Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FE695BDE126C11F182D620CBDAE4EC9C.roa
File: FE695BDE126C11F182D620CBDAE4EC9C.roa (raw, json)
Hash identifier: vfQ7+KqtaXP+MGMY92GzRIE9oF3GMSHwMpA0AG7K82A=
Subject key identifier: CE:83:C3:3F:C8:09:EE:87:F1:79:50:4F:4C:E1:FB:6B:82:0E:0A:11
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0AFD
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FE695BDE126C11F182D620CBDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 17:11:16 +0000
ROA not before: Wed 25 Feb 2026 17:11:11 +0000
ROA not after: Wed 31 Dec 2036 17:11:11 +0000
asID: 834
IP address blocks: 165.49.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Feb 25 17:11:11 2026 GMT
Not After : Dec 31 17:11:11 2036 GMT
Subject: CN=699f2d34-4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:83:3a:bf:f0:a4:37:a1:ba:0d:31:e5:69:
fa:17:e4:86:8d:94:14:7b:cd:dd:26:56:91:42:f6:
ef:dc:da:d0:30:4e:c1:66:aa:0e:09:05:f2:56:05:
e5:ec:b1:29:eb:c3:aa:b0:1f:aa:1c:f3:16:cd:80:
8b:4d:43:91:79:1d:cb:ac:16:ec:37:7d:a8:b2:40:
62:a9:69:13:5f:ba:bd:3e:33:3c:b5:58:5f:11:b9:
a8:f1:a4:85:64:01:9f:01:4b:3e:59:dc:88:d7:cf:
a4:d1:87:a9:e6:58:d4:21:46:10:9e:5c:e4:ab:8e:
5f:79:76:44:d3:05:2f:bc:38:5b:56:55:10:94:5b:
5c:aa:72:55:c3:60:7f:f6:ab:d6:11:53:a7:eb:2a:
9c:55:fd:29:1d:7d:ee:5a:14:80:30:71:cc:51:49:
67:90:98:7c:19:68:4a:eb:2c:1e:68:6f:7f:b6:c0:
23:ae:83:06:5e:99:93:2a:50:b2:d3:76:c2:db:e5:
bc:08:bc:43:1d:d9:7d:98:71:6c:f5:0d:1a:18:e5:
ed:86:87:40:17:01:0f:99:ea:54:ec:4e:83:31:ed:
39:44:ba:c5:49:a0:62:52:c6:9e:3e:3b:53:3a:2f:
d6:bc:3b:e2:c9:fb:c6:6e:a6:fe:53:e4:76:f8:54:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:C3:3F:C8:09:EE:87:F1:79:50:4F:4C:E1:FB:6B:82:0E:0A:11
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FE695BDE126C11F182D620CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.73.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1a:ff:80:22:ab:95:d0:4d:df:30:c6:3b:63:1c:cf:78:d4:
56:fc:85:53:22:07:09:9f:eb:70:fe:cb:8d:46:f0:e9:5d:e8:
84:6c:0b:f5:49:f2:c8:67:89:40:59:fb:3b:a5:94:cc:dc:26:
39:a5:6e:19:15:17:fe:43:2e:39:27:5d:48:01:5b:b2:5a:02:
8c:5d:6c:45:ea:ae:35:c1:66:05:60:5b:92:fd:95:cf:97:37:
a6:21:9a:2d:2f:cf:6f:2e:49:48:b1:ca:b4:15:16:c8:c1:f8:
32:74:81:3f:3f:fa:a8:03:46:87:66:88:e6:ee:a8:9c:a5:16:
54:29:f7:ef:e6:ea:62:21:30:c2:3a:cb:e9:d4:12:93:9a:d1:
07:f6:d0:c5:ae:89:bc:74:98:56:3b:33:4b:4e:18:67:36:e0:
9c:96:73:40:ee:c4:17:e2:05:10:7a:61:4e:cb:9b:a5:bc:ca:
ce:83:15:dd:f7:3e:d8:0a:8a:d4:5f:77:43:96:b6:d5:58:b3:
3f:15:69:d9:46:38:72:b6:28:1f:5a:f4:61:fe:3e:63:d5:a6:
0b:70:de:dc:7a:7b:bf:ff:fb:59:8c:33:87:9b:5f:05:64:3b:
17:a7:68:05:6c:04:30:c8:35:39:25:e0:69:4c:e9:47:69:b6:
e7:28:d9:fc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjAyMjUxNzExMTFaFw0zNjEyMzExNzExMTFaMBgxFjAU
BgNVBAMTDTY5OWYyZDM0LTQ1NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2BIM6v/CkN6G6DTHlafoX5IaNlBR7zd0mVpFC9u/c2tAwTsFmqg4JBfJW
BeXssSnrw6qwH6oc8xbNgItNQ5F5HcusFuw3faiyQGKpaRNfur0+Mzy1WF8Ruajx
pIVkAZ8BSz5Z3IjXz6TRh6nmWNQhRhCeXOSrjl95dkTTBS+8OFtWVRCUW1yqclXD
YH/2q9YRU6frKpxV/Skdfe5aFIAwccxRSWeQmHwZaErrLB5ob3+2wCOugwZemZMq
ULLTdsLb5bwIvEMd2X2YcWz1DRoY5e2Gh0AXAQ+Z6lTsToMx7TlEusVJoGJSxp4+
O1M6L9a8O+LJ+8Zupv5T5Hb4VNo9AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzoPD
P8gJ7ofxeVBPTOH7a4IOChEwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0ZFNjk1QkRFMTI2QzExRjE4MkQ2MjBDQkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMUkwDQYJKoZIhvcNAQELBQAD
ggEBAEca/4Aiq5XQTd8wxjtjHM941Fb8hVMiBwmf63D+y41G8Old6IRsC/VJ8shn
iUBZ+zullMzcJjmlbhkVF/5DLjknXUgBW7JaAoxdbEXqrjXBZgVgW5L9lc+XN6Yh
mi0vz28uSUixyrQVFsjB+DJ0gT8/+qgDRodmiObuqJylFlQp9+/m6mIhMMI6y+nU
EpOa0Qf20MWuibx0mFY7M0tOGGc24JyWc0DuxBfiBRB6YU7Lm6W8ys6DFd33PtgK
itRfd0OWttVYsz8VadlGOHK2KB9a9GH+PmPVpgtw3tx6e7//+1mMM4ebXwVkOxen
aAVsBDDINTkl4GlM6Udptuco2fw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:47 2026 by rpki-client