Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C7DA2E4A5F1511F1879BA3A3CE1D38B0.roa
File: C7DA2E4A5F1511F1879BA3A3CE1D38B0.roa (raw, json)
Hash identifier: 6vm8xmj+Y77W4N7zqNlBO8dNc3Za2KO/DWVCgALVzcw=
Subject key identifier: 40:E9:4B:A1:21:03:2A:1D:34:11:6B:0F:10:28:F2:6C:B9:E2:4C:23
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C06
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C7DA2E4A5F1511F1879BA3A3CE1D38B0.roa
Signing time: Wed 03 Jun 2026 06:30:58 +0000
ROA not before: Wed 03 Jun 2026 06:30:53 +0000
ROA not after: Wed 31 Dec 2036 06:30:53 +0000
asID: 834
IP address blocks: 165.49.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 3 06:30:53 2026 GMT
Not After : Dec 31 06:30:53 2036 GMT
Subject: CN=6a1fca22-4744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:66:d5:ed:f8:c6:53:0d:7e:1c:60:6f:13:
4c:c0:92:ce:b8:e9:d1:cd:60:d0:c2:95:bd:11:8f:
93:eb:9f:69:b7:39:07:6c:b2:c2:aa:86:23:a1:33:
65:71:c7:a9:c7:0d:e7:2d:b1:bb:b3:1a:72:29:01:
ef:f3:56:51:a6:00:a6:ab:08:59:5e:a1:c6:8b:f7:
cd:1c:a5:87:91:be:24:51:bc:88:16:17:08:7e:99:
c3:10:69:c1:be:41:62:fe:0a:41:66:fa:77:9e:fe:
fe:9c:f0:b6:a3:7d:28:d3:ca:f7:84:f7:9d:4f:05:
68:e2:8e:12:43:90:cf:54:54:50:ee:91:3a:df:ed:
a1:f1:fa:af:a8:2e:20:e0:af:73:d8:89:09:96:00:
54:e5:83:52:82:d1:d8:6d:ef:30:4e:f3:e7:48:bf:
6f:4c:07:31:d8:dd:e9:6d:86:6f:74:37:d5:34:2a:
ba:90:cf:40:36:24:71:e2:f3:97:4b:ef:b9:62:c1:
87:7a:f2:36:b0:af:c6:97:b4:a4:22:66:1d:b6:e0:
dd:cf:14:41:ab:b3:10:4e:9b:1c:fa:23:f1:39:c6:
d8:69:81:b5:fb:3b:fa:c0:1a:1b:c0:68:6b:5c:2a:
40:d1:7e:4d:95:3d:94:1d:c0:15:4f:91:5f:cf:99:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:4B:A1:21:03:2A:1D:34:11:6B:0F:10:28:F2:6C:B9:E2:4C:23
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C7DA2E4A5F1511F1879BA3A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.234.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4a:d8:c4:42:01:eb:17:2c:46:4b:c6:04:2a:bd:c7:61:0e:
e0:86:8f:4b:a4:d3:8d:35:72:f8:83:1b:82:55:00:ee:39:9c:
9b:5b:fd:8c:65:f4:6e:d7:a7:3e:f5:41:a6:75:dd:d4:a6:ae:
db:24:02:c2:a2:25:d0:37:3d:aa:f7:9f:5b:94:e2:3d:38:12:
65:df:ac:59:f6:bb:d3:75:c5:b9:bc:42:bf:96:55:8b:2b:61:
a0:54:e1:03:51:69:f9:94:83:ce:b3:22:5f:a5:69:cd:1a:db:
9f:92:6d:df:73:63:53:ef:42:b2:01:e3:cd:a6:81:25:5d:94:
d8:4d:d9:65:8a:79:0f:05:41:12:26:58:f5:a7:36:5e:8b:58:
64:77:a2:b7:a5:1a:7f:2c:f7:ee:72:ef:01:d8:6a:a8:a9:61:
b5:01:e3:af:e1:4a:ff:20:4a:c2:56:ce:42:96:4b:0a:6f:a5:
e0:0b:34:bd:f7:91:2c:30:9e:64:2d:b6:3e:aa:f7:4f:72:c8:
02:8d:c4:17:96:00:bd:4d:8a:87:6f:a7:58:ac:8d:ae:0d:45:
dd:b2:d4:1d:59:2e:26:bd:33:ce:76:b7:b8:5a:88:97:12:7c:
e1:e6:e5:48:cf:23:0b:1c:9f:4e:1c:1b:8b:e5:7e:91:db:10:
10:b6:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:04 2026 by rpki-client