Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BE120D6C802E11F19F9B7CD3CE1D38B0.roa
File: BE120D6C802E11F19F9B7CD3CE1D38B0.roa (raw, json)
Hash identifier: 1BSzXSHBdB46zlwlz22RcUQZ2fYaaluyAqvhS+AqZx8=
Subject key identifier: F0:89:28:3B:DD:D3:48:D7:45:73:17:70:02:A4:65:B6:5D:C5:D0:40
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CA9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BE120D6C802E11F19F9B7CD3CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:22:47 +0000
ROA not before: Wed 15 Jul 2026 09:22:43 +0000
ROA not after: Wed 31 Dec 2036 09:22:43 +0000
asID: 834
IP address blocks: 165.49.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3241 (0xca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:22:43 2026 GMT
Not After : Dec 31 09:22:43 2036 GMT
Subject: CN=6a575167-e241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:c2:85:67:9c:ff:f9:67:5e:36:6f:49:31:
2f:e0:08:ee:b4:bf:71:9a:5b:50:74:e5:8d:7d:b9:
05:b2:1b:46:df:59:e1:71:a6:29:7c:b8:db:eb:74:
62:21:b0:bf:26:55:99:67:37:27:6b:34:96:ed:ad:
26:50:35:af:74:a1:9f:bf:01:58:ea:11:cd:ef:01:
66:cd:90:89:14:19:65:34:20:0b:41:e9:44:7b:d7:
40:21:11:96:5c:1f:e1:74:f6:fa:2c:ed:b4:57:1c:
b7:b6:91:af:45:ea:0e:59:be:66:bc:ea:ff:98:b8:
2a:08:8f:a2:82:ec:2c:9d:b5:af:82:73:49:3a:e5:
46:e4:06:6e:a2:2f:6c:76:c2:cd:e9:c6:39:e2:af:
ea:88:f8:6a:90:bb:24:68:34:d9:6e:15:fd:01:78:
02:2a:19:cb:b8:53:5b:45:8b:7d:3e:8b:59:bd:7e:
f5:9d:80:8d:ff:96:d9:97:a8:96:15:44:51:34:80:
24:51:1e:63:3a:bc:15:cf:73:16:b2:5f:54:30:69:
47:ba:29:21:8e:54:23:0e:b7:8c:90:be:43:fe:27:
70:30:51:1b:28:a5:46:3f:24:9d:dc:e8:e8:6e:5d:
75:e2:e7:3d:c1:14:40:51:93:78:5a:36:b5:b4:e7:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:28:3B:DD:D3:48:D7:45:73:17:70:02:A4:65:B6:5D:C5:D0:40
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BE120D6C802E11F19F9B7CD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:1d:e7:71:b3:da:9d:2b:92:9c:8d:cb:10:59:1c:e7:b2:97:
41:8e:14:b6:78:63:38:35:41:29:27:bb:73:1d:c5:74:4f:ff:
7f:6c:71:3a:d7:cc:cc:44:dd:a0:fa:00:d0:42:8e:1c:5a:8f:
40:83:04:f8:fa:b0:35:81:48:fa:1e:e7:6e:4f:3d:c3:ed:3b:
b5:8f:8d:1d:e6:fa:e6:cb:6a:88:2b:eb:e6:33:21:f4:ae:2b:
68:2a:6c:d8:c9:df:01:19:41:8b:fc:a3:1a:e0:0f:8d:22:47:
2d:1d:6b:45:47:50:0d:17:55:0f:da:0d:59:0f:0b:91:16:85:
e5:24:cb:e1:f6:f0:96:8b:f9:db:a2:23:db:6d:f2:42:5e:4e:
39:4c:df:1f:5b:b8:91:84:2f:64:4f:3b:a0:85:2a:08:91:0a:
a1:ae:96:52:f9:bc:63:86:58:d7:fe:7a:81:c1:98:79:05:37:
22:9c:13:2a:54:c2:7b:87:63:15:6a:ee:51:6c:56:b8:75:31:
7b:92:67:ad:f8:bf:a6:db:52:34:63:f8:87:8b:19:0a:4c:95:
85:12:d2:b1:bf:c8:72:f4:3f:d4:bc:fb:c3:72:d2:00:e8:82:
6b:86:0c:16:26:4f:15:11:45:0f:be:5d:03:3d:83:fb:0d:0c:
3d:ad:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:48 2026 by rpki-client