Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BFDFF446802F11F1ACD5C2D7CE1D38B0.roa
File: BFDFF446802F11F1ACD5C2D7CE1D38B0.roa (raw, json)
Hash identifier: VLxsZHM4pi7541dQtMAdpIlIUh2UjqxC+4Cei/UqwjE=
Subject key identifier: A2:FC:37:C3:60:9B:45:2C:DF:14:B2:2A:57:E2:AE:C2:CD:62:DF:AD
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0CAC
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BFDFF446802F11F1ACD5C2D7CE1D38B0.roa
Signing time: Wed 15 Jul 2026 09:30:00 +0000
ROA not before: Wed 15 Jul 2026 09:29:56 +0000
ROA not after: Wed 31 Dec 2036 09:29:56 +0000
asID: 834
IP address blocks: 165.49.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3244 (0xcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 15 09:29:56 2026 GMT
Not After : Dec 31 09:29:56 2036 GMT
Subject: CN=6a575318-ec26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:51:e5:2a:6d:b9:33:ac:a6:3a:34:3c:2a:
57:34:dc:45:eb:84:56:69:9e:7c:a9:2c:2c:2e:9d:
25:da:ff:f9:20:a2:5f:14:02:02:40:8f:a6:28:a2:
0b:83:4f:05:6b:37:82:26:f9:82:7e:1e:43:5b:e4:
8a:9d:22:e2:13:5c:ef:9d:33:2d:5d:db:95:c4:25:
07:2d:c7:8c:5e:a2:70:e4:64:b7:9e:f1:98:1d:ab:
2e:54:eb:46:1c:f7:84:61:1a:94:9f:80:8a:b0:a3:
12:d3:2c:72:8f:fe:c4:27:27:61:35:a0:5d:0d:44:
d4:b9:8a:dd:3a:d5:40:4a:70:00:ba:99:7f:05:d0:
36:9d:e7:4a:dc:86:39:46:a3:74:14:6b:a7:c9:6f:
12:f7:30:b8:d6:5d:d3:7f:72:39:43:a5:87:e3:2f:
c4:f0:e4:24:74:96:3c:d0:5a:8a:6f:99:7e:03:f0:
d6:cd:34:3e:92:1e:48:97:77:16:35:44:c8:67:52:
61:f2:1e:cd:13:cd:21:60:a3:3d:b6:d5:c4:5f:ad:
6b:e8:49:18:07:ca:50:2a:a3:ad:94:ff:7c:a0:a4:
54:c1:c3:8f:b4:b8:27:64:26:3c:8c:50:4e:65:dc:
61:d2:45:4c:ba:2b:e3:33:64:e3:85:8b:78:bb:b8:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:37:C3:60:9B:45:2C:DF:14:B2:2A:57:E2:AE:C2:CD:62:DF:AD
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BFDFF446802F11F1ACD5C2D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.250.0/24
Signature Algorithm: sha256WithRSAEncryption
23:39:05:42:7c:76:07:09:bb:b4:2f:13:5a:70:c6:12:64:3c:
b5:70:bd:0a:c0:37:3f:47:e1:8d:5b:a4:3c:01:6f:ae:62:c2:
e9:c4:5f:1e:7d:a1:3f:72:5b:50:05:1a:3d:ce:a6:1c:25:21:
f5:f0:d6:be:b1:1a:dc:25:1b:31:e3:39:ab:c6:e4:5d:1c:ab:
f9:b1:58:0e:b4:fa:ef:4d:30:6f:9f:03:00:99:b7:db:a2:d2:
5b:c6:c6:1f:73:66:a3:89:d9:22:89:9b:b2:dc:98:b2:81:65:
22:53:f3:ca:78:7b:38:45:03:6b:d2:43:f9:cb:a5:3c:58:b7:
38:93:da:2b:59:3f:7e:8b:a3:70:a3:59:97:de:92:3a:0c:7f:
29:c4:40:b5:f2:1f:6a:a0:a0:a3:c2:8d:50:32:05:01:f5:85:
5a:a5:f8:0c:5b:84:7d:a0:b3:92:34:5d:d1:4b:b3:c1:d1:8e:
db:c8:f5:61:30:48:6a:b9:4c:f5:c3:7a:46:5f:d0:c9:22:2d:
71:53:24:02:2f:cc:47:a5:a3:0a:cc:82:95:d9:63:e5:9b:29:
d0:27:25:bb:75:63:55:f8:54:f2:46:84:31:3b:79:08:37:27:
ff:d9:6e:dd:95:74:91:de:4f:92:c3:d7:6f:fe:99:93:c8:75:
5d:c4:85:ee
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MTUwOTI5NTZaFw0zNjEyMzEwOTI5NTZaMBgxFjAU
BgNVBAMTDTZhNTc1MzE4LWVjMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSk1HlKm25M6ymOjQ8Klc03EXrhFZpnnypLCwunSXa//kgol8UAgJAj6Yo
oguDTwVrN4Im+YJ+HkNb5IqdIuITXO+dMy1d25XEJQctx4xeonDkZLee8Zgdqy5U
60Yc94RhGpSfgIqwoxLTLHKP/sQnJ2E1oF0NRNS5it061UBKcAC6mX8F0Dad50rc
hjlGo3QUa6fJbxL3MLjWXdN/cjlDpYfjL8Tw5CR0ljzQWopvmX4D8NbNND6SHkiX
dxY1RMhnUmHyHs0TzSFgoz221cRfrWvoSRgHylAqo62U/3ygpFTBw4+0uCdkJjyM
UE5l3GHSRUy6K+MzZOOFi3i7uPmXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUovw3
w2CbRSzfFLIqV+Kuws1i360wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0JGREZGNDQ2ODAyRjExRjFBQ0Q1QzJEN0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMfowDQYJKoZIhvcNAQELBQAD
ggEBACM5BUJ8dgcJu7QvE1pwxhJkPLVwvQrANz9H4Y1bpDwBb65iwunEXx59oT9y
W1AFGj3OphwlIfXw1r6xGtwlGzHjOavG5F0cq/mxWA60+u9NMG+fAwCZt9ui0lvG
xh9zZqOJ2SKJm7LcmLKBZSJT88p4ezhFA2vSQ/nLpTxYtziT2itZP36Lo3CjWZfe
kjoMfynEQLXyH2qgoKPCjVAyBQH1hVql+AxbhH2gs5I0XdFLs8HRjtvI9WEwSGq5
TPXDekZf0MkiLXFTJAIvzEelowrMgpXZY+WbKdAnJbt1Y1X4VPJGhDE7eQg3J//Z
bt2VdJHeT5LD12/+mZPIdV3Ehe4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:28 2026 by rpki-client