Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/52E524FE306811F18C6DAEB9DAE4EC9C.roa
File: 52E524FE306811F18C6DAEB9DAE4EC9C.roa (raw, json)
Hash identifier: 4HUTwQHq7W5A5UwXx6dZ5SLfpnMbxNd1py8hvJ947pY=
Subject key identifier: E0:CD:99:F2:7B:39:98:32:DD:07:9C:FC:E5:9E:E7:02:4F:8C:02:71
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B5A
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/52E524FE306811F18C6DAEB9DAE4EC9C.roa
Signing time: Sat 04 Apr 2026 20:53:27 +0000
ROA not before: Sat 04 Apr 2026 20:53:05 +0000
ROA not after: Wed 31 Dec 2036 20:53:05 +0000
asID: 198087
IP address blocks: 165.49.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2906 (0xb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 4 20:53:05 2026 GMT
Not After : Dec 31 20:53:05 2036 GMT
Subject: CN=69d17a47-ab06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:cc:d0:32:3f:ba:02:75:51:4e:35:63:ce:
b2:8f:2a:5e:e2:72:eb:f6:04:2e:ac:0f:e0:65:fd:
a1:a8:5e:aa:80:08:d0:20:9e:8f:22:ba:36:cc:24:
75:fd:37:95:34:17:3f:f8:a4:74:3f:64:b9:fa:ea:
6f:20:92:f8:68:ee:33:aa:66:1f:41:56:98:87:a5:
dd:13:da:7e:8a:65:c0:55:f8:a6:0b:6c:31:d5:f8:
84:03:3c:3c:b9:ce:31:8a:71:ee:7a:c3:c3:f4:52:
4d:3f:9e:cd:ff:5b:63:f9:b9:97:50:25:36:1d:51:
f5:fc:18:23:5b:8c:91:56:6e:71:41:71:db:22:fb:
67:6f:c2:02:e1:14:c5:90:fc:53:73:28:16:67:f1:
a1:1f:bc:5f:6c:5e:90:d4:ca:ec:81:81:8a:0f:60:
ab:8f:32:9e:04:6c:b1:5f:06:87:8f:9b:37:72:10:
01:f6:16:c5:b8:15:26:67:77:62:27:53:2c:34:de:
c4:57:ab:11:4e:24:64:e9:61:7e:80:15:3d:6b:5a:
dc:0b:bc:af:4e:03:70:cd:00:d9:e5:58:33:29:0e:
26:52:ed:9d:b9:4b:08:44:ed:99:f8:85:88:0f:9a:
96:71:b1:4a:86:f8:c3:07:d2:05:86:8a:75:83:da:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:99:F2:7B:39:98:32:DD:07:9C:FC:E5:9E:E7:02:4F:8C:02:71
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/52E524FE306811F18C6DAEB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.110.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b2:5b:ff:bb:99:71:9d:d4:35:66:df:1c:17:f3:31:3a:4a:
8e:c2:b8:87:ab:83:3e:31:b0:e7:05:41:d9:3f:a7:d9:c6:0a:
3d:68:84:18:17:a8:de:cd:4a:7a:28:7b:b3:e6:55:2d:10:4b:
9f:ca:77:3c:f3:9c:c4:4b:b6:a6:1a:8b:bf:5f:ee:60:24:ff:
a4:b7:fa:8f:e2:a1:7c:b0:4d:21:bc:a1:89:d9:68:c5:1b:9f:
9c:1d:d0:53:21:3f:e1:e8:a8:77:9e:87:71:3e:dc:0c:7c:bd:
78:02:ae:99:23:18:a2:25:4e:79:87:50:65:6b:39:8c:10:94:
1f:0f:9c:a4:81:2c:7b:7a:36:85:63:4c:d0:e5:af:17:72:c6:
32:c5:03:7c:2d:05:25:53:95:25:a9:a4:44:1d:89:7a:b6:eb:
4a:e0:1e:d7:80:14:ae:2f:42:f7:65:5b:78:ff:00:23:4f:78:
0c:46:04:fe:dd:5c:b1:67:3b:85:06:22:18:f7:64:cb:77:fe:
26:97:0c:e7:a5:5e:7b:d2:4e:15:9a:b8:b3:76:50:f1:ff:81:
d7:f9:b9:36:e4:8a:0e:7e:ab:13:99:92:a6:51:1a:5e:a9:9c:
3b:bf:1a:27:0d:74:0c:0f:bf:76:10:54:c7:04:f2:e1:5d:eb:
10:4d:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:04 2026 by rpki-client