Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D4438A5E126D11F1AEBE6ACFDAE4EC9C.roa
File: D4438A5E126D11F1AEBE6ACFDAE4EC9C.roa (raw, json)
Hash identifier: YyEeAyGkgfHyU2S6q9tQZjhWVCnOpHzASQpVYzaDQJo=
Subject key identifier: 5E:74:EF:20:C4:F0:2B:6E:02:62:A8:43:1B:AF:EE:19:AB:7C:90:FA
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B06
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D4438A5E126D11F1AEBE6ACFDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 17:17:15 +0000
ROA not before: Wed 25 Feb 2026 17:17:10 +0000
ROA not after: Wed 31 Dec 2036 17:17:10 +0000
asID: 834
IP address blocks: 165.49.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2822 (0xb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Feb 25 17:17:10 2026 GMT
Not After : Dec 31 17:17:10 2036 GMT
Subject: CN=699f2e9b-9a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:2d:47:d4:dc:06:2b:b7:fe:1e:d8:0f:e5:
3b:d0:e3:0c:5e:02:02:cb:b6:5d:c8:3a:16:54:c6:
cc:83:2e:ff:2a:6a:c2:2c:b3:a2:3d:89:37:1c:dd:
27:f5:de:10:26:6f:f7:0c:06:84:03:ff:35:be:45:
c3:09:e4:b8:9d:b1:7b:b7:44:3d:aa:70:bb:da:cb:
29:b7:ea:49:71:25:94:90:b3:3d:da:b5:2e:44:32:
c4:98:65:9c:31:fb:b3:88:e4:62:0d:a7:00:20:ad:
35:55:47:a8:36:bf:ed:82:e9:67:bd:db:1d:fc:47:
0e:5e:de:dd:bf:7f:05:cf:9b:c1:e9:d6:5b:5e:49:
31:d0:af:12:b5:8c:7a:8b:03:c8:82:2a:eb:95:77:
eb:3f:03:e3:38:81:7c:25:13:bd:b1:b3:f1:82:44:
f5:df:9e:5f:58:da:ae:b7:e8:d7:38:69:46:ca:49:
79:b0:e5:3f:b4:21:b6:e8:76:74:e8:c3:95:19:7f:
49:34:4a:a8:cb:ef:3f:8e:a9:04:d3:99:77:17:bc:
f0:97:c5:58:d6:06:0b:d6:83:55:7f:0c:fe:c7:e1:
40:12:12:dd:81:ef:d0:54:ab:ba:86:7f:d4:cb:b7:
27:f3:67:8a:3e:74:23:a6:18:ef:56:1a:d8:95:ae:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:EF:20:C4:F0:2B:6E:02:62:A8:43:1B:AF:EE:19:AB:7C:90:FA
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D4438A5E126D11F1AEBE6ACFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.81.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:8e:dc:92:a5:91:9b:a8:b4:bf:59:ea:6e:7c:b6:de:a9:57:
f2:27:81:44:4d:0e:7a:3e:0c:cc:b5:02:9b:1e:08:d6:6d:1f:
7e:61:d8:4a:18:40:96:69:19:bc:4b:e5:50:f5:5b:c8:74:10:
1b:50:f3:e7:9d:3c:93:dd:d5:59:75:9f:ed:04:3b:e6:19:78:
25:63:e4:66:22:09:fd:1d:e8:d5:34:c3:64:df:66:40:66:11:
a5:41:e6:fb:3a:f9:96:ef:a3:ce:f6:bb:24:80:86:fe:ae:ec:
3a:18:10:cb:a2:0c:42:3c:d4:9d:dc:05:8c:6f:b5:d5:86:3b:
7f:37:56:69:5c:2c:52:94:54:da:7f:b0:e3:02:0d:ca:72:f9:
05:ed:1c:f1:30:76:c1:3c:46:75:cd:a7:42:49:32:20:1f:2e:
38:b6:09:66:93:55:6f:42:23:1b:b1:81:ad:ca:cf:ba:da:02:
a4:dc:d3:ca:b1:cc:0f:18:90:95:a2:18:aa:a8:24:d9:d3:52:
0b:43:14:c8:50:8c:0e:0f:8c:35:1b:cc:f7:87:cf:aa:3d:2a:
e9:ba:42:ef:70:d1:c3:68:49:fb:25:fe:b2:c0:e9:67:e9:78:
61:46:cc:5e:2c:07:b7:1f:f5:06:3c:5c:24:f3:db:d8:dd:80:
0f:8a:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:31 2026 by rpki-client