Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D9ADBB208AAB11F19A9F4805CF1D38B0.roa
File: D9ADBB208AAB11F19A9F4805CF1D38B0.roa (raw, json)
Hash identifier: JXk/FriN7s4lSU50xmgbDSns7cIAeg5hovltqQkmCIs=
Subject key identifier: 81:25:DE:90:12:DF:C6:CA:67:B2:30:6B:57:8B:A7:1E:E8:DC:3C:55
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0D11
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D9ADBB208AAB11F19A9F4805CF1D38B0.roa
Signing time: Tue 28 Jul 2026 17:43:32 +0000
ROA not before: Tue 28 Jul 2026 17:43:28 +0000
ROA not after: Wed 31 Dec 2036 17:43:28 +0000
asID: 834
IP address blocks: 165.49.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 28 17:43:28 2026 GMT
Not After : Dec 31 17:43:28 2036 GMT
Subject: CN=6a68ea44-7b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:57:b2:0d:a2:50:ee:6f:d5:c7:eb:5d:91:
5f:4e:20:e7:11:d7:6c:6e:6c:05:b4:f2:96:0b:23:
45:4d:20:22:f7:db:c3:8d:89:e1:4d:2b:36:73:22:
27:38:4d:3b:ca:20:78:7d:05:c7:f3:61:dc:ef:86:
c7:6c:4d:2c:c8:55:eb:20:9f:2d:72:a1:69:98:81:
49:f9:6c:c7:d7:ea:ec:13:85:e5:bc:c5:00:86:f4:
a4:43:5e:37:4e:30:2a:d1:c1:c7:6b:b6:10:da:33:
79:e5:44:7b:1f:6a:1c:8f:41:36:07:48:e7:9a:2a:
72:a7:34:11:11:31:89:b5:4c:a1:a6:7f:8b:8a:0a:
5e:7e:aa:5a:c7:8c:db:c8:0c:5c:9d:9c:7f:f3:8f:
d2:5b:cf:ae:4e:0f:f3:9d:fa:5d:a0:1b:8e:d1:26:
51:eb:a2:4b:7e:15:95:c6:54:c9:0d:73:93:dc:50:
46:eb:6d:b5:77:15:da:9d:03:46:19:37:17:b8:02:
e7:79:f2:62:c8:69:a3:3f:98:98:ae:1e:3f:b3:48:
72:be:52:b3:cd:41:95:ee:54:1e:d6:00:81:87:1e:
ea:bb:a9:d7:d5:bc:78:2b:a6:26:a1:46:c5:75:17:
08:99:93:d7:6a:41:3f:1d:9f:33:84:69:4e:d3:f9:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:DE:90:12:DF:C6:CA:67:B2:30:6B:57:8B:A7:1E:E8:DC:3C:55
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D9ADBB208AAB11F19A9F4805CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.239.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6e:30:7b:82:b3:f3:fe:63:7a:34:5d:45:eb:0b:19:e8:1c:
c4:34:f6:a2:83:50:15:c4:4b:a1:ef:51:36:83:bd:ce:34:03:
61:a5:f7:e9:cb:62:a9:b2:d9:e6:ff:19:77:07:00:b9:a7:51:
a2:38:13:fa:1c:9b:48:bb:ea:eb:0a:28:36:b8:6c:e4:1f:af:
6c:1b:76:8d:0d:56:7a:0b:8a:b5:47:bd:f5:e0:66:aa:29:4f:
77:a8:e5:eb:1c:fa:72:3e:eb:57:f7:26:07:54:2d:aa:d4:23:
c3:b2:2d:cb:9d:97:8c:21:e7:5b:60:61:94:05:13:18:47:4d:
f4:01:c8:92:a3:cf:9d:7a:33:b6:42:9f:96:21:ee:58:e2:aa:
dc:c0:61:08:05:18:85:57:8e:ed:c7:ac:eb:95:da:65:2d:8c:
db:f4:be:ee:b2:e3:aa:41:94:0b:4e:97:9d:f8:f0:8b:37:fa:
ea:25:81:7a:06:fc:15:77:88:96:72:88:9b:97:fd:e9:a1:0e:
ea:db:b3:3b:21:ae:15:11:89:a1:1b:e3:75:27:20:ae:00:20:
7f:ba:68:5f:22:de:c3:10:06:48:2c:e9:1b:1d:4e:8d:97:0c:
f3:47:46:ab:5a:f9:3a:ec:7a:4d:7e:9c:f9:c9:a1:39:92:e5:
61:32:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:01:06 2026 by rpki-client