Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/914BD59C306511F18E4E73AADAE4EC9C.roa
File: 914BD59C306511F18E4E73AADAE4EC9C.roa (raw, json)
Hash identifier: naJ/+bNCYhkEqyB1AM3q6wU7xqMG12WvXm0mz0ek/5k=
Subject key identifier: 55:14:89:25:94:94:5A:D0:13:29:F6:49:02:72:13:9F:3A:88:AE:74
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B57
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/914BD59C306511F18E4E73AADAE4EC9C.roa
Signing time: Sat 04 Apr 2026 20:33:47 +0000
ROA not before: Sat 04 Apr 2026 20:32:51 +0000
ROA not after: Wed 31 Dec 2036 20:32:51 +0000
asID: 834
IP address blocks: 165.49.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 01:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2903 (0xb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 4 20:32:51 2026 GMT
Not After : Dec 31 20:32:51 2036 GMT
Subject: CN=69d175ab-9d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:16:d2:94:4f:cc:f2:40:8f:be:ac:7d:6f:
fa:91:d6:3c:55:47:09:b9:be:4c:a6:a1:4e:06:9e:
cf:37:8b:da:f7:72:d1:c7:a7:19:35:8d:83:ab:bf:
cb:24:b5:d3:6b:dd:ee:ba:eb:3e:32:9b:f3:cf:c9:
b3:e0:f9:ba:a4:13:db:d9:65:b8:a0:73:57:f9:bb:
fc:9c:f1:c8:89:9a:a6:40:e0:32:45:e8:45:02:c7:
ac:3a:86:ab:45:22:4c:14:7b:3b:c8:a1:89:bc:d0:
89:33:a2:77:5a:fa:a9:55:e0:47:d5:03:26:e3:57:
14:4e:d5:a8:bb:7c:38:46:c2:36:81:df:10:5c:04:
7d:62:0f:9c:08:7a:c9:4b:bd:6b:bf:80:36:c4:67:
23:43:6c:cf:05:7a:62:72:66:29:fd:14:d8:aa:65:
f5:60:37:b9:db:a4:61:43:13:b5:2e:17:70:89:e3:
d5:1a:4e:9b:98:ab:50:b1:ac:4e:5e:a6:7b:8b:ed:
04:ea:56:de:7f:57:67:f0:31:62:3b:ab:be:d5:65:
f3:d8:7d:27:a7:03:27:57:85:3f:8f:a8:fe:6f:ac:
7a:1d:29:be:5b:7e:e0:89:d7:c2:03:bf:f1:d2:5d:
d3:ef:57:d5:d3:30:3c:ed:ab:17:36:b0:ea:a7:99:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:89:25:94:94:5A:D0:13:29:F6:49:02:72:13:9F:3A:88:AE:74
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/914BD59C306511F18E4E73AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c7:17:09:9d:2a:28:f6:50:b6:d8:70:77:9b:6f:07:29:a8:
f9:5b:fd:a9:29:e8:81:31:30:22:e8:ed:71:76:b0:d6:09:b6:
51:23:27:f0:ad:d9:42:b8:98:85:08:e3:f4:d6:8f:61:b5:9b:
cd:19:a6:df:ae:0c:5d:1b:45:49:9e:2d:b7:f9:0c:ab:8b:2b:
67:fd:c7:9b:f6:e0:1f:83:7d:b9:0c:89:f8:32:aa:92:a4:05:
f6:d0:3e:91:81:eb:23:58:a0:7b:66:02:9f:86:f8:32:c1:de:
8b:cc:86:8c:1c:1f:c2:9d:70:dd:87:18:af:e4:d8:23:f4:4c:
3e:5c:88:a6:b7:ca:66:37:17:9d:ab:55:40:0d:52:50:8a:4a:
e5:b2:34:ca:af:cb:46:1b:e5:be:1a:1a:18:54:13:7f:1c:51:
d3:d8:86:67:13:54:de:82:6c:98:bc:17:64:6b:05:2b:ed:57:
04:90:1b:1d:7f:6f:c9:46:10:be:d2:4b:09:76:b1:6c:df:98:
f0:8f:4f:f3:81:c0:ca:e9:32:06:9b:93:e7:3e:27:e5:ef:50:
df:77:04:e8:68:b4:42:16:09:b6:70:f8:36:f4:05:1b:fb:57:
bb:23:07:56:87:5b:a3:94:27:15:5c:cf:9f:ba:9f:f6:ed:dd:
82:5e:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:52 2026 by rpki-client