Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AE6F14CE7A4111F1A1F414FDCE1D38B0.roa
File: AE6F14CE7A4111F1A1F414FDCE1D38B0.roa (raw, json)
Hash identifier: GWNgmGyK3PelwLI2zXaG6c9I6D5UeBsiKGBTUBy9STo=
Subject key identifier: 61:B1:FE:9D:B3:45:94:60:D2:80:32:D3:BB:81:B4:8F:E4:13:40:C1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C55
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AE6F14CE7A4111F1A1F414FDCE1D38B0.roa
Signing time: Tue 07 Jul 2026 20:23:15 +0000
ROA not before: Tue 07 Jul 2026 20:23:10 +0000
ROA not after: Wed 31 Dec 2036 20:23:10 +0000
asID: 834
IP address blocks: 165.49.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 7 20:23:10 2026 GMT
Not After : Dec 31 20:23:10 2036 GMT
Subject: CN=6a4d6032-eee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:20:6e:ad:06:36:0e:a4:75:01:e7:93:6e:5f:
0b:f0:ff:0e:56:09:50:b8:dc:72:47:5d:20:8b:54:
51:67:9a:72:b1:e5:01:fb:9b:f0:81:ff:d8:96:0c:
13:9b:62:29:3d:dd:dc:56:6b:38:41:9b:16:4f:71:
97:c4:49:b3:72:31:29:35:81:36:da:37:d5:a5:cf:
44:74:e1:2e:0c:06:6a:75:90:4c:5c:34:8f:4b:e1:
35:94:f8:3d:46:a3:c7:c5:01:aa:16:ac:dd:7d:e9:
de:1b:26:24:da:6c:d6:92:ec:cb:38:52:86:d7:bb:
2e:d2:16:2a:13:9f:24:6d:0a:43:42:05:0c:fa:4f:
2c:e7:54:a4:bf:ca:95:85:8f:77:84:74:68:fd:68:
bc:c9:9b:e5:55:85:bd:7f:7d:b4:98:a0:58:40:20:
71:2f:96:2d:8d:11:81:47:22:a1:af:fe:66:14:a0:
be:23:90:aa:db:8a:a9:5a:d9:a6:7a:4a:42:29:a8:
4c:77:90:52:b5:2d:7f:c5:72:0f:3d:df:81:ec:86:
31:3e:34:62:ab:53:7a:d5:4b:5a:0d:45:46:e5:53:
c6:c4:49:33:67:35:56:55:18:81:b6:fe:6b:4c:24:
3f:f1:7d:0c:eb:1c:2d:5f:bd:a8:f2:e4:0f:e0:a8:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:FE:9D:B3:45:94:60:D2:80:32:D3:BB:81:B4:8F:E4:13:40:C1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AE6F14CE7A4111F1A1F414FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.225.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3a:23:1b:32:4c:6f:65:fc:e9:e1:bd:64:15:a7:4c:f3:5e:
f6:2f:34:e3:86:19:3a:da:b6:1e:6c:c5:8f:5b:86:82:50:8d:
79:68:cd:33:05:fc:cc:1a:fb:6a:df:b2:65:17:ab:ed:f8:90:
d0:a8:cf:22:7f:a7:0a:29:b4:0d:73:ca:ad:0e:a3:f4:5f:7a:
c5:f8:3c:d3:12:b6:45:8e:61:c2:a1:69:1e:6a:01:9b:46:42:
9b:c0:cc:33:6e:d7:30:a2:69:82:85:e0:d6:01:65:91:57:89:
77:cc:1d:13:e8:cc:88:bc:38:04:e2:de:28:66:93:f3:da:1d:
86:58:3b:a4:ef:80:52:89:65:35:93:15:4d:b0:aa:40:52:ff:
5d:da:7d:f6:fb:9c:2f:cc:c1:4d:8c:d0:e5:0b:82:41:d0:1c:
21:8f:4c:c0:19:b9:5b:92:7d:55:8a:4b:e4:7c:c1:5a:30:94:
eb:80:a1:87:24:71:ae:07:92:d2:7d:83:9d:10:00:e5:d2:32:
76:8e:6e:7b:62:9a:6d:be:ae:53:05:dd:75:67:e8:2b:e0:f6:
9c:95:ff:42:34:81:c6:57:17:30:0a:a6:a6:73:32:39:15:f1:
9e:1b:7a:31:17:e0:76:89:d6:2e:0a:ff:22:23:b8:8c:29:bf:
11:97:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:17 2026 by rpki-client