Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/10EB26F8803011F1A66EA3DBCE1D38B0.roa
File: 10EB26F8803011F1A66EA3DBCE1D38B0.roa (raw, json)
Hash identifier: dUkKeRtNl28OtAKi3tRxow3hj104DFdSsKqbe5ApwEI=
Subject key identifier: 9F:C9:7A:C9:82:99:70:5D:A4:DB:43:F5:74:72:27:88:84:86:ED:F1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CAF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/10EB26F8803011F1A66EA3DBCE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:32:16 +0000
ROA not before: Wed 15 Jul 2026 09:32:12 +0000
ROA not after: Wed 31 Dec 2036 09:32:12 +0000
asID: 834
IP address blocks: 165.49.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:32:12 2026 GMT
Not After : Dec 31 09:32:12 2036 GMT
Subject: CN=6a5753a0-5bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:3c:21:f2:93:12:72:91:ca:51:64:93:a2:
6d:f5:6d:70:74:7e:61:94:32:60:0f:b1:93:8a:b8:
7c:f4:1f:6a:f1:93:55:9a:6a:dc:69:c6:3b:6f:78:
b5:d6:51:cf:56:93:70:93:99:23:45:5e:ca:5b:5c:
6a:62:20:9f:5d:3e:93:9c:67:53:01:a3:2b:18:41:
9d:15:cc:67:23:85:87:62:60:88:6c:e1:98:f6:e0:
44:02:2d:e9:79:fa:39:92:ea:6b:37:1c:5b:62:b5:
08:d7:92:65:30:22:5d:73:44:d9:a8:0f:47:29:97:
94:a9:fd:c3:22:33:d1:b9:e7:0c:a3:82:69:b3:99:
48:10:8d:0c:0d:a5:f3:98:dd:2a:9e:60:cb:4e:84:
33:ed:11:c6:9d:b7:43:b6:fb:a7:0f:d9:f5:97:82:
ba:03:5b:d5:21:0c:76:49:e7:22:6b:d4:42:60:6d:
50:75:c7:4f:68:f7:51:35:7b:87:43:70:f6:7e:cb:
87:cc:04:57:1b:b9:82:38:d5:4f:07:a2:d2:89:c3:
6c:c4:7a:58:26:22:68:e3:a3:d6:05:52:1e:69:95:
16:e8:ac:7a:fc:a3:42:1a:97:5b:e9:13:bb:68:29:
87:e7:31:67:77:8f:66:00:11:4d:9d:d6:e3:58:4a:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:7A:C9:82:99:70:5D:A4:DB:43:F5:74:72:27:88:84:86:ED:F1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/10EB26F8803011F1A66EA3DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.233.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:31:ce:dd:ff:e5:5f:52:ab:1b:c7:2a:1c:c9:9d:92:7d:eb:
4c:c0:53:55:9e:0d:c4:3c:00:26:00:23:f4:35:8d:27:2b:a7:
8a:05:95:9b:50:3d:9a:2c:af:5f:15:64:61:0a:e7:6f:c7:04:
ab:d2:4c:3e:73:54:68:7f:ef:aa:cc:96:66:5d:d3:27:82:a2:
d6:a6:1b:2a:c7:7e:eb:ad:72:a7:da:5e:5c:8f:81:77:e7:da:
3d:0b:d4:2b:a5:42:e1:9f:78:e4:25:e4:24:e6:e9:54:05:88:
b4:3f:f1:17:56:15:46:f1:89:57:f0:1d:dc:1f:5d:c8:e2:c2:
7a:02:6e:df:bd:60:a3:bc:e6:91:3c:df:da:b6:0f:e4:cc:91:
e9:ef:b7:39:7a:5a:ce:5f:cc:e4:ee:f1:95:50:f2:0f:2f:2b:
5c:df:ed:ba:91:0e:21:e7:39:9c:c1:e1:96:98:be:1c:8e:ed:
a0:4c:6e:88:1d:10:d6:1b:ea:14:96:20:91:84:cb:3d:50:55:
03:9d:51:6b:5c:ff:21:34:74:a1:54:bf:a5:d7:b9:f8:4c:9e:
36:11:37:3f:62:93:84:a8:52:45:35:13:1b:24:58:48:46:5e:
72:5d:61:68:1d:f3:33:44:06:d0:9d:19:19:77:6a:3a:c3:47:
5e:a4:2c:4a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTUwOTMyMTJaFw0zNjEyMzEwOTMyMTJaMBgxFjAU
BgNVBAMTDTZhNTc1M2EwLTViZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClnzwh8pMScpHKUWSTom31bXB0fmGUMmAPsZOKuHz0H2rxk1Waatxpxjtv
eLXWUc9Wk3CTmSNFXspbXGpiIJ9dPpOcZ1MBoysYQZ0VzGcjhYdiYIhs4Zj24EQC
Lel5+jmS6ms3HFtitQjXkmUwIl1zRNmoD0cpl5Sp/cMiM9G55wyjgmmzmUgQjQwN
pfOY3SqeYMtOhDPtEcadt0O2+6cP2fWXgroDW9UhDHZJ5yJr1EJgbVB1x09o91E1
e4dDcPZ+y4fMBFcbuYI41U8HotKJw2zEelgmImjjo9YFUh5plRborHr8o0Ial1vp
E7toKYfnMWd3j2YAEU2d1uNYSt/PAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUn8l6
yYKZcF2k20P1dHIniISG7fEwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzEwRUIyNkY4ODAzMDExRjFBNjZFQTNEQkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMekwDQYJKoZIhvcNAQELBQAD
ggEBAAsxzt3/5V9SqxvHKhzJnZJ960zAU1WeDcQ8ACYAI/Q1jScrp4oFlZtQPZos
r18VZGEK52/HBKvSTD5zVGh/76rMlmZd0yeCotamGyrHfuutcqfaXlyPgXfn2j0L
1CulQuGfeOQl5CTm6VQFiLQ/8RdWFUbxiVfwHdwfXcjiwnoCbt+9YKO85pE839q2
D+TMkenvtzl6Ws5fzOTu8ZVQ8g8vK1zf7bqRDiHnOZzB4ZaYvhyO7aBMbogdENYb
6hSWIJGEyz1QVQOdUWtc/yE0dKFUv6XXufhMnjYRNz9ik4SoUkU1ExskWEhGXnJd
YWgd8zNEBtCdGRl3ajrDR16kLEo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:41:48 2026 by rpki-client