Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/30E1FE12A36511F09C462CBBDAE4EC9C.roa
File: 30E1FE12A36511F09C462CBBDAE4EC9C.roa (raw, json)
Hash identifier: IGbqX5D5gUHKh2mdGEwDIbF4kqA4Xmhcc0VKgu4AfmU=
Subject key identifier: 71:E5:31:C2:6B:D9:B6:D9:8B:BD:A8:82:73:9A:C0:23:8C:E7:D3:B6
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 03DF
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/30E1FE12A36511F09C462CBBDAE4EC9C.roa
Signing time: Tue 07 Oct 2025 10:05:46 +0000
ROA not before: Tue 07 Oct 2025 10:05:39 +0000
ROA not after: Tue 31 Dec 2030 10:05:39 +0000
asID: 15964
IP address blocks: 165.210.0.0/15 maxlen: 15
165.210.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Oct 7 10:05:39 2025 GMT
Not After : Dec 31 10:05:39 2030 GMT
Subject: CN=68e4e5fa-4e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:11:a4:b4:cb:7b:f1:df:20:a4:88:09:65:
da:c5:55:d0:11:7e:b7:eb:60:1a:48:12:8e:c3:83:
12:25:b7:54:bd:59:90:c7:7a:f4:58:b8:df:0f:e2:
2d:f7:4f:07:e5:73:52:a1:94:31:39:0d:24:c5:79:
66:89:33:3e:ad:ff:c4:b2:db:42:42:bd:70:4d:ae:
96:f0:82:20:a7:38:ee:fd:84:31:fb:c1:8f:21:df:
c5:a4:d3:3b:98:9b:3c:cf:d2:ad:38:ca:c9:dd:23:
7a:10:91:1d:e3:d8:f1:ee:b9:e6:b3:f0:6d:9f:18:
05:da:76:0d:2c:6b:83:a9:29:55:90:b1:31:c9:d7:
40:13:d8:f4:c1:6c:c8:e1:ef:c7:7b:c0:63:99:6e:
61:a5:9c:e5:38:ae:cd:51:d0:12:af:3a:74:e2:4d:
13:7b:60:38:99:a8:b8:ca:64:fc:c9:8c:01:9e:dd:
ee:15:5a:ad:32:75:66:2b:a2:0b:c6:be:de:dc:b4:
39:01:c8:bd:8d:60:36:f2:05:62:00:70:2e:25:19:
9b:b2:4c:6a:7c:d6:e8:02:93:09:bd:19:60:bc:2e:
16:52:41:0d:7f:13:7d:7d:b2:73:2e:33:e7:59:36:
b1:ae:fd:32:19:6b:7f:b5:30:2c:68:ef:26:22:4e:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:31:C2:6B:D9:B6:D9:8B:BD:A8:82:73:9A:C0:23:8C:E7:D3:B6
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/30E1FE12A36511F09C462CBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a2:8f:61:cc:21:98:e8:1b:1b:91:3b:28:90:d2:fe:f3:c1:ac:
6f:26:c1:29:4b:49:0f:95:45:3f:15:83:64:e2:72:2b:c6:2b:
3b:54:2d:55:1f:30:b8:12:93:fc:3a:db:a8:19:f3:2f:9c:73:
54:94:dd:a5:90:17:3f:99:87:53:2d:21:ca:3a:2e:0a:8e:40:
67:0c:26:ec:74:d4:30:3d:46:82:69:7a:f7:b6:a5:bb:2a:07:
2d:3e:e7:72:64:91:bd:16:83:eb:70:84:bc:7f:4d:95:cd:36:
be:68:f2:41:1d:31:35:2b:41:7d:5e:de:22:7c:be:4a:e0:4c:
3d:a7:ea:ba:53:9b:79:57:2f:15:a7:f7:4c:e7:c8:68:a5:3f:
48:5c:e0:5f:d4:d0:d4:0f:f5:41:32:d3:37:67:cb:e4:d6:d3:
bb:b7:64:8e:53:c3:20:92:cb:ab:fc:81:df:76:8a:9c:3e:c5:
50:69:b4:2b:31:d0:1d:0f:17:dd:4f:90:f6:2c:13:31:32:cf:
e9:19:43:4e:23:f3:fa:d3:b5:1a:db:3a:49:21:93:24:72:7f:
df:2f:5c:1d:94:00:a9:d2:d5:da:02:0e:98:f7:6d:b5:c9:24:
58:35:0c:a0:53:d5:8f:35:bd:12:54:85:75:cd:c3:41:31:3d:
a0:61:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:53 2025 by rpki-client