Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6505BD0A126E11F1B00781D3DAE4EC9C.roa
File: 6505BD0A126E11F1B00781D3DAE4EC9C.roa (raw, json)
Hash identifier: 5bjzMuuy2Rc4/opYY27ApcXAJTTe90jGjt6c3nRPCRw=
Subject key identifier: 1D:CD:FF:F0:99:11:83:D6:86:D0:B9:95:92:39:3A:B3:8A:ED:CD:BE
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B0C
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6505BD0A126E11F1B00781D3DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 17:21:18 +0000
ROA not before: Wed 25 Feb 2026 17:21:13 +0000
ROA not after: Wed 31 Dec 2036 17:21:13 +0000
asID: 834
IP address blocks: 165.49.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828 (0xb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Feb 25 17:21:13 2026 GMT
Not After : Dec 31 17:21:13 2036 GMT
Subject: CN=699f2f8d-544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:99:be:a6:e3:5b:8b:78:5b:b5:76:4a:1e:
96:3f:6a:2a:07:96:97:74:40:2f:ce:62:70:a1:a2:
da:9d:ad:f3:69:9b:99:2b:77:21:f0:01:07:3c:bf:
39:d9:82:d6:fe:23:56:2b:0d:17:c9:ba:63:5f:69:
20:f5:83:c6:31:21:de:04:01:45:dc:b6:35:ba:fc:
23:ee:70:81:55:78:0d:09:f2:c5:5f:7b:b4:9f:f0:
6a:7b:14:7b:cb:39:5c:79:a9:e5:05:96:a1:2a:09:
09:fe:1d:e1:86:94:08:1d:af:98:55:cd:cc:3f:17:
55:9e:da:26:70:bc:4c:01:9a:00:07:55:63:32:34:
89:d8:f5:28:fb:ca:21:aa:d8:b7:79:0e:b3:0f:20:
90:35:ff:ce:ca:8b:21:61:be:34:3c:3d:97:5d:8c:
53:26:d1:b9:05:e0:f0:22:4b:c2:94:bc:77:10:0b:
97:d9:7f:87:18:32:ad:7b:2c:9f:3c:92:8e:8d:90:
1b:db:0b:ac:fc:85:ae:ef:4b:1f:30:d2:f7:6a:da:
af:d7:b4:62:7b:11:b4:d5:c5:5e:42:83:99:52:39:
2f:54:4b:88:b0:b7:52:15:c5:4b:e7:ea:c5:4f:50:
9f:e9:2f:72:0a:bc:31:de:6b:1a:ff:f8:59:7f:e1:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:FF:F0:99:11:83:D6:86:D0:B9:95:92:39:3A:B3:8A:ED:CD:BE
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6505BD0A126E11F1B00781D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.224.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e7:11:ea:51:11:d5:d7:2d:ff:d3:d4:6a:0b:6a:75:c2:0c:
c3:66:f1:f1:3f:e1:91:19:a0:b2:da:3e:0f:ec:f4:bf:fe:3d:
a2:f6:98:37:2a:0f:c9:ac:95:4f:30:fa:87:cc:08:42:15:e7:
3e:d3:73:20:cc:02:53:c0:97:20:ee:b7:4f:10:e1:fb:57:1c:
8e:89:e4:16:a0:ec:b9:e1:7b:00:44:f7:fc:4d:e2:2f:00:ae:
13:df:5b:c3:0f:e4:c7:4e:8e:f6:f8:6f:e0:ad:0c:ff:2d:5f:
d6:cc:c4:ca:a7:3c:4a:f1:01:c3:bc:ed:a2:26:ef:e6:5a:81:
aa:11:df:c7:88:f0:3e:51:4f:c2:ce:8b:30:7f:eb:9e:95:b9:
c5:7d:11:ac:3c:50:b0:42:fd:18:a8:66:76:a0:78:2e:4c:ef:
ae:b3:4e:84:d6:ef:f2:00:a4:3a:ca:29:55:8d:a7:51:49:1b:
92:3d:d7:5a:c8:ca:f8:bb:6c:7d:b4:1f:f4:a1:56:fc:21:c6:
32:05:fe:ec:cd:4e:0b:23:3f:95:d6:c7:f4:37:16:5b:bf:f0:
38:69:ca:97:d2:3a:a9:6a:f3:0b:d4:53:05:5b:6d:bf:e0:29:
d5:d4:7d:d0:14:70:ca:cf:ee:24:77:fd:dd:b6:49:72:a7:0d:
0d:34:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:51:12 2026 by rpki-client