Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/541E95E2748611F0AD2DF0D2DAE4EC9C.roa
File: 541E95E2748611F0AD2DF0D2DAE4EC9C.roa (raw, json)
Hash identifier: +XJa6Hkoc1DFgBz+ry+ob1vgesmqwZt6mzPfrbYt3RM=
Subject key identifier: 8B:44:B1:24:4D:0F:04:86:FD:88:47:3A:AB:17:56:77:62:71:4C:78
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 039B
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/541E95E2748611F0AD2DF0D2DAE4EC9C.roa
Signing time: Fri 08 Aug 2025 18:34:34 +0000
ROA not before: Fri 08 Aug 2025 18:34:28 +0000
ROA not after: Tue 31 Dec 2030 18:34:28 +0000
asID: 15964
IP address blocks: 165.210.38.0/24 maxlen: 24
165.210.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 03:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Aug 8 18:34:28 2025 GMT
Not After : Dec 31 18:34:28 2030 GMT
Subject: CN=6896433a-917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:f6:23:5f:49:38:01:97:b2:94:87:eb:d7:
5b:7b:0b:b8:94:47:cd:7a:a8:d1:9c:54:44:1f:1b:
c6:5e:0f:33:90:2d:31:7c:9e:0d:5d:25:46:0b:51:
f8:43:4c:88:0a:9e:cb:54:5f:05:ae:3c:03:a4:70:
5e:19:80:e4:c7:41:c6:66:9b:7c:f0:f1:a5:15:e3:
e5:6a:aa:08:c5:1b:61:46:a1:41:76:5f:a6:c8:ba:
6c:c5:fb:ec:ce:78:db:94:1a:58:5d:84:9c:31:e2:
ed:fc:55:bf:95:41:0b:4d:23:c9:5b:1c:5e:da:fb:
fc:2a:01:b1:91:ca:38:49:97:46:cd:0a:97:75:a5:
15:87:1e:3c:34:f7:d1:4b:64:68:81:29:d9:a3:5f:
10:22:3b:18:c8:b9:94:f6:dc:49:96:5a:a0:27:89:
d2:3a:9e:6a:d6:56:f4:7e:fd:4b:ac:56:42:6e:10:
4d:f3:9e:1d:cc:a0:a3:6f:37:a7:e1:de:0b:59:4b:
12:4e:f4:eb:e1:b9:af:38:6d:c2:1c:d7:64:44:5b:
56:3a:e4:e4:e4:49:63:d7:e8:9f:3b:5f:31:28:7e:
b6:b4:13:1d:f6:d8:06:09:7f:39:9c:de:1a:d6:af:
2f:2e:ad:49:10:09:7e:1b:de:b9:1a:9e:6e:55:c3:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:B1:24:4D:0F:04:86:FD:88:47:3A:AB:17:56:77:62:71:4C:78
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/541E95E2748611F0AD2DF0D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.210.38.0/23
Signature Algorithm: sha256WithRSAEncryption
97:a7:f7:f3:d1:c8:bd:a2:f6:0b:78:31:2e:f1:03:ac:c7:f4:
3a:1c:d8:4d:6e:ef:ca:fe:5a:dc:87:6f:1c:b7:72:3c:34:90:
dd:29:e0:9b:2b:92:61:01:07:09:cb:b8:e9:06:f2:fe:8a:c3:
35:f0:d2:dc:35:de:18:80:fd:6c:bf:8c:7b:10:e3:55:4b:17:
bb:95:91:26:f6:91:60:bd:15:a4:ee:d4:c8:e7:2f:16:0e:b9:
56:5c:66:c4:1b:93:e3:50:a6:10:3b:e0:68:e4:fb:2b:94:94:
0c:1c:04:0d:8e:02:af:c1:ff:dc:fb:e7:95:1b:9b:85:65:69:
07:be:f2:88:cd:cf:1a:ec:b8:8c:af:df:c1:c4:3f:81:63:ac:
34:95:36:be:fc:ac:aa:68:56:9c:05:fb:6a:3d:b4:99:03:03:
fd:3c:09:07:ff:ba:f3:3e:57:e9:ce:88:05:6f:84:0d:05:e5:
b1:68:b6:db:6c:80:fb:70:0f:dc:7a:ac:eb:58:bf:2c:dc:59:
9e:bf:64:27:fa:fb:3f:91:18:f7:91:89:ca:0e:58:51:8e:15:
d2:a9:6f:a1:3d:40:e2:5e:b5:91:07:99:cd:4d:3c:fc:a0:3c:
f5:af:b9:99:de:6b:6f:fa:7a:e2:59:7a:a0:13:90:47:86:01:
16:d7:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:26 2025 by rpki-client