Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A80CFF5E836C11F1B3A001D3CE1D38B0.roa
File: A80CFF5E836C11F1B3A001D3CE1D38B0.roa (raw, json)
Hash identifier: nlqUN7zqXmvxcqiIPydahKMGZrcku+6l8PGA4QFgRoU=
Subject key identifier: 22:4D:2E:DA:E8:87:EE:A5:15:31:09:BA:4F:2E:8E:E0:9F:0A:41:09
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0D02
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A80CFF5E836C11F1B3A001D3CE1D38B0.roa
Signing time: Sun 19 Jul 2026 12:23:33 +0000
ROA not before: Sun 19 Jul 2026 12:23:29 +0000
ROA not after: Wed 31 Dec 2036 12:23:29 +0000
asID: 834
IP address blocks: 165.49.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 19 12:23:29 2026 GMT
Not After : Dec 31 12:23:29 2036 GMT
Subject: CN=6a5cc1c5-8d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:9a:14:33:08:a7:e8:b6:99:71:f5:7a:00:
2b:31:af:c9:cd:ab:71:3e:47:be:fd:d6:03:04:3e:
60:cf:c7:79:8f:d4:ee:b6:52:92:a6:b6:00:bc:0e:
35:5d:85:45:d2:29:ed:95:dc:63:0a:64:15:a5:97:
a3:41:3a:ab:96:87:37:c2:2e:3a:31:af:c9:5a:8c:
cb:73:94:1d:4e:50:0e:0a:95:3d:d7:01:3a:36:96:
4b:3b:b0:7b:0d:61:01:3b:a0:1a:4e:cb:06:10:66:
10:52:07:4f:26:4b:ec:25:85:9f:9b:79:29:d3:b5:
20:62:5b:39:bd:3f:4b:4d:79:16:ea:4f:86:08:c6:
cb:92:88:a4:25:75:d0:4b:c3:8c:2c:fc:06:a9:cc:
b7:3e:5a:c7:8a:6e:81:3e:77:5d:5b:51:47:46:c0:
bc:48:f1:fd:88:79:da:3c:a2:e6:6c:6d:c7:ff:df:
f1:49:3f:1e:88:8c:21:ac:ec:3a:01:19:46:b5:6f:
ef:64:c4:4c:55:cc:1e:90:c2:60:01:fa:d0:16:be:
4e:a7:fe:20:fe:8a:a0:f1:95:30:b8:ad:2e:84:b1:
ac:ab:5d:5d:f6:2c:66:8c:70:6c:18:03:eb:d0:0a:
05:8c:28:4c:a5:6f:5e:07:81:6f:bc:08:3c:5d:0b:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:2E:DA:E8:87:EE:A5:15:31:09:BA:4F:2E:8E:E0:9F:0A:41:09
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A80CFF5E836C11F1B3A001D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:27:6e:1b:66:13:8b:97:e5:52:9a:67:32:bf:c6:6e:9d:02:
f3:67:08:46:b8:2b:a1:0c:82:2e:ec:73:15:3b:85:d5:a6:45:
d6:1f:6a:f1:f2:d1:26:30:b9:35:eb:d8:53:3b:d4:a3:ff:2e:
2b:e1:ba:3d:80:c1:4c:d6:8d:6a:af:a9:ef:f2:d1:3f:3d:35:
b4:45:0b:3c:52:ad:d8:75:29:b5:1b:31:ae:61:47:28:78:93:
5e:6a:b0:ca:19:6f:65:e0:88:ed:cb:29:54:3e:66:25:d7:bf:
b9:f4:59:59:e2:6e:bd:8d:46:90:01:06:65:e1:a0:28:6b:29:
60:07:ca:b1:04:0e:d0:9c:8b:6f:a3:d3:7c:fa:72:67:ac:06:
8a:78:98:50:24:5a:06:47:5e:c6:d2:3e:0d:78:60:4f:ef:b4:
5e:ab:2e:23:e0:58:34:01:f9:81:60:73:9a:ae:a9:d7:dc:5f:
9e:77:55:bb:f0:29:c5:67:5d:61:7d:f7:ae:e2:72:f3:51:f1:
fa:71:a2:91:a7:6e:60:1b:bf:00:e5:46:9d:f7:e3:30:0d:a4:
5b:9a:54:e7:48:17:b7:86:e2:d0:a1:5a:0a:96:5c:58:98:8f:
d4:b7:ac:be:a7:ff:63:e1:00:06:c8:2d:1b:c8:64:2d:0e:ee:
85:4f:8c:a2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTkxMjIzMjlaFw0zNjEyMzExMjIzMjlaMBgxFjAU
BgNVBAMTDTZhNWNjMWM1LThkOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGEZoUMwin6LaZcfV6ACsxr8nNq3E+R7791gMEPmDPx3mP1O62UpKmtgC8
DjVdhUXSKe2V3GMKZBWll6NBOquWhzfCLjoxr8lajMtzlB1OUA4KlT3XATo2lks7
sHsNYQE7oBpOywYQZhBSB08mS+wlhZ+beSnTtSBiWzm9P0tNeRbqT4YIxsuSiKQl
ddBLw4ws/AapzLc+WseKboE+d11bUUdGwLxI8f2Iedo8ouZsbcf/3/FJPx6IjCGs
7DoBGUa1b+9kxExVzB6QwmAB+tAWvk6n/iD+iqDxlTC4rS6EsayrXV32LGaMcGwY
A+vQCgWMKEylb14HgW+8CDxdCxl7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUIk0u
2uiH7qUVMQm6Ty6O4J8KQQkwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0E4MENGRjVFODM2QzExRjFCM0EwMDFEM0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMf0wDQYJKoZIhvcNAQELBQAD
ggEBAMAnbhtmE4uX5VKaZzK/xm6dAvNnCEa4K6EMgi7scxU7hdWmRdYfavHy0SYw
uTXr2FM71KP/Livhuj2AwUzWjWqvqe/y0T89NbRFCzxSrdh1KbUbMa5hRyh4k15q
sMoZb2XgiO3LKVQ+ZiXXv7n0WVnibr2NRpABBmXhoChrKWAHyrEEDtCci2+j03z6
cmesBop4mFAkWgZHXsbSPg14YE/vtF6rLiPgWDQB+YFgc5quqdfcX553VbvwKcVn
XWF9967icvNR8fpxopGnbmAbvwDlRp334zANpFuaVOdIF7eG4tChWgqWXFiYj9S3
rL6n/2PhAAbILRvIZC0O7oVPjKI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:59 2026 by rpki-client