Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0ACA6686745911F1847454A8CE1D38B0.roa
File: 0ACA6686745911F1847454A8CE1D38B0.roa (raw, json)
Hash identifier: L7ZF0/3LXgpdVsgNGbx8hSNOjKUALN+48vSIwZyViSg=
Subject key identifier: 20:31:5D:6A:96:A8:89:7C:B4:27:60:8B:14:7C:DC:14:E3:6B:EF:AF
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C48
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0ACA6686745911F1847454A8CE1D38B0.roa
Signing time: Tue 30 Jun 2026 07:55:21 +0000
ROA not before: Tue 30 Jun 2026 07:55:16 +0000
ROA not after: Wed 31 Dec 2036 07:55:16 +0000
asID: 834
IP address blocks: 165.49.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 30 07:55:16 2026 GMT
Not After : Dec 31 07:55:16 2036 GMT
Subject: CN=6a437669-8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:64:5d:b8:51:f5:e4:a8:0d:4c:d9:94:d7:
a4:ed:0a:ba:8d:50:f7:2b:a5:1b:13:3a:d0:2c:38:
87:08:dd:c5:e1:85:ec:c0:60:05:cc:5b:d4:19:13:
97:28:b8:dc:d5:a7:d6:00:89:29:e4:9e:73:09:27:
05:b5:bd:10:b5:f3:38:81:8c:60:a3:ca:60:79:ee:
63:a1:6d:d2:2a:51:ba:b5:6e:b8:47:96:90:d6:20:
4f:de:8c:e5:10:f3:1d:48:e1:f5:c8:c0:dd:ec:3e:
57:14:d2:9e:a6:e5:4d:ea:0b:0e:49:cc:60:35:c4:
bd:9d:8f:44:cb:cf:2e:72:0f:e5:20:8b:c2:ee:67:
35:3c:a8:37:5c:35:7c:01:e1:a3:20:e8:9e:8b:4d:
17:f1:5e:5b:54:0f:1c:e6:28:51:44:b2:ee:c5:47:
2d:97:ed:95:a6:0b:ad:4b:c9:4c:4e:11:cf:96:57:
e1:46:47:e9:a9:6b:d0:2e:0b:91:4c:07:93:6c:81:
f6:f3:b7:90:66:2d:ac:d9:fd:7f:77:28:6c:bc:aa:
bb:5c:32:fc:d9:11:64:91:74:5f:c8:8c:85:79:1e:
90:0e:a1:dc:34:bb:5e:54:3e:f6:9e:91:57:cc:7d:
5b:ab:54:70:00:92:28:e9:b6:82:53:c5:61:40:39:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:5D:6A:96:A8:89:7C:B4:27:60:8B:14:7C:DC:14:E3:6B:EF:AF
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0ACA6686745911F1847454A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b8:b6:3c:fe:c4:c4:95:43:bf:2a:34:34:77:f2:25:09:89:
e3:e4:34:56:5c:33:19:2a:d8:0f:dd:e2:4e:7d:1c:a6:60:1f:
7a:b1:d4:f0:4b:44:95:6d:88:ee:ba:10:07:fa:61:36:82:da:
b6:bc:e1:72:87:fb:57:17:14:9b:be:df:12:4b:4a:c7:9d:83:
01:90:95:8b:56:cd:91:e8:23:35:37:b4:49:5f:d3:23:2a:07:
5a:1a:64:9e:c1:36:27:3d:4a:47:a8:9f:44:28:c6:86:e6:fb:
fe:0a:a0:f4:7f:36:28:42:97:e8:32:f2:87:b9:dd:3a:69:b3:
a0:78:30:6d:d8:2f:8b:04:11:34:8f:70:3a:5b:fc:20:3d:26:
d8:dd:79:c7:f9:6d:6c:37:c9:61:83:ee:14:74:da:45:dd:51:
26:b3:aa:0f:3b:19:e4:e5:57:a6:8f:34:e4:d4:54:4c:c6:39:
86:25:71:01:3f:25:7c:09:71:d2:38:c2:3b:ba:14:a2:2f:bf:
36:54:b2:51:13:94:35:77:e1:73:7d:8d:07:e9:b2:6e:14:e1:
58:b1:5b:68:4a:79:d8:1a:a7:e4:4f:e6:ac:1d:df:93:f1:08:
26:38:9b:9e:d4:fe:6a:65:c1:cf:40:81:62:fa:ff:b4:33:d9:
5b:b4:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:58 2026 by rpki-client