Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/BC91F744A83F11F090E6C7A5DAE4EC9C.roa
File: BC91F744A83F11F090E6C7A5DAE4EC9C.roa (raw, json)
Hash identifier: Elm2i50rmkaGMEnrw4x6Jh8AjBNyfQZZJ8St5A5jh94=
Subject key identifier: 39:93:C9:CB:4B:52:B5:C2:B8:6D:25:CA:8A:B7:29:59:B4:86:AD:BF
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 03E7
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/BC91F744A83F11F090E6C7A5DAE4EC9C.roa
Signing time: Mon 13 Oct 2025 14:20:15 +0000
ROA not before: Mon 13 Oct 2025 14:20:08 +0000
ROA not after: Tue 31 Dec 2030 14:20:08 +0000
asID: 15964
IP address blocks: 165.210.16.0/20 maxlen: 20
165.210.16.0/22 maxlen: 22
165.210.32.0/24 maxlen: 24
165.210.33.0/24 maxlen: 24
165.211.21.0/24 maxlen: 24
165.211.22.0/24 maxlen: 24
165.211.23.0/24 maxlen: 24
165.211.24.0/24 maxlen: 24
165.211.25.0/24 maxlen: 24
165.211.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Oct 13 14:20:08 2025 GMT
Not After : Dec 31 14:20:08 2030 GMT
Subject: CN=68ed0a9f-b20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:1f:0d:15:6d:be:4c:d9:03:c0:32:1f:7f:
d4:81:32:07:35:ba:af:25:fa:3e:2d:d6:69:8a:10:
1f:e8:28:05:0e:6a:e9:d7:37:76:ec:6d:12:06:60:
53:0b:01:eb:63:f8:8e:34:a2:c1:79:59:8a:61:81:
34:3f:03:98:a9:c8:1e:08:5a:63:9a:e0:b5:c3:79:
98:f4:e5:f3:46:5b:29:0a:91:51:6b:5b:b9:1e:b2:
e9:4c:c6:98:22:09:23:51:b9:41:f3:a2:1d:f7:25:
17:67:fd:e2:24:c9:9d:48:69:ba:f1:b2:c3:67:39:
93:b5:01:f4:4b:70:49:cb:3c:a8:bf:ee:59:85:97:
f7:78:cd:c1:99:39:30:8e:af:06:e2:0a:17:c2:71:
3f:cc:94:12:38:b6:13:3a:ab:ba:0c:e8:b6:a8:47:
9f:f9:cc:4a:9c:cd:8e:43:71:b1:de:74:7e:98:be:
51:bd:ab:98:af:d9:7b:62:3d:76:a2:f2:b1:aa:ad:
5b:95:a8:d3:43:8f:fe:70:ba:78:47:5c:76:f2:a3:
e8:52:9f:40:5f:63:ee:4f:90:6e:14:d8:41:12:4d:
87:7e:7d:de:ea:ca:88:eb:48:71:de:f0:ff:68:ed:
14:8d:7f:e9:77:d7:aa:84:59:29:76:d7:2b:da:9a:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:C9:CB:4B:52:B5:C2:B8:6D:25:CA:8A:B7:29:59:B4:86:AD:BF
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/BC91F744A83F11F090E6C7A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.210.16.0-165.210.33.255
165.211.21.0-165.211.26.255
Signature Algorithm: sha256WithRSAEncryption
61:74:cb:0e:32:9d:d8:91:24:07:88:2f:12:b2:3c:d2:8c:74:
fd:f1:c2:8f:4b:2a:67:9b:96:8d:bf:ed:2b:52:fd:ba:b6:d5:
5e:52:ea:b1:5d:c8:1d:01:9e:8c:3f:51:bd:2f:16:b4:01:be:
9b:fe:e2:12:89:99:6e:c1:28:c7:d1:12:d0:ef:a6:50:85:13:
ec:7c:6e:08:11:7e:e8:d6:26:2f:18:dc:82:42:2b:93:79:17:
a5:30:b6:eb:63:eb:da:af:fd:f0:e3:71:08:bf:82:8a:d3:2c:
6c:70:ee:89:a5:e0:06:b6:a9:06:29:ca:9a:28:1e:03:f9:9a:
3a:ca:29:76:cc:91:08:53:15:72:99:05:3c:45:38:40:fe:b2:
41:50:62:d1:48:c