Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/91AF6F7E557411F1890925FCCE1D38B0.roa
File: 91AF6F7E557411F1890925FCCE1D38B0.roa (raw, json)
Hash identifier: Pnay9WIUAOAcL0hWR8iKdxdPXOTJB+DWSvQs0ppii0k=
Subject key identifier: FA:7E:87:0A:79:39:9A:35:93:FA:A3:97:97:8C:FE:78:3B:9D:B6:2A
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0BEC
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/91AF6F7E557411F1890925FCCE1D38B0.roa
Signing time: Fri 22 May 2026 00:24:18 +0000
ROA not before: Fri 22 May 2026 00:00:13 +0000
ROA not after: Wed 31 Dec 2036 00:00:13 +0000
asID: 152324
IP address blocks: 165.49.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: May 22 00:00:13 2026 GMT
Not After : Dec 31 00:00:13 2036 GMT
Subject: CN=6a0fa232-35cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:cb:57:a5:69:22:4f:86:4f:b8:98:d4:e9:
e3:bc:78:ef:20:70:81:cb:29:66:72:6d:fc:fc:77:
2a:55:0d:fa:2e:50:5f:50:5a:0a:ac:33:08:6c:5b:
cf:40:31:22:02:5f:2b:89:c7:22:d1:09:38:01:ca:
75:a0:87:34:bb:cf:0e:e7:ec:9d:28:f5:a8:a5:64:
e6:84:cf:b7:80:48:73:40:f0:02:bd:fe:fb:9a:5c:
f2:81:a8:b3:f9:47:89:74:45:cf:79:c8:95:61:fc:
90:6b:ed:50:30:4a:76:72:48:79:8b:8f:79:13:47:
5d:4d:af:2f:95:06:f1:a8:29:5e:fc:26:c8:0c:27:
3f:fd:9b:fd:b2:97:12:cd:b1:36:8b:ec:fd:92:7f:
c3:4c:29:94:9c:80:5b:ec:f8:59:26:bd:6b:a7:94:
be:67:66:49:13:ee:31:4c:7c:bf:eb:05:bc:22:4a:
e1:42:20:e7:e5:e7:51:52:8f:29:89:43:3a:df:2e:
34:ae:fd:86:66:94:5e:c5:90:f2:72:d9:49:96:0a:
9c:a3:71:3c:51:28:c6:62:46:f3:2b:8c:e7:f7:26:
b0:16:87:92:74:14:1c:49:8f:b3:28:02:7f:9d:0a:
45:ca:fd:c6:e6:07:ad:af:30:82:05:53:8a:cf:8c:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:87:0A:79:39:9A:35:93:FA:A3:97:97:8C:FE:78:3B:9D:B6:2A
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/91AF6F7E557411F1890925FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ad:77:c1:29:3d:51:3c:41:d3:f5:34:e8:9c:61:58:55:66:
16:fe:59:1b:19:d9:65:86:07:1b:40:3a:0c:c8:ac:d2:a1:23:
89:25:d5:49:b8:ec:70:85:6f:98:92:86:13:84:96:f2:b3:e2:
00:72:e3:68:c8:69:38:07:97:ea:03:9a:af:29:6c:11:a5:27:
7e:38:3d:a9:0d:e9:4c:2f:9c:79:aa:9d:59:8e:9f:b2:e3:70:
a1:b0:13:fa:78:e3:2c:c4:b1:b3:8c:f9:3e:66:77:e2:26:5d:
1a:8a:49:35:98:45:55:31:63:c7:53:2d:c2:9f:72:33:38:0f:
51:48:26:06:98:3b:f5:79:0f:a9:9e:67:32:22:f0:9d:39:54:
57:73:e0:c1:72:09:65:c6:f7:05:4d:bc:c5:91:1a:aa:14:23:
8b:f8:c2:13:29:4b:11:17:16:22:ac:a4:cf:37:6a:b9:bd:b7:
cb:8c:0f:7a:19:92:36:91:7e:6b:bd:6e:44:ed:19:41:32:5f:
ff:ad:88:a1:28:6e:65:7a:2c:8d:79:e2:35:df:3f:3a:71:32:
a3:cc:4d:4a:bf:1e:92:bb:43:ff:d5:c9:fd:32:d1:8f:b4:f3:
3a:45:3b:49:50:78:c0:a3:4d:22:02:ce:7f:04:d4:fb:60:ef:
61:fa:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:29:35 2026 by rpki-client