Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AE38FB04535F11F196FB05D9CE1D38B0.roa
File: AE38FB04535F11F196FB05D9CE1D38B0.roa (raw, json)
Hash identifier: 1HgpdSvoLU0F5eSCX0MaLffOtpex5MeCDk9NxScfBjY=
Subject key identifier: 25:AE:0F:B3:46:38:55:0D:AA:0F:8D:0D:B3:AB:0D:8E:FA:75:9E:CA
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0BE0
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AE38FB04535F11F196FB05D9CE1D38B0.roa
Signing time: Tue 19 May 2026 08:49:44 +0000
ROA not before: Tue 19 May 2026 08:49:39 +0000
ROA not after: Wed 31 Dec 2036 08:49:39 +0000
asID: 834
IP address blocks: 165.49.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3040 (0xbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: May 19 08:49:39 2026 GMT
Not After : Dec 31 08:49:39 2036 GMT
Subject: CN=6a0c2428-5105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:35:f1:9b:c1:95:8a:f0:89:65:20:4e:93:
fa:15:3d:af:60:46:07:0a:1c:68:ee:6c:25:3c:02:
bf:bd:fc:8c:e9:cb:9d:1f:de:91:db:90:f8:34:9c:
b8:a9:c0:a3:cf:a3:29:2d:dd:29:7f:4d:e6:98:d6:
c9:e1:bd:e3:ad:1f:f6:d9:76:46:19:d3:ef:a0:c3:
70:68:43:96:58:e7:28:04:30:8c:fa:1f:72:a0:31:
a8:f4:5b:79:88:f7:d5:89:45:30:74:f6:b7:04:49:
62:5a:a5:1b:d3:73:d8:f5:db:da:05:ce:ee:16:e7:
38:ad:47:fc:76:91:8c:c7:91:6c:65:23:42:ff:f6:
bc:2d:2b:bf:3d:6d:23:4b:6c:ba:49:f3:c1:99:5e:
28:38:aa:eb:38:fd:fd:57:e9:1c:f6:96:71:22:e0:
0c:46:81:f6:34:9d:be:b4:ff:d8:07:96:65:d6:59:
71:9a:03:8b:f9:16:94:47:e3:a3:08:41:61:46:fd:
ae:64:f9:ce:0c:ac:7d:64:83:27:b7:15:97:9d:83:
60:25:d7:6b:26:21:9d:d1:e9:13:c8:5b:0b:24:73:
af:f7:a6:48:16:52:5e:b5:3f:41:c3:2c:21:01:c1:
d2:0d:dc:32:f7:51:8e:c7:b6:48:12:f5:53:78:ae:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:0F:B3:46:38:55:0D:AA:0F:8D:0D:B3:AB:0D:8E:FA:75:9E:CA
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AE38FB04535F11F196FB05D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.238.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5a:d7:c9:7c:03:53:cb:77:8b:c1:b6:ef:94:8b:c6:99:81:
67:22:11:00:7d:bd:f1:72:32:e8:b7:81:ca:6f:a1:6f:2e:69:
89:75:a5:be:e5:ad:f0:e0:24:30:b1:0c:09:7f:51:fc:e3:e1:
aa:41:97:e4:d2:07:71:7f:34:f3:34:ea:e3:01:f3:7a:23:08:
a0:54:2a:f5:d3:5a:23:c1:4e:0c:27:86:9c:31:cf:75:84:91:
8d:8c:1e:6d:f9:ec:f6:8d:05:ac:9d:75:94:1d:1f:c2:a5:64:
8f:cb:1f:f5:ea:cf:97:0f:c1:72:d7:91:00:94:bc:a4:f6:65:
09:ee:91:7b:92:01:a3:82:16:db:60:33:ff:10:4c:5d:c6:8c:
d0:d1:f2:52:28:4e:1d:93:24:bb:51:ec:61:24:1e:b5:80:a5:
ad:82:6f:b4:c3:fb:60:a1:20:0c:52:57:62:49:84:b5:a4:15:
38:6d:ac:72:69:47:be:2d:b4:52:8c:77:4a:95:58:ca:d6:cc:
d7:4d:87:16:40:a9:95:bf:58:d5:1a:aa:ec:db:2c:4d:26:54:
49:46:7b:43:7c:b4:1b:a1:30:06:91:59:8d:48:8f:d5:37:84:
d0:c5:4a:87:0e:7d:dd:82:5b:05:aa:70:76:4e:40:3a:f5:51:
40:ff:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:33:18 2026 by rpki-client