Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F7D98EAA7A4111F182EF8AFDCE1D38B0.roa
File: F7D98EAA7A4111F182EF8AFDCE1D38B0.roa (raw, json)
Hash identifier: 1TGDpS0gyew+fVs3PaHqCDJt056oAb11k3dGPXEjSy4=
Subject key identifier: 5F:61:FB:29:32:95:D9:5E:EE:B3:33:3C:E1:75:BA:2C:F8:22:6F:BC
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0C58
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F7D98EAA7A4111F182EF8AFDCE1D38B0.roa
Signing time: Tue 07 Jul 2026 20:25:18 +0000
ROA not before: Tue 07 Jul 2026 20:25:12 +0000
ROA not after: Wed 31 Dec 2036 20:25:12 +0000
asID: 834
IP address blocks: 165.49.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3160 (0xc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 7 20:25:12 2026 GMT
Not After : Dec 31 20:25:12 2036 GMT
Subject: CN=6a4d60ae-64cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:c3:c2:c0:e6:41:59:cf:89:df:d4:48:d1:
91:e9:e7:6e:24:ba:cc:c5:dd:1d:7b:4f:f7:06:43:
8f:b4:bb:74:ae:21:f1:ef:74:1a:a8:d8:86:db:e9:
2f:ff:5c:b4:21:11:6d:fd:d8:bf:90:f7:9b:05:6c:
dd:03:1e:73:04:d9:9e:f9:a8:e5:e2:aa:7f:9c:0b:
77:c6:2f:a9:ff:f8:b6:47:4d:fb:3a:43:a7:a7:d1:
5a:2c:0b:76:c5:02:d5:81:36:9f:f4:97:85:d3:13:
f6:00:09:be:ec:2a:e8:0f:ce:a0:4e:6f:01:bf:cf:
c6:52:14:c7:fa:3a:4d:5e:b7:08:8e:2d:5b:dd:e1:
ba:52:d0:81:4d:17:8b:fc:64:96:38:7a:a9:98:64:
84:71:a8:82:e7:25:03:5a:e5:4e:5c:8a:00:a6:00:
33:02:7b:db:a1:76:9e:91:d4:bc:1b:07:15:4d:eb:
2b:79:cd:c2:91:c7:28:a6:b8:64:94:61:8f:2d:20:
eb:16:e1:24:fc:19:01:83:70:8b:6c:a0:9c:e9:41:
6a:d1:57:70:65:90:ec:e3:d6:9a:b3:20:57:c1:7e:
44:b9:79:02:f2:a1:69:e4:85:87:af:64:18:fb:54:
f5:b8:6d:8d:1e:9a:04:fa:2e:37:21:4a:d2:8a:f5:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:FB:29:32:95:D9:5E:EE:B3:33:3C:E1:75:BA:2C:F8:22:6F:BC
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/F7D98EAA7A4111F182EF8AFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:40:4d:95:27:9b:51:da:ac:37:43:b3:d1:ac:72:29:96:8a:
ef:17:6b:bf:45:ed:00:3e:4c:b3:e2:00:98:91:22:b9:8f:30:
63:79:f2:46:f7:2e:31:54:50:d9:ca:a3:ee:53:05:13:90:5a:
87:11:43:56:12:7a:b8:eb:d0:b5:c6:d1:50:fa:6e:1b:6e:67:
e4:cb:08:3b:1b:b2:ee:b0:8f:65:26:ba:73:6c:47:f6:b7:02:
48:b3:47:9a:36:a4:7c:8f:fe:a0:c7:dc:22:62:e8:3e:02:92:
6a:0b:eb:1c:49:f3:86:11:1d:2e:cd:e3:60:f0:3c:6a:aa:5c:
96:5d:33:bb:db:c5:15:e9:3e:37:3b:29:3b:b2:2a:dc:35:31:
2c:80:b1:51:81:17:f2:a1:ec:11:89:3c:0f:14:0d:e3:c4:90:
c9:93:68:74:58:ea:95:4b:a2:a9:ba:b9:74:bf:01:dc:e9:6c:
d0:65:ef:68:aa:54:08:cf:13:d6:be:a1:b5:74:be:eb:e3:ad:
79:1e:1c:78:b4:9b:65:8a:b2:a3:cc:bb:f7:18:d4:f1:99:ee:
0c:04:5b:ec:64:a2:b2:e8:8a:6d:84:0e:2a:cf:55:93:d9:92:
d5:c0:54:5a:7b:93:59:fc:92:f9:6b:da:ca:13:28:de:41:f2:
34:c8:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:15 2026 by rpki-client