Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BFA0F7F8306311F19069569FDAE4EC9C.roa
File: BFA0F7F8306311F19069569FDAE4EC9C.roa (raw, json)
Hash identifier: uuwFwOl4NXLLsEGcdRxbSyUS+puYQ0NZ+/JPuWJb43w=
Subject key identifier: 3A:C4:4F:4E:02:44:73:2B:29:1C:D9:40:B4:11:3F:6B:39:7D:DA:8D
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B54
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BFA0F7F8306311F19069569FDAE4EC9C.roa
Signing time: Sat 04 Apr 2026 20:20:42 +0000
ROA not before: Sat 04 Apr 2026 20:20:08 +0000
ROA not after: Wed 31 Dec 2036 20:20:08 +0000
asID: 834
IP address blocks: 165.49.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Apr 4 20:20:08 2026 GMT
Not After : Dec 31 20:20:08 2036 GMT
Subject: CN=69d1729a-36ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:a9:94:7f:f4:8c:de:77:43:f2:e7:fc:eb:
7c:19:38:21:58:5e:51:03:3e:dc:93:59:5f:02:44:
64:a3:39:90:86:e5:04:bf:7e:56:13:c5:25:73:a3:
fd:85:3c:e2:db:52:5f:3b:f7:9d:ff:be:3a:6b:ef:
ec:fa:20:10:a8:05:e5:b4:59:35:5e:15:e5:55:bf:
8c:f4:63:65:f3:16:3c:75:d2:c7:0d:d0:dd:62:ae:
3f:e4:e1:34:60:14:63:1b:75:d6:05:bf:e4:e8:15:
7b:60:7a:7c:0d:cc:e1:46:3a:5e:79:02:ba:40:cd:
6c:af:32:a2:30:84:00:e7:47:c7:aa:69:e0:ba:a9:
00:57:68:5b:4e:94:e5:39:7d:6d:42:1e:c1:f3:70:
dd:c4:70:d4:ab:47:ff:2e:1e:74:a2:2d:be:d9:ec:
71:83:d6:f0:e6:d4:06:55:5d:e7:e1:5f:e7:d4:56:
d7:bf:69:56:2d:04:c5:13:de:a3:da:fc:32:f9:31:
1f:a5:ce:54:a0:46:df:e7:fb:7a:1e:91:3f:9e:ec:
e3:c1:a8:07:21:d3:8f:6d:ee:ed:74:a4:66:58:de:
6c:48:b5:34:7e:7f:93:1a:af:51:8c:f5:42:76:73:
d4:ef:6b:63:c6:53:89:36:a4:87:e7:6f:d7:60:4f:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:4F:4E:02:44:73:2B:29:1C:D9:40:B4:11:3F:6B:39:7D:DA:8D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BFA0F7F8306311F19069569FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.76.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f0:47:e7:a0:ca:28:9b:6d:6e:18:09:c0:39:11:2c:ec:4b:
73:77:39:7d:63:d4:d6:d2:b3:97:39:28:e6:3e:1c:34:e3:21:
7b:32:d2:c7:0d:19:5f:83:a1:8a:68:7e:9d:1e:02:46:1d:29:
b7:66:e6:8b:05:15:85:6c:16:79:5e:6a:c3:bf:4b:7d:19:97:
3c:3a:95:88:98:a5:b7:df:f9:d7:fa:f9:ff:45:87:43:2b:9b:
a2:08:1a:d4:8a:00:af:42:1f:68:6a:e5:df:a5:54:fa:e6:ff:
b1:c5:97:a4:e1:2f:2a:7a:25:35:05:f9:a1:ab:dc:32:91:fb:
19:3e:bf:25:93:4d:ea:85:e8:24:68:03:65:18:8f:68:95:c3:
05:1e:6b:bc:48:7b:d7:9d:8c:4e:0d:20:e9:87:33:93:a1:15:
52:9c:86:ce:fb:a8:45:7c:3c:6e:23:f9:8b:b8:50:45:88:1b:
66:20:36:68:8a:e4:d2:2a:45:b4:67:34:fd:14:e9:67:01:bf:
ca:d0:ea:86:94:50:32:4a:c0:02:7d:6f:d2:d8:43:20:d6:36:
f3:9d:a2:00:6e:c1:73:42:df:97:ce:f0:ba:41:8c:30:de:8e:
1c:44:72:99:6d:81:a9:41:fc:66:1f:2a:b3:cc:13:e9:a3:2e:
0e:6c:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:20:44 2026 by rpki-client