Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/05ADC036534311F089B095E2DAE4EC9C.roa
File: 05ADC036534311F089B095E2DAE4EC9C.roa (raw, json)
Hash identifier: 2eYtF1yd/I92thiMCxI3lfZ3H5CdLR6s5QIlC/3fv84=
Subject key identifier: 84:B8:1F:EE:37:2D:32:D8:6D:C4:65:83:30:E2:CA:09:2C:0D:84:B3
Certificate issuer: /CN=F365FABEAR/serialNumber=5C4E87A13EA6A66B599F00A06536EF47C6FB9AA5
Certificate serial: 02
Authority key identifier: 5C:4E:87:A1:3E:A6:A6:6B:59:9F:00:A0:65:36:EF:47:C6:FB:9A:A5
Authority info access: rsync://rpki.afrinic.net/repository/arin/XE6HoT6mpmtZnwCgZTbvR8b7mqU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/05ADC036534311F089B095E2DAE4EC9C.roa
Signing time: Fri 27 Jun 2025 10:39:38 +0000
ROA not before: Fri 27 Jun 2025 10:39:33 +0000
ROA not after: Fri 26 Jun 2026 10:39:33 +0000
asID: 37453
IP address blocks: 169.159.209.0/24 maxlen: 32
169.159.213.0/24 maxlen: 32
169.159.214.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.crl
rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.mft
rsync://rpki.afrinic.net/repository/arin/XE6HoT6mpmtZnwCgZTbvR8b7mqU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 05:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365FABEAR, serialNumber=5C4E87A13EA6A66B599F00A06536EF47C6FB9AA5
Validity
Not Before: Jun 27 10:39:33 2025 GMT
Not After : Jun 26 10:39:33 2026 GMT
Subject: CN=685e74e9-da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:fb:7d:26:ef:92:52:30:71:60:e5:92:3d:
12:40:85:84:25:1b:1b:55:b2:40:f8:db:ca:61:25:
19:17:36:94:bf:d3:34:74:c5:5d:8e:b0:33:fe:5a:
70:6c:b4:57:7b:67:1c:1a:30:fe:35:9e:36:db:6c:
b0:26:c8:0f:a1:32:7d:13:4b:46:c5:ae:93:9c:10:
4e:c3:c7:5c:20:ab:5a:db:5a:66:62:7f:d0:20:d0:
fb:be:7a:06:6b:0a:18:57:68:ff:94:a9:01:2d:3b:
e6:03:a7:21:ff:3f:7d:cd:18:93:d6:af:76:9b:07:
b0:14:c3:e2:85:fa:99:38:f6:8d:5b:b5:4c:64:d4:
7e:8c:94:1a:de:c9:5f:d9:9b:72:26:d0:20:55:90:
d6:2e:3a:8b:60:e8:4c:60:c1:27:b8:cd:36:79:55:
99:93:2b:7e:b5:51:f8:40:df:19:05:1f:74:42:e8:
17:2b:ee:4b:3c:c8:7f:3a:ae:2f:bb:c1:f5:09:8c:
51:f0:72:e6:e6:cf:63:df:60:8d:6b:6d:d4:6b:f2:
54:88:bb:57:21:5a:45:7e:eb:03:ef:43:20:5f:e5:
1f:e4:50:04:d7:5d:68:83:2e:7b:bd:b0:83:f9:c0:
67:a8:34:8e:c1:06:af:9b:ac:26:94:b7:24:02:23:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:1F:EE:37:2D:32:D8:6D:C4:65:83:30:E2:CA:09:2C:0D:84:B3
X509v3 Authority Key Identifier:
keyid:5C:4E:87:A1:3E:A6:A6:6B:59:9F:00:A0:65:36:EF:47:C6:FB:9A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/XE6HoT6mpmtZnwCgZTbvR8b7mqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XE6HoT6mpmtZnwCgZTbvR8b7mqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/FB8EC466534111F0AF597ADADAE4EC9C/05ADC036534311F089B095E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.159.209.0/24
