Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/617A9B0A383511F1B9DE69B4CE1D38B0.roa
File: 617A9B0A383511F1B9DE69B4CE1D38B0.roa (raw, json)
Hash identifier: WFhaNhNUUSlk7CdyfxUncf9yZ6u7/1swW0712LXKfDA=
Subject key identifier: 6D:40:28:B7:BD:D1:AE:CF:96:61:DF:AB:B5:5E:10:5F:48:E8:7D:21
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B73
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/617A9B0A383511F1B9DE69B4CE1D38B0.roa
Signing time: Tue 14 Apr 2026 19:08:55 +0000
ROA not before: Tue 14 Apr 2026 19:08:49 +0000
ROA not after: Wed 31 Dec 2036 19:08:49 +0000
asID: 198250
IP address blocks: 165.49.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 01:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 14 19:08:49 2026 GMT
Not After : Dec 31 19:08:49 2036 GMT
Subject: CN=69de90c7-e3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:ef:55:09:c0:d8:f2:6e:f9:5e:3f:68:28:
19:51:50:cf:b5:32:fc:45:d2:05:a0:f3:ee:8f:04:
70:af:dd:a1:4f:07:cd:7b:0a:5e:88:9e:9e:7f:ce:
fc:43:9f:ee:43:a1:81:fa:fd:d8:32:86:8f:d7:2b:
41:35:98:e6:4d:2d:a4:d2:9a:b6:ab:83:09:1d:a9:
b1:df:68:44:10:0b:24:2e:a4:03:d2:af:6d:81:0d:
b0:fa:43:6e:54:67:42:fa:99:bc:f0:be:5f:cc:92:
9d:c7:03:c8:f6:a2:ef:dc:7a:f3:25:67:7e:58:35:
01:55:a1:e8:1e:92:9e:67:24:c4:67:28:75:97:36:
ab:be:54:74:49:00:86:f0:20:56:99:9b:de:49:80:
db:f7:6d:a4:a9:93:a5:5e:f5:9f:b9:d2:dd:94:11:
b2:99:a6:80:f1:f2:13:77:c3:ca:9d:3a:cc:f3:20:
07:79:20:4a:33:ab:ba:73:ac:51:e0:01:0d:ae:90:
41:82:38:4c:7f:07:7a:51:96:88:ad:17:8c:b0:fd:
98:59:a5:ea:df:1b:a2:dc:6c:22:bb:6b:fb:5d:0b:
ab:8b:96:eb:47:09:ba:c3:03:ba:11:3a:90:b4:69:
5d:c1:90:82:48:91:69:39:57:bf:a6:be:b5:93:00:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:28:B7:BD:D1:AE:CF:96:61:DF:AB:B5:5E:10:5F:48:E8:7D:21
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/617A9B0A383511F1B9DE69B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:93:bb:b1:e8:a5:e7:f6:15:ca:64:e5:89:0a:f6:88:9a:d6:
11:07:85:e6:e0:3f:34:d8:b9:b8:72:0b:3e:64:7c:72:4d:a9:
80:89:bb:48:90:4e:4b:59:f2:20:94:36:30:e8:a2:8e:1f:38:
22:28:63:d8:86:79:64:e8:a7:c3:16:4c:6e:82:2d:1f:17:b6:
02:aa:3e:da:31:97:c6:c9:ca:2c:35:11:fc:d1:76:cd:c7:8f:
55:aa:03:52:fb:8a:8b:96:f7:53:49:67:c7:a1:ca:a8:42:c8:
12:a8:e0:06:41:96:9d:2f:73:48:2c:86:96:ce:9b:a4:ad:3a:
9d:06:ff:2c:22:a2:4f:f5:57:0e:ad:c7:de:d1:35:a9:f1:33:
d2:e2:bd:5f:13:d7:dd:34:a1:67:e8:90:ca:58:8c:e0:7e:1c:
f8:d1:77:28:97:0b:48:7f:a7:f4:6d:64:cc:44:29:48:b1:f0:
62:35:31:ff:1c:5d:ce:4d:2b:c4:d9:cf:52:e7:21:16:a9:eb:
a7:5e:de:da:5f:37:9b:5a:a6:bc:cf:58:a7:f4:51:e9:60:fd:
e6:d2:9d:12:08:1d:05:90:7e:20:fc:1e:d0:03:8c:c7:ac:ef:
73:79:1f:8e:15:55:6b:89:dc:68:f2:e2:a6:f7:12:fd:ed:d6:
c1:ef:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:59 2026 by rpki-client