Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8C1B5E0C520D11F18BF7F0CBCE1D38B0.roa
File: 8C1B5E0C520D11F18BF7F0CBCE1D38B0.roa (raw, json)
Hash identifier: 0lPH+3+cFWp/cvHjThgP+FMmFMPBiJbGbonGZJwy8QA=
Subject key identifier: D7:DF:C3:A0:41:C4:BE:63:A2:6E:AA:75:20:4B:96:FA:6D:F7:12:7F
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0BD9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8C1B5E0C520D11F18BF7F0CBCE1D38B0.roa
Signing time: Sun 17 May 2026 16:29:17 +0000
ROA not before: Sun 17 May 2026 16:29:12 +0000
ROA not after: Wed 31 Dec 2036 16:29:12 +0000
asID: 834
IP address blocks: 165.49.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3033 (0xbd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: May 17 16:29:12 2026 GMT
Not After : Dec 31 16:29:12 2036 GMT
Subject: CN=6a09ecdd-e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:d6:1d:5f:01:13:00:6a:93:d0:a5:33:3f:
b1:23:4e:7e:b7:c9:37:d3:8b:f9:04:94:bd:45:4d:
d6:14:d5:61:b5:d0:a9:28:62:2f:84:b3:70:c6:ad:
91:56:9b:60:ab:a7:fe:cc:9f:6c:2c:39:83:70:ad:
df:d1:ca:e0:0c:e8:59:84:c7:45:c9:48:63:ba:96:
64:80:39:8a:f3:cb:6c:6a:ea:4b:80:73:ba:33:ba:
71:ea:0d:bb:e6:5e:5a:a0:3c:77:f3:21:ae:de:93:
15:1a:07:b6:4f:11:d2:43:20:6a:a2:d4:6d:ec:9e:
00:82:41:06:c5:a1:56:37:5c:a4:d1:ba:e2:4d:1a:
f6:ba:02:e9:d6:f7:f7:30:de:97:50:fc:e4:e2:79:
ae:d3:9f:b4:2d:da:10:d2:55:34:82:b3:a7:21:4e:
a0:94:c7:24:49:af:4d:b6:27:05:17:21:91:db:c7:
56:91:6a:6f:07:7d:40:ab:85:2b:26:ff:cc:02:35:
92:e4:52:e8:6a:d0:f1:4f:49:7f:ce:be:98:82:99:
d8:7a:67:1a:e7:4b:13:75:9c:b2:fa:b0:ec:7a:f7:
02:2d:28:d0:b8:d1:21:05:09:b9:cf:c7:e3:dc:7a:
07:dc:c1:3a:0c:e6:39:4c:2d:d0:8a:67:05:16:fa:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:C3:A0:41:C4:BE:63:A2:6E:AA:75:20:4B:96:FA:6D:F7:12:7F
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8C1B5E0C520D11F18BF7F0CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9e:24:82:fd:7a:58:48:14:46:6f:86:c6:e2:41:90:9e:26:
ba:27:94:e7:20:f8:bf:bb:13:b4:c4:d9:69:cb:59:ea:62:04:
61:7e:31:21:23:b3:92:fd:69:8d:18:61:8b:c6:3b:96:5e:2a:
2c:1d:db:5c:06:8a:50:d4:6d:7b:3d:c1:30:97:6c:9b:b0:61:
b2:b1:71:07:bc:a3:b9:22:a6:a0:16:ea:2a:90:2a:4f:e4:67:
52:9b:7e:ec:e8:23:c2:81:35:a4:71:f1:e5:ea:32:85:5a:15:
b0:f9:8c:e0:41:cc:dd:7e:c5:47:00:67:d0:f8:bd:b6:26:34:
06:4c:c1:c1:f9:d7:ee:50:ab:20:2f:79:67:83:d9:5d:d1:8b:
ce:7d:ac:4f:b6:16:82:cc:b1:10:f3:a8:10:8b:39:49:96:6f:
4b:fe:e4:fb:59:eb:fb:c7:66:46:17:1e:1c:16:cf:e0:1d:13:
b5:f1:0b:32:dc:b2:45:3b:e1:18:46:73:0e:7f:f8:82:ff:ec:
35:5c:d7:a4:de:0c:a2:2f:e0:77:54:92:ea:9d:f4:b6:53:97:
98:ae:a7:43:17:c7:da:40:4e:9f:fe:31:c5:df:0e:e7:c2:70:
d3:da:29:e2:7b:7c:04:50:e2:aa:81:c8:87:3b:56:b7:ae:d3:
90:15:a0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:36 2026 by rpki-client