169.159.213.0-169.159.214.255
Signature Algorithm: sha256WithRSAEncryption
1e:c7:40:9b:b3:db:21:0d:66:96:13:8a:5a:ba:d7:83:be:81:
5c:13:a5:63:05:cf:80:17:dc:f7:1a:0e:4b:58:93:76:0e:17:
b0:b8:e6:1e:55:c3:a2:9d:54:ae:3f:c7:fd:32:b7:95:9d:a7:
aa:fb:3a:61:97:7a:b2:bf:9f:50:6f:7e:52:af:0b:a9:9d:99:
a9:e6:bc:17:7b:a4:db:84:f8:87:9b:f0:47:fa:53:54:26:ec:
aa:13:42:8f:51:c1:d6:89:09:16:5f:e4:d4:17:61:79:22:a7:
16:26:a9:ea:bf:31:b0:d3:26:e9:ab:b1:30:73:96:6f:d4:6a:
b2:8c:f0:dd:db:48:b6:4d:a3:9a:78:43:e9:18:45:2a:23:32:
21:7a:07:74:59:3e:b8:1b:ee:b6:02:23:1c:e3:91:48:51:fd:
33:0f:7b:d9:22:c8:8a:3d:5d:42:a3:76:84:dc:5e:23:d0:b6:
92:88:62:dd:43:84:dc:aa:38:98:62:f8:5a:46:d3:6b:93:01:
71:8e:de:2b:84:da:b9:a5:ad:87:21:9b:36:6e:61:b3:9a:3d:
88:3a:da:7b:96:3f:00:ba:e7:1c:ee:1a:aa:e0:e6:e6:f4:d0:
7c:49:20:bd:eb:41:e9:04:60:dd:eb:33:48:9b:38:c8:30:4f:
92:96:c0:da
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
RkFCRUFSMTEwLwYDVQQFEyg1QzRFODdBMTNFQTZBNjZCNTk5RjAwQTA2NTM2RUY0
N0M2RkI5QUE1MB4XDTI1MDYyNzEwMzkzM1oXDTI2MDYyNjEwMzkzM1owGDEWMBQG
A1UEAxMNNjg1ZTc0ZTktZGE2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAY+30m75JSMHFg5ZI9EkCFhCUbG1WyQPjbymElGRc2lL/TNHTFXY6wM/5a
cGy0V3tnHBow/jWeNttssCbID6EyfRNLRsWuk5wQTsPHXCCrWttaZmJ/0CDQ+756
BmsKGFdo/5SpAS075gOnIf8/fc0Yk9avdpsHsBTD4oX6mTj2jVu1TGTUfoyUGt7J
X9mbcibQIFWQ1i46i2DoTGDBJ7jNNnlVmZMrfrVR+EDfGQUfdELoFyvuSzzIfzqu
L7vB9QmMUfBy5ubPY99gjWtt1GvyVIi7VyFaRX7rA+9DIF/lH+RQBNddaIMue72w
g/nAZ6g0jsEGr5usJpS3JAIjRf0CAwEAAaOCArAwggKsMB0GA1UdDgQWBBSEuB/u
Ny0y2G3EZYMw4soJLA2EszAfBgNVHSMEGDAWgBRcToehPqama1mfAKBlNu9Hxvua
pTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUZBQkUvRkI4RUM0NjY1MzQxMTFGMEFGNTk3QURBREFFNEVDOUMvWEU2SG9U
Nm1wbXRabndDZ1pUYnZSOGI3bXFVLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
WEU2SG9UNm1wbXRabndDZ1pUYnZSOGI3bXFVLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUZBQkUvRkI4RUM0NjY1MzQxMTFGMEFGNTk3QURBREFFNEVD
OUMvMDVBREMwMzY1MzQzMTFGMDg5QjA5NUUyREFFNEVDOUMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAKmf0TAMAwQAqZ/VAwQAqZ/WMA0G
CSqGSIb3DQEBCwUAA4IBAQAex0Cbs9shDWaWE4pauteDvoFcE6VjBc+AF9z3Gg5L
WJN2DhewuOYeVcOinVSuP8f9MreVnaeq+zphl3qyv59Qb35SrwupnZmp5rwXe6Tb
hPiHm/BH+lNUJuyqE0KPUcHWiQkWX+TUF2F5IqcWJqnqvzGw0ybpq7Ewc5Zv1Gqy
jPDd20i2TaOaeEPpGEUqIzIhegd0WT64G+62AiMc45FIUf0zD3vZIsiKPV1Co3aE
3F4j0LaSiGLdQ4TcqjiYYvhaRtNrkwFxjt4rhNq5pa2HIZs2bmGzmj2IOtp7lj8A
uucc7hqq4Obm9NB8SSC960HpBGDd6zNImzjIME+SlsDa
-----END CERTIFICATE-----
Generated at Fri Jul 4 05:53:54 2025 by rpki-client