Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6D4AC1D2126D11F18DB125CDDAE4EC9C.roa
File: 6D4AC1D2126D11F18DB125CDDAE4EC9C.roa (raw, json)
Hash identifier: I2tQJB56HB4kMbieZaM9phWWX9HcJFMqn99alcCYTYM=
Subject key identifier: FC:A7:69:60:4A:25:2E:C6:D0:8D:D4:E7:79:4F:61:F5:5D:43:65:47
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B03
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6D4AC1D2126D11F18DB125CDDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 17:14:22 +0000
ROA not before: Wed 25 Feb 2026 17:14:18 +0000
ROA not after: Wed 31 Dec 2036 17:14:18 +0000
asID: 834
IP address blocks: 165.49.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Feb 25 17:14:18 2026 GMT
Not After : Dec 31 17:14:18 2036 GMT
Subject: CN=699f2dee-4432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:d8:e6:a5:96:16:e2:13:54:6f:22:29:94:
42:eb:cd:df:c5:a7:aa:1c:d6:19:e2:14:91:7e:ca:
db:7a:65:8a:f5:72:63:c2:fc:68:1f:6f:59:63:e8:
8e:a3:15:95:72:42:c1:a5:97:41:41:cf:9f:d3:68:
3c:23:d3:81:25:ff:57:10:be:65:8c:29:f5:10:f0:
1a:91:a0:8e:76:9b:4d:4c:0f:c5:16:00:f1:9f:9f:
05:49:49:53:fb:1d:3a:4f:e9:d9:e8:f0:75:ca:dd:
2d:b1:3c:a8:5b:ee:1b:69:c4:c2:bc:89:44:5d:0c:
55:23:0d:eb:c9:7f:2d:61:21:8c:4f:f3:ed:9f:ef:
4a:99:60:56:7a:11:b1:e9:12:29:59:9e:7c:44:59:
f8:82:c5:39:20:18:9f:d3:33:50:53:8d:22:2f:da:
af:7f:59:71:e5:4a:d7:0f:71:21:bb:79:d4:7c:b8:
49:85:78:76:31:ef:99:40:a5:38:1e:7a:06:a5:89:
ea:5a:02:28:40:87:56:f1:bd:bc:ef:61:ef:af:9e:
21:3d:68:61:0e:03:54:88:b9:1c:26:23:d5:cb:7c:
8b:7d:75:43:74:35:09:39:37:dc:5b:e2:89:fd:9a:
c5:75:e8:af:41:a3:ba:a3:0c:0c:68:e5:d7:77:55:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:69:60:4A:25:2E:C6:D0:8D:D4:E7:79:4F:61:F5:5D:43:65:47
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6D4AC1D2126D11F18DB125CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.110.0/24
Signature Algorithm: sha256WithRSAEncryption
28:13:b5:f0:e5:d9:3f:20:3a:90:1c:f7:f6:f6:17:ec:01:b9:
be:16:ff:09:b2:5d:a1:a3:b6:2f:ec:e1:23:2a:74:1b:75:1d:
8d:e1:87:5f:46:be:b0:e0:9f:9d:5a:ce:0b:0d:ad:b3:bc:d3:
62:a4:67:63:54:08:04:43:ab:e9:9b:dc:3a:99:b0:cd:3a:58:
ce:6b:ca:a1:d2:da:ea:35:fb:f7:17:77:35:3f:fd:45:a6:c0:
62:3c:e9:f9:ce:8b:21:3b:bf:9d:61:ba:e0:6b:4f:c6:81:ce:
12:97:38:77:fa:c2:4d:2c:a8:76:46:00:25:9c:11:21:6b:d3:
05:51:77:be:fe:3e:7d:35:2f:18:a7:1e:09:80:e5:82:46:6e:
97:8e:95:06:21:7e:aa:36:00:ae:64:df:78:7e:c8:bc:94:f7:
ba:e5:a9:f3:13:d3:3b:57:5b:06:7e:dc:85:bb:05:16:f9:0e:
af:94:7c:98:e3:f7:df:45:8b:a5:ac:f7:7d:f1:31:c8:5e:e8:
7c:34:d1:da:7c:e1:7a:a4:4d:a5:81:91:f9:25:5d:a1:ec:62:
71:9d:c3:08:e7:56:d9:7e:d7:e0:ee:7f:60:76:51:3f:43:eb:
f2:4c:f1:9a:f0:7d:8c:5b:85:e0:7a:a1:4e:b0:be:79:09:4f:
a2:00:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:48 2026 by rpki-client