Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F4DD65D2126D11F1925289CFDAE4EC9C.roa
File: F4DD65D2126D11F1925289CFDAE4EC9C.roa (raw, json)
Hash identifier: jo5xkGOLJ0MNhEd28T/UwGgtrfqZcCIZqUrkZ6aUVTk=
Subject key identifier: 5D:A9:1A:AC:96:04:E2:C7:6C:95:0B:D8:F9:02:70:FD:51:CD:2B:EF
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0B08
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F4DD65D2126D11F1925289CFDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 17:18:09 +0000
ROA not before: Wed 25 Feb 2026 17:18:05 +0000
ROA not after: Wed 31 Dec 2036 17:18:05 +0000
asID: 834
IP address blocks: 165.49.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Feb 25 17:18:05 2026 GMT
Not After : Dec 31 17:18:05 2036 GMT
Subject: CN=699f2ed1-e81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:15:43:24:28:3b:1e:06:a3:f6:d3:57:9e:
f2:f0:cc:7f:0e:e9:36:88:56:3b:e9:89:0b:35:c9:
34:2e:aa:33:47:eb:37:44:f2:96:45:23:f9:a5:8b:
6b:13:7f:ea:85:93:67:d6:28:1e:ca:aa:72:ea:c5:
15:1e:56:f9:41:12:97:da:b0:6f:d0:02:02:c6:3c:
2b:59:2c:a0:be:f9:d9:ab:82:b5:a1:2a:b6:40:24:
39:06:a4:99:3c:4e:02:22:27:e3:a5:94:86:d6:3e:
d9:15:57:ec:d2:c6:0c:b3:29:39:0d:68:ee:56:78:
61:58:b9:95:0b:11:4a:97:94:8a:c1:ea:9c:5a:4b:
88:c5:3d:9f:b9:9a:ad:1b:69:32:d1:2a:fc:0d:19:
9c:be:7e:38:b9:55:a0:23:ff:b0:4d:9d:df:a2:9d:
57:c1:39:17:25:8c:9c:71:ca:3c:6a:d4:49:f0:f8:
45:b6:48:16:5a:e3:39:a8:05:98:56:46:aa:8f:a6:
5d:51:2e:11:82:94:ab:97:c9:81:f6:25:bb:51:52:
55:e6:a1:a3:ea:a3:e6:07:96:b6:f3:a9:84:f8:a2:
a5:fb:03:f4:a7:f7:d3:fc:23:62:55:bb:c9:2e:04:
10:ca:52:46:fe:22:93:ad:32:0d:57:a4:a7:dd:d1:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:1A:AC:96:04:E2:C7:6C:95:0B:D8:F9:02:70:FD:51:CD:2B:EF
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F4DD65D2126D11F1925289CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:1f:5c:22:4d:6d:da:0e:ce:10:29:b0:da:c3:8d:30:3d:c9:
5a:52:e0:82:d4:9b:76:d3:81:9d:af:2b:dc:78:88:ab:63:fa:
f7:a8:51:33:f9:ae:7d:3e:47:f9:c9:72:88:84:9e:ce:e4:7a:
65:2e:9d:79:69:62:a0:b4:7e:61:74:99:1f:95:c8:e5:03:5b:
b8:af:86:9f:2b:1e:95:6a:73:28:f3:6b:72:6a:35:9e:c3:02:
ab:79:74:be:a7:55:73:4e:27:31:fc:cc:85:27:17:3d:08:b7:
8c:1e:01:8e:65:ec:e0:e9:38:75:b9:ea:fa:a0:db:30:c4:09:
bd:11:2a:bc:01:89:5f:41:e8:b9:c3:16:65:a0:79:d2:3b:88:
2f:5e:4d:47:cd:74:28:49:ca:4c:33:9f:aa:ca:6c:2d:8d:2d:
54:ab:0c:12:59:f9:d0:cb:0e:61:c2:f5:57:cc:3d:6a:a7:7c:
54:53:b4:74:fd:8a:d5:82:8a:1b:48:c7:5c:56:d1:c5:85:b8:
50:7e:64:85:79:99:1d:9a:d6:10:6a:32:77:92:45:33:5b:07:
4e:de:ec:bb:d6:83:2e:6c:25:2f:f6:fe:32:df:13:4c:71:7a:
c0:73:df:9b:0e:11:50:d4:4d:90:d4:56:c6:33:5a:26:bf:19:
42:49:fd:e9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjAyMjUxNzE4MDVaFw0zNjEyMzExNzE4MDVaMBgxFjAU
BgNVBAMTDTY5OWYyZWQxLWU4MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwxRVDJCg7Hgaj9tNXnvLwzH8O6TaIVjvpiQs1yTQuqjNH6zdE8pZFI/ml
i2sTf+qFk2fWKB7KqnLqxRUeVvlBEpfasG/QAgLGPCtZLKC++dmrgrWhKrZAJDkG
pJk8TgIiJ+OllIbWPtkVV+zSxgyzKTkNaO5WeGFYuZULEUqXlIrB6pxaS4jFPZ+5
mq0baTLRKvwNGZy+fji5VaAj/7BNnd+inVfBORcljJxxyjxq1Enw+EW2SBZa4zmo
BZhWRqqPpl1RLhGClKuXyYH2JbtRUlXmoaPqo+YHlrbzqYT4oqX7A/Sn99P8I2JV
u8kuBBDKUkb+IpOtMg1XpKfd0S15AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXaka
rJYE4sdslQvY+QJw/VHNK+8wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0Y0REQ2NUQyMTI2RDExRjE5MjUyODlDRkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMWwwDQYJKoZIhvcNAQELBQAD
ggEBALUfXCJNbdoOzhApsNrDjTA9yVpS4ILUm3bTgZ2vK9x4iKtj+veoUTP5rn0+
R/nJcoiEns7kemUunXlpYqC0fmF0mR+VyOUDW7ivhp8rHpVqcyjza3JqNZ7DAqt5
dL6nVXNOJzH8zIUnFz0It4weAY5l7ODpOHW56vqg2zDECb0RKrwBiV9B6LnDFmWg
edI7iC9eTUfNdChJykwzn6rKbC2NLVSrDBJZ+dDLDmHC9VfMPWqnfFRTtHT9itWC
ihtIx1xW0cWFuFB+ZIV5mR2a1hBqMneSRTNbB07e7LvWgy5sJS/2/jLfE0xxesBz
35sOEVDUTZDUVsYzWia/GUJJ/ek=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:51 2026 by rpki-client