Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8CCD3DC4BA2411F0B3624BDDDAE4EC9C.roa
File: 8CCD3DC4BA2411F0B3624BDDDAE4EC9C.roa (raw, json)
Hash identifier: 5oIJr/w1ATBz5sVYRST84VPc+3l+xjUS5g8tAZaZkTM=
Subject key identifier: A2:27:DA:98:61:7E:7E:15:D6:E2:5B:A0:E2:B0:41:42:5A:31:8E:DE
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09D4
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8CCD3DC4BA2411F0B3624BDDDAE4EC9C.roa
Signing time: Wed 05 Nov 2025 08:50:59 +0000
ROA not before: Wed 05 Nov 2025 08:50:55 +0000
ROA not after: Mon 31 Dec 2035 08:50:55 +0000
asID: 834
IP address blocks: 165.49.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Nov 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Nov 5 08:50:55 2025 GMT
Not After : Dec 31 08:50:55 2035 GMT
Subject: CN=690b0ff3-0afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:28:98:db:34:36:0a:7b:18:83:8e:c2:17:
5d:d7:41:ae:f4:97:8a:0b:93:32:a7:26:09:46:03:
0a:ff:00:18:4c:93:6d:c9:d1:f4:ab:16:9f:2d:0b:
9e:d8:e0:8a:a3:7f:6d:0a:27:eb:4c:20:56:97:9d:
71:17:b9:1f:66:8a:86:5a:36:b2:db:68:ad:41:39:
a8:81:08:c1:63:bf:60:51:38:e4:cc:bb:12:20:75:
b7:85:5c:47:52:a7:c8:53:43:50:4e:ef:4a:b1:09:
f8:8e:73:e1:52:95:de:76:c8:55:eb:5c:6f:86:ea:
0a:3b:68:49:31:1f:28:e3:57:b2:4d:29:83:d8:ee:
02:b9:ed:e6:be:c6:81:06:e9:d0:2d:e9:09:b1:dc:
92:2d:ec:4d:d4:3c:37:b7:9e:5b:f7:c7:d8:f8:52:
07:4b:ba:fa:4f:44:9c:aa:45:2f:ac:54:90:96:28:
c1:c1:37:0b:d4:a7:61:d3:1d:7f:50:55:64:b6:4e:
8b:6d:49:aa:35:30:4c:e3:b4:83:17:7f:61:d0:b9:
7d:04:26:62:c3:1c:f4:b0:45:d8:b5:e6:35:4e:a8:
a4:80:52:59:f6:20:1b:0d:a2:86:f6:7d:90:6e:2e:
f6:f9:ae:d3:37:9f:18:59:95:7f:c6:ef:3f:79:69:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:DA:98:61:7E:7E:15:D6:E2:5B:A0:E2:B0:41:42:5A:31:8E:DE
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8CCD3DC4BA2411F0B3624BDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bd:3c:5f:3c:fc:a4:db:e6:fc:f4:51:ba:5d:80:4d:3b:bf:
ad:4e:42:5f:7b:e5:d8:56:82:62:36:e3:a5:c2:7c:36:b9:43:
19:b0:a6:19:fb:5b:58:35:4e:8b:89:4c:c3:95:08:96:2f:80:
59:c0:ec:bb:d4:68:27:40:61:eb:f3:32:09:ed:14:70:38:3c:
b9:0b:fb:46:b4:44:0f:36:37:f6:f6:fe:19:5e:d6:ae:be:93:
94:e7:b8:06:40:77:af:06:cc:61:99:38:b6:2f:eb:c8:d4:2e:
2b:22:95:2a:7e:10:a6:ee:34:b3:24:36:0a:84:a4:bb:d2:96:
33:a3:3f:c7:f9:c5:9f:b8:bc:2b:80:68:f2:27:94:d5:94:82:
22:7a:86:3a:83:69:d6:6b:6b:c1:57:da:30:4c:33:fb:03:a4:
06:b7:19:2f:76:aa:48:e4:d9:0a:d2:f4:9e:0d:0c:89:4d:f1:
c8:8a:04:cf:df:17:a1:80:f0:37:17:7f:4b:78:d4:4b:b8:72:
70:6d:51:d3:a4:e6:21:cc:ac:f0:d3:d8:83:16:cb:b3:75:9e:
e5:64:88:da:1b:d9:08:a3:64:32:54:f3:16:76:a2:17:ee:1e:
f2:8a:3a:86:ea:7b:1d:5b:42:6c:e7:6f:ce:09:7d:15:eb:35:
28:32:44:a6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTExMDUwODUwNTVaFw0zNTEyMzEwODUwNTVaMBgxFjAU
BgNVBAMTDTY5MGIwZmYzLTBhZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb1SiY2zQ2CnsYg47CF13XQa70l4oLkzKnJglGAwr/ABhMk23J0fSrFp8t
C57Y4Iqjf20KJ+tMIFaXnXEXuR9mioZaNrLbaK1BOaiBCMFjv2BROOTMuxIgdbeF
XEdSp8hTQ1BO70qxCfiOc+FSld52yFXrXG+G6go7aEkxHyjjV7JNKYPY7gK57ea+
xoEG6dAt6Qmx3JIt7E3UPDe3nlv3x9j4UgdLuvpPRJyqRS+sVJCWKMHBNwvUp2HT
HX9QVWS2TottSao1MEzjtIMXf2HQuX0EJmLDHPSwRdi15jVOqKSAUln2IBsNoob2
fZBuLvb5rtM3nxhZlX/G7z95aXdTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUoifa
mGF+fhXW4lug4rBBQloxjt4wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzhDQ0QzREM0QkEyNDExRjBCMzYyNEJERERBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMc4wDQYJKoZIhvcNAQELBQAD
ggEBAE+9PF88/KTb5vz0UbpdgE07v61OQl975dhWgmI246XCfDa5Qxmwphn7W1g1
TouJTMOVCJYvgFnA7LvUaCdAYevzMgntFHA4PLkL+0a0RA82N/b2/hle1q6+k5Tn
uAZAd68GzGGZOLYv68jULisilSp+EKbuNLMkNgqEpLvSljOjP8f5xZ+4vCuAaPIn
lNWUgiJ6hjqDadZra8FX2jBMM/sDpAa3GS92qkjk2QrS9J4NDIlN8ciKBM/fF6GA
8DcXf0t41Eu4cnBtUdOk5iHMrPDT2IMWy7N1nuVkiNob2QijZDJU8xZ2ohfuHvKK
Oobqex1bQmznb84JfRXrNSgyRKY=
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:38 2025 by rpki-client