42:ce:66:17:57:6d:22:89:78:33:5b:da:
98:0c:69:93:7f:6c:af:6c:98:ef:b3:67:d3:01:fe:32:c1:9e:
aa:c4:17:c1:04:ab:f8:ed:86:17:3b:ce:d1:59:d7:a2:ad:5b:
97:2f:60:a4:e8:bc:4c:04:e1:bf:dc:cc:cd:42:e6:69:eb:d1:
47:9f:34:a7:bf:25:b6:96:2c:17:6e:b4:8b:f9:bc:83:13:03:
cf:07:33:93:8c:10:91:8e:11:2a:f4:9e:e3:d1:da:47:fa:b9:
23:5a:86:e0:a4:56:10:09:0d:34:e9:0d:c7:09:dd:f2:90:aa:
9e:06:3e:df:34:41:06:c3:1e:58:30:5c:9a:c7:d1:08:0e:78:
9c:a8:21:b6:16:53:32:2f:35:6b:7b:50:f1:2c:cf:78:75:6e:
b3:96:8e:c1:8b:c9:67:99:62:78:3d:b6:0f:41:6d:1c:3d:5b:
58:29:50:9c:ba:25:ff:0f:01:f7:4d:c6:ad:36:13:e5:2a:d3:
05:d0:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:14 2026 by rpki-client