Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6D23F7A637311F1916787A4CE1D38B0.roa
File: D6D23F7A637311F1916787A4CE1D38B0.roa (raw, json)
Hash identifier: UUenwZVjATGm7iHW/NSc+z5lKPGexejZlq/E9bqgsDU=
Subject key identifier: 2F:94:C7:1B:D6:40:59:FE:CB:BB:3B:E5:B9:F9:AD:5E:A2:E8:51:F9
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C1C
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6D23F7A637311F1916787A4CE1D38B0.roa
Signing time: Mon 08 Jun 2026 19:54:20 +0000
ROA not before: Mon 08 Jun 2026 19:54:16 +0000
ROA not after: Wed 31 Dec 2036 19:54:16 +0000
asID: 401783
IP address blocks: 165.49.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 01:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 8 19:54:16 2026 GMT
Not After : Dec 31 19:54:16 2036 GMT
Subject: CN=6a271dec-1779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:cd:8e:9e:ed:f9:b0:8a:2a:29:5b:7d:4a:
40:43:1c:0e:a6:c0:72:c2:42:76:bd:e2:e5:74:88:
52:e7:dc:59:a7:b8:92:71:be:53:7a:b0:a8:ef:6b:
9f:95:60:d6:39:42:e0:c8:34:39:8c:e1:09:24:97:
22:24:44:ae:10:ce:5d:c2:38:95:d4:4f:a4:a9:10:
c2:b5:e9:55:f4:78:d9:21:23:55:9e:14:e7:7b:a6:
b8:6c:a4:92:b0:6c:35:6f:b7:41:c7:f0:6a:c4:5c:
b0:4e:dd:b8:5a:e3:8a:b8:24:f7:20:4e:37:8a:2f:
77:5d:ed:d4:cd:90:3e:01:2b:fc:5c:99:31:80:51:
88:21:82:4a:72:c3:92:d5:10:56:53:7c:b9:19:ad:
4b:95:6e:84:43:65:15:69:c3:12:19:f2:b3:e3:e9:
e4:32:3b:39:6a:12:1e:15:35:a5:22:4e:75:46:05:
6e:82:ab:29:b1:c8:9d:7d:36:96:ce:14:17:d8:67:
13:81:2f:ae:cc:56:23:87:7b:d6:04:0d:37:23:59:
9d:97:76:bd:f8:d5:f6:88:c9:43:5e:e7:62:d7:4d:
03:29:d8:63:64:06:61:0d:8e:08:71:2b:8b:c4:22:
aa:36:1b:ed:88:f6:e2:22:b4:66:de:1e:4a:0b:4e:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:C7:1B:D6:40:59:FE:CB:BB:3B:E5:B9:F9:AD:5E:A2:E8:51:F9
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6D23F7A637311F1916787A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:47:4f:8f:5c:05:54:b6:6f:9a:60:97:f3:e0:cb:ba:da:3a:
af:58:7a:13:43:e4:10:da:eb:5a:da:c4:88:92:5a:14:64:b8:
44:e2:39:38:25:ce:36:ab:f5:3a:b4:4b:7f:7f:fb:6a:84:1b:
0a:87:f5:2a:6d:a4:8c:da:c5:d0:ea:0a:e8:85:22:c9:27:fd:
c9:62:62:08:69:2d:2c:ea:f4:27:c3:4f:07:14:8d:d0:40:5e:
41:a0:5b:94:93:ab:89:59:4e:bc:49:aa:9e:93:0f:20:f0:0b:
8b:42:81:32:1c:d8:a0:42:1f:ad:cc:9a:89:f8:84:17:83:d3:
e0:47:0e:88:73:61:8c:1a:52:7e:1d:21:2e:80:d1:0c:6f:cb:
49:a6:26:64:83:c5:17:da:d6:00:85:de:04:dc:7f:a7:9f:7d:
1a:56:9d:fd:36:d9:0c:54:0c:1d:4f:85:8a:db:4d:22:28:3c:
58:02:1f:e1:3b:5f:db:57:ba:af:b7:bd:a0:7d:c4:53:e2:16:
fe:ce:99:8a:30:f0:46:56:1f:de:30:64:b4:26:f1:91:19:20:
62:23:26:98:8a:aa:4f:6e:ad:41:41:25:88:e9:d3:93:e0:a7:
96:8a:46:78:76:42:f7:ec:a4:17:bb:8d:e7:6d:fc:0c:07:56:
26:eb:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:26:42 2026 by rpki-client