Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/97D7B084637311F1A10E70A2CE1D38B0.roa
File: 97D7B084637311F1A10E70A2CE1D38B0.roa (raw, json)
Hash identifier: l9OTd7XsEuVXBH43kGZdjT02zwJrncfvVuZaWn9k2Po=
Subject key identifier: EE:E0:9A:CB:60:09:68:5C:D7:05:3B:52:57:2C:D4:30:09:6A:13:AE
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C18
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/97D7B084637311F1A10E70A2CE1D38B0.roa
Signing time: Mon 08 Jun 2026 19:52:35 +0000
ROA not before: Mon 08 Jun 2026 19:52:30 +0000
ROA not after: Wed 31 Dec 2036 19:52:30 +0000
asID: 401783
IP address blocks: 165.49.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 8 19:52:30 2026 GMT
Not After : Dec 31 19:52:30 2036 GMT
Subject: CN=6a271d83-960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:03:ff:60:a5:21:f0:8a:b0:e0:6f:fe:68:
3b:5b:86:ea:58:bb:52:b1:8c:64:c6:c6:10:b8:b9:
1f:f7:66:ac:71:33:8e:76:a9:11:0e:9e:91:f7:8d:
47:5d:98:4f:ae:2b:7c:4e:56:8b:e5:6b:6d:3d:ae:
62:64:ee:09:10:27:4b:31:9d:ea:ff:e9:b5:bd:5d:
71:89:92:24:7a:c9:1c:75:f0:0f:49:eb:4b:b2:c2:
1a:70:75:70:62:f6:4e:24:ec:ff:20:17:b6:88:e2:
f5:02:3b:59:ac:45:37:de:ba:7c:c4:56:a7:44:c4:
a0:21:75:26:ea:9e:5b:4c:aa:ee:7d:e9:2d:65:4e:
3c:04:82:d8:ec:ba:33:57:93:a6:11:f4:78:56:18:
8b:2d:41:9f:6b:ca:89:4d:50:d7:25:35:16:c0:f4:
46:69:af:8e:fa:10:ae:99:33:7b:68:4c:e7:a9:1b:
e4:53:4e:c9:39:88:a1:d8:fd:28:cc:1e:68:84:69:
cc:48:5c:3b:85:7e:20:ee:c3:29:78:f2:37:23:ed:
44:60:8e:8d:1a:3e:c1:1b:6d:2b:09:4c:95:08:23:
50:5e:2f:8d:9e:f1:13:fa:8b:f3:cb:a4:b7:a0:e3:
dd:4f:fe:69:32:08:6c:32:3a:e8:34:ba:f0:5a:2d:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:9A:CB:60:09:68:5C:D7:05:3B:52:57:2C:D4:30:09:6A:13:AE
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/97D7B084637311F1A10E70A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.242.0/24
Signature Algorithm: sha256WithRSAEncryption
60:79:ce:45:ec:fd:0d:f1:3c:5e:3a:f1:1a:75:36:a5:81:fb:
cc:fb:b5:50:16:85:94:65:39:e5:00:92:7a:00:9d:07:e6:10:
91:46:bb:48:4c:85:28:d1:9a:dc:e0:4a:39:0a:f8:dd:f7:10:
b1:fe:82:47:ea:b5:61:47:20:da:dc:80:95:4c:be:fd:dc:34:
51:60:a3:b2:4b:64:fa:1b:47:d8:52:8e:b9:5b:40:2d:2f:39:
cd:f8:c3:59:47:5e:99:1f:cc:be:fe:85:95:96:03:9a:05:c7:
0a:99:d0:e1:d2:4b:2e:83:c0:ee:73:2a:1b:85:b6:a7:3b:ce:
0d:01:f9:2a:d1:60:60:b1:ee:8a:75:27:ce:07:04:c0:d2:24:
8f:36:59:24:ea:26:35:0f:08:b0:60:11:c7:99:ed:a7:af:d1:
d3:95:bc:69:d6:7c:17:a5:aa:c7:a0:3d:ee:da:f3:f2:b5:f1:
5c:2d:c2:8d:a1:94:33:00:3d:69:43:e8:04:96:45:7b:16:5c:
83:9b:79:6b:42:ec:8c:c6:f8:02:d7:5c:f4:8e:20:55:2d:80:
0a:b0:66:ed:15:8a:db:0f:9c:52:88:03:ea:cf:be:bb:96:7d:
d7:0f:61:df:3e:f5:d0:3e:a8:fa:3d:64:00:50:df:80:76:6f:
ff:6c:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:47:50 2026 by rpki-client