Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CFB752888A6111F1A5636CC9CE1D38B0.roa
File: CFB752888A6111F1A5636CC9CE1D38B0.roa (raw, json)
Hash identifier: BKqPVx7N0HkyWTqxQIGcIDT8gdXRI9nT7zBOE2uVXXU=
Subject key identifier: 60:A0:27:0B:83:92:F3:72:30:97:61:17:6D:1D:10:24:6C:37:3B:4F
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0D0E
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CFB752888A6111F1A5636CC9CE1D38B0.roa
Signing time: Tue 28 Jul 2026 08:53:33 +0000
ROA not before: Tue 28 Jul 2026 08:53:29 +0000
ROA not after: Wed 31 Dec 2036 08:53:29 +0000
asID: 834
IP address blocks: 165.49.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 28 08:53:29 2026 GMT
Not After : Dec 31 08:53:29 2036 GMT
Subject: CN=6a686e0d-cec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:25:3e:ea:f3:a8:25:fe:a3:cc:41:d1:c0:
5c:e8:03:cd:d0:ca:37:e8:75:29:60:3c:08:5e:e4:
e7:8e:ba:1d:14:8e:3e:ad:ac:7e:57:9b:5f:2e:2b:
0b:d0:ea:fa:cf:48:47:19:2e:9a:9a:d1:4c:f1:20:
5b:31:f2:40:7e:43:9c:1b:87:bf:9c:2f:58:9e:97:
7e:c0:59:6d:3f:6f:d4:d2:11:d5:50:a8:c8:64:6f:
7d:24:1f:64:93:7b:4f:5f:8e:fb:5b:85:4c:df:2b:
3a:e8:32:2f:76:ca:2e:1c:e6:ff:e6:ce:1c:8e:2a:
31:14:85:c7:0d:6f:0d:5e:d7:5d:e1:c2:3e:62:df:
d1:24:dc:76:de:a4:b6:b0:41:1f:e5:62:23:50:81:
a4:29:1a:29:69:d6:bf:40:3f:11:0b:a0:f8:00:c9:
d9:d0:a3:0f:ab:8c:95:b9:af:fe:82:cf:3c:a6:51:
4c:90:21:e6:39:4c:55:3a:a4:da:18:2d:1d:28:f1:
2f:b6:75:3d:4a:1b:6f:61:13:88:02:69:4a:d5:e0:
02:8b:94:2c:7a:64:81:e2:7f:b6:6f:f3:0a:29:e8:
e9:e5:30:ec:0a:f3:6d:34:a9:c4:4d:07:74:d0:ec:
ef:c9:f9:47:7e:50:d6:21:e1:f6:f1:80:29:59:44:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:27:0B:83:92:F3:72:30:97:61:17:6D:1D:10:24:6C:37:3B:4F
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CFB752888A6111F1A5636CC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.107.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a3:c2:dd:50:40:5b:2f:62:93:ee:73:e8:95:b3:90:1c:d2:
ea:1a:22:ef:34:44:b2:e9:db:69:67:9c:77:3c:13:5e:40:32:
f1:ab:97:f2:6d:fa:ea:3b:34:d7:6e:0b:ac:d1:0c:2d:aa:1e:
d6:3c:84:a9:f6:df:10:8e:1b:56:e1:94:3c:ea:ea:a3:1c:ea:
64:5f:21:33:85:3a:1b:43:0d:91:eb:b8:d7:cc:5d:c8:9e:d7:
87:66:00:6f:4d:50:e9:bd:a4:64:94:ec:4c:1b:1e:87:a4:ce:
cf:ae:e2:a6:2a:0e:64:7d:95:09:dc:1d:7e:9f:77:f6:f5:24:
0b:c4:d3:4e:8d:e3:cb:73:d4:5c:6e:b8:51:cf:cf:dc:c6:c3:
15:e0:bb:20:bc:94:da:09:aa:1a:36:7e:76:eb:4d:0a:52:46:
e4:83:6c:cf:3b:78:44:69:14:b1:30:80:cb:97:68:b7:9d:44:
67:ba:a6:e3:55:3f:24:24:cf:8c:9d:92:58:9c:02:96:fe:30:
27:97:44:b5:37:e9:03:40:d1:95:de:e1:04:13:1f:6a:cb:dd:
bb:f2:5d:a2:c6:aa:78:33:b7:ac:ce:53:6e:c2:c0:1d:e9:f1:
cc:d0:43:48:11:dd:58:c9:d0:34:db:84:3e:46:5e:3f:29:df:
4d:1d:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:15:39 2026 by rpki-client