Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B83A6420637311F1A01A66A4CE1D38B0.roa
File: B83A6420637311F1A01A66A4CE1D38B0.roa (raw, json)
Hash identifier: wTXZG1V1Z3fT9wmWiusWutE8siyiVaJDQgoiUKmJ01I=
Subject key identifier: 79:07:0B:B1:00:14:9F:32:A2:5B:27:E3:69:AF:CD:F2:1B:08:09:E8
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C1A
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B83A6420637311F1A01A66A4CE1D38B0.roa
Signing time: Mon 08 Jun 2026 19:53:29 +0000
ROA not before: Mon 08 Jun 2026 19:53:25 +0000
ROA not after: Wed 31 Dec 2036 19:53:25 +0000
asID: 401783
IP address blocks: 165.49.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 8 19:53:25 2026 GMT
Not After : Dec 31 19:53:25 2036 GMT
Subject: CN=6a271db9-5eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:d0:8a:ea:84:7f:03:c2:89:e9:f8:fe:c2:
a6:3f:ec:6f:bc:e6:22:26:7a:aa:73:50:4f:62:42:
8f:5c:95:65:74:6d:e2:57:27:9b:12:ea:33:0b:00:
3e:02:61:27:93:6e:d8:0c:21:6e:69:12:99:ea:c8:
52:ac:5d:1f:9a:c5:a9:6a:0e:8b:02:19:5b:b5:a7:
99:90:89:15:09:b6:88:de:62:b1:08:19:f5:af:2d:
1c:f9:c5:86:90:21:d0:89:be:40:6a:70:98:ec:9c:
82:b5:18:4c:6d:1a:2e:47:8c:d1:8b:7a:af:45:5b:
49:2e:8f:a8:9a:06:cf:d8:b5:06:d0:99:f4:74:ec:
c5:f2:61:64:01:d1:1f:93:c5:0c:14:b1:26:22:d3:
6f:dc:6a:12:91:52:6e:d9:e5:d1:ab:fc:e3:a1:52:
ff:e9:fc:a6:18:15:a4:69:8b:25:4f:a3:3c:91:0f:
eb:33:ab:b1:c9:b2:58:f8:e1:ad:ee:49:d0:a3:12:
a0:3b:d6:a4:5f:4d:92:45:a5:c5:1a:a5:f7:b1:75:
50:87:3e:dc:f2:15:61:54:38:8e:b6:59:4d:43:64:
91:16:96:71:03:8b:12:84:4d:55:c3:0e:fc:20:dc:
1d:3e:a7:6d:27:3d:05:a4:81:e1:62:97:b1:ef:3c:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:07:0B:B1:00:14:9F:32:A2:5B:27:E3:69:AF:CD:F2:1B:08:09:E8
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B83A6420637311F1A01A66A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6d:dc:8e:6e:6b:b2:8f:5a:3e:75:63:7d:17:25:f3:c9:6b:
36:69:21:46:b9:f9:1b:25:72:0a:ad:ee:05:35:c5:3c:6e:8a:
91:1b:3a:14:b7:8e:4f:44:fb:ab:5c:c9:19:01:75:a3:54:d2:
ea:80:13:fe:0d:28:e3:33:0b:18:0e:82:d4:00:2a:16:87:9e:
c1:9b:f4:7e:2a:db:f7:e5:d2:f4:57:49:f7:a4:41:33:05:b3:
8b:fc:2d:02:17:f2:94:81:f3:22:e1:f7:98:c6:f0:88:b2:5a:
fd:da:c8:98:e1:a7:d7:9e:d4:11:7f:b1:a2:63:f2:90:25:80:
c3:ee:60:2a:4c:25:ea:5c:0e:ed:26:66:e5:b1:63:b4:7d:9e:
c7:dd:32:9e:0c:46:c1:e0:3e:2a:28:08:12:cd:66:94:bd:0b:
90:c2:b0:4c:77:a6:93:96:bd:f7:5b:79:e3:08:49:54:27:8b:
ab:df:a5:2e:2e:fb:66:6b:72:df:fd:96:12:09:fa:6e:c6:ea:
45:d8:fe:9c:5c:6f:7e:71:df:d7:5d:79:dd:fe:6e:e9:b4:65:
61:19:d7:e9:3e:a5:01:f3:b5:03:39:96:89:17:c2:57:f3:4f:
e8:de:07:10:d0:55:dd:ff:3d:7d:a2:11:af:6b:7d:8d:d9:3f:
71:93:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:36:11 2026 by rpki-client