Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BF51A00835DC11F1A10A54D8CE1D38B0.roa
File: BF51A00835DC11F1A10A54D8CE1D38B0.roa (raw, json)
Hash identifier: 7LVG7LMg/1GvVbbPp3Nj4giK2zc7Uo3U/1DtyVqCYkc=
Subject key identifier: 5F:E1:3C:3A:CF:0E:B1:D8:73:BE:73:49:AF:1B:9A:17:E9:FB:BF:B3
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B67
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BF51A00835DC11F1A10A54D8CE1D38B0.roa
Signing time: Sat 11 Apr 2026 19:29:25 +0000
ROA not before: Sat 11 Apr 2026 19:29:19 +0000
ROA not after: Wed 31 Dec 2036 19:29:19 +0000
asID: 153671
IP address blocks: 165.49.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 01:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 11 19:29:19 2026 GMT
Not After : Dec 31 19:29:19 2036 GMT
Subject: CN=69daa115-f88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:59:d7:22:a7:29:df:53:c3:52:c1:4c:41:
52:af:9d:13:a9:41:18:31:37:49:d6:c2:36:ac:0a:
62:6c:ef:3c:40:8a:50:7f:e7:37:4e:9a:a2:17:20:
58:e1:ce:cb:f2:96:30:6f:e2:fa:75:9d:2a:6b:f6:
22:d4:6a:7f:e8:af:da:05:87:b6:80:83:1b:ce:e7:
29:4e:54:e8:6d:25:cb:0c:cc:cb:18:e9:e0:e9:4e:
b0:4f:77:c0:b7:41:02:a1:ad:bc:0b:45:79:cd:60:
a2:b0:71:1d:5c:2b:8c:54:44:62:17:5e:3f:cf:58:
9a:66:17:b6:0f:df:62:d1:0c:9f:98:d8:b4:94:67:
cf:2a:4c:66:fc:40:80:e1:7a:8b:f4:fb:65:c9:2e:
de:61:fe:7a:ed:8c:75:68:df:b2:64:69:a1:82:0f:
46:79:60:13:00:30:3f:ab:c3:33:d9:3b:2d:9a:1b:
ec:d8:3d:ca:7d:a2:5d:1c:c3:ab:7e:b5:19:f5:8b:
41:34:20:42:9e:89:28:84:79:b3:9d:d0:3b:43:98:
0a:45:54:f1:27:3e:1b:8f:53:d3:c1:91:f6:f3:6b:
bf:3b:60:99:af:e6:2f:54:6c:63:8e:86:56:54:5c:
95:18:45:ce:d1:c3:d9:98:46:69:a3:1b:24:89:6e:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:3C:3A:CF:0E:B1:D8:73:BE:73:49:AF:1B:9A:17:E9:FB:BF:B3
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BF51A00835DC11F1A10A54D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.105.0/24
Signature Algorithm: sha256WithRSAEncryption
69:80:12:e1:5e:e1:38:0a:81:81:8d:ac:5f:11:f0:84:4c:fe:
c2:cf:be:99:f0:65:86:23:6d:79:9f:8f:d3:d6:0e:96:0a:99:
1f:ce:65:23:26:6e:b0:96:e4:17:8a:fa:5e:83:d6:38:54:ad:
6e:ea:81:87:af:5d:14:f2:37:43:cf:4c:7b:3f:c3:11:4a:07:
c6:c1:6f:f4:94:14:7a:c0:17:69:2a:7e:31:51:52:a6:d0:75:
d1:04:1a:ae:65:dd:3c:d2:1b:41:94:4c:be:c8:ca:2e:30:f2:
16:d5:26:46:21:8b:d6:1b:49:dd:8a:a5:f1:85:59:10:4e:9e:
0f:e3:3a:15:23:b9:10:91:6a:e0:eb:1f:93:30:fe:dd:ce:a1:
97:92:c6:81:6a:63:d5:39:92:11:68:e4:cb:46:19:a2:22:8b:
cc:c3:b8:81:48:df:49:c4:4d:de:8f:e8:6b:5f:15:a4:84:4c:
ab:42:01:7d:d9:79:8c:bd:db:96:e3:8f:62:ad:97:f3:97:f0:
b7:11:3c:29:43:75:13:02:5e:61:86:45:d0:fa:a8:8f:dd:41:
82:a5:4b:b2:cb:c0:22:38:7c:57:bd:5f:91:08:3f:f4:41:15:
05:eb:bb:52:a2:77:04:ba:dd:26:1a:9c:60:71:ae:77:1e:5e:
7d:a9:2e:d2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA0MTExOTI5MTlaFw0zNjEyMzExOTI5MTlaMBgxFjAU
BgNVBAMTDTY5ZGFhMTE1LWY4OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKelnXIqcp31PDUsFMQVKvnROpQRgxN0nWwjasCmJs7zxAilB/5zdOmqIX
IFjhzsvyljBv4vp1nSpr9iLUan/or9oFh7aAgxvO5ylOVOhtJcsMzMsY6eDpTrBP
d8C3QQKhrbwLRXnNYKKwcR1cK4xURGIXXj/PWJpmF7YP32LRDJ+Y2LSUZ88qTGb8
QIDheov0+2XJLt5h/nrtjHVo37JkaaGCD0Z5YBMAMD+rwzPZOy2aG+zYPcp9ol0c
w6t+tRn1i0E0IEKeiSiEebOd0DtDmApFVPEnPhuPU9PBkfbza787YJmv5i9UbGOO
hlZUXJUYRc7Rw9mYRmmjGySJbvL1AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUX+E8
Os8OsdhzvnNJrxuaF+n7v7MwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0JGNTFBMDA4MzVEQzExRjFBMTBBNTREOENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMWkwDQYJKoZIhvcNAQELBQAD
ggEBAGmAEuFe4TgKgYGNrF8R8IRM/sLPvpnwZYYjbXmfj9PWDpYKmR/OZSMmbrCW
5BeK+l6D1jhUrW7qgYevXRTyN0PPTHs/wxFKB8bBb/SUFHrAF2kqfjFRUqbQddEE
Gq5l3TzSG0GUTL7Iyi4w8hbVJkYhi9YbSd2KpfGFWRBOng/jOhUjuRCRauDrH5Mw
/t3OoZeSxoFqY9U5khFo5MtGGaIii8zDuIFI30nETd6P6GtfFaSETKtCAX3ZeYy9
25bjj2Ktl/OX8LcRPClDdRMCXmGGRdD6qI/dQYKlS7LLwCI4fFe9X5EIP/RBFQXr
u1KidwS63SYanGBxrnceXn2pLtI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:54 2026 by rpki-client