Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/60AE24B47A4111F19D9062F9CE1D38B0.roa
File: 60AE24B47A4111F19D9062F9CE1D38B0.roa (raw, json)
Hash identifier: O9vmDG4xqsE3n8w/OyYCi9xsgjpQWM3V5pmH+ztkrH4=
Subject key identifier: B2:75:CF:D7:47:6C:06:38:75:84:2D:9D:7A:B2:D8:8D:65:7B:6E:ED
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C52
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/60AE24B47A4111F19D9062F9CE1D38B0.roa
Signing time: Tue 07 Jul 2026 20:21:04 +0000
ROA not before: Tue 07 Jul 2026 20:20:58 +0000
ROA not after: Wed 31 Dec 2036 20:20:58 +0000
asID: 834
IP address blocks: 165.49.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 7 20:20:58 2026 GMT
Not After : Dec 31 20:20:58 2036 GMT
Subject: CN=6a4d5fb0-f850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:40:2d:b4:98:66:51:93:30:14:3f:4e:1e:
54:ee:74:66:cf:5c:90:08:57:e1:39:75:69:f1:7d:
99:2a:c6:23:4f:ec:3f:53:a2:24:4c:da:17:6c:87:
7b:74:be:74:90:db:79:1b:89:01:fb:70:5b:5a:22:
de:ee:70:e9:1e:2d:a3:e7:96:ef:c9:1a:7d:b3:13:
2a:f4:dd:32:a0:37:ce:ea:99:35:dc:5c:67:c6:ae:
4d:66:e0:33:76:21:d5:50:02:7f:56:9f:13:d6:b1:
73:41:3d:99:d3:31:f9:e4:31:8b:3e:7c:ab:6b:b8:
81:57:16:d4:67:c4:8b:93:ae:a1:68:6e:e6:d2:0d:
34:f2:70:6a:fb:25:b4:ff:98:5f:be:15:a9:66:08:
c0:50:94:5f:cf:3e:66:11:c7:10:9b:a2:88:44:f1:
08:f9:49:7e:06:7e:47:e2:e4:bc:f1:e8:2d:b0:11:
4c:84:6e:e7:f7:64:fd:d2:f4:ae:29:1a:84:61:00:
cd:0d:97:ce:03:dc:93:0e:0d:97:9c:e3:f0:24:8d:
64:8f:53:12:90:a2:3c:14:ca:1b:ae:c4:4f:fe:70:
af:a0:e8:f3:c2:a6:ad:7e:37:cd:57:1a:95:d7:02:
cc:3d:90:10:37:85:98:57:d8:6f:5a:24:e2:46:ec:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:CF:D7:47:6C:06:38:75:84:2D:9D:7A:B2:D8:8D:65:7B:6E:ED
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/60AE24B47A4111F19D9062F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:79:46:e4:df:f2:76:37:95:7d:42:7d:b3:85:3c:ea:20:b1:
99:05:67:37:87:ec:17:e7:e5:57:1f:12:09:d3:a5:38:ff:c2:
ae:94:d3:cb:de:b2:c0:b3:a7:e7:70:3d:e4:31:7f:78:b9:51:
94:45:0f:cb:10:02:91:84:6a:ee:25:e7:07:cb:f2:e3:59:aa:
4b:d3:23:f4:68:f6:07:3b:15:df:58:3e:62:fa:f2:e0:e9:03:
de:9e:68:f9:50:04:4e:8b:97:97:e4:c4:0e:b5:90:87:81:90:
24:6e:54:66:1e:7a:67:b6:5c:ce:a5:6f:0a:b1:54:74:30:5c:
e3:00:fe:aa:8e:d5:0a:15:b6:3b:63:71:e4:64:25:55:6f:42:
e8:bc:82:c5:89:7c:1c:cb:fe:ba:75:6a:72:3a:13:54:dc:4b:
61:0f:a1:e4:eb:ae:0c:20:eb:6c:65:24:1d:68:5e:2f:2c:80:
ce:4e:f6:70:db:c0:75:f9:06:28:c9:a6:49:94:16:93:0c:3b:
3b:80:f7:b5:54:ac:0f:ef:14:3f:df:b7:1c:67:89:64:4e:87:
27:1d:ca:4e:bf:db:a9:c3:fb:bb:b6:72:1c:01:0b:1c:0e:06:
a9:93:55:f2:d7:35:39:55:21:bd:d2:be:9a:e4:68:14:f4:4b:
4a:0c:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:39 2026 by rpki-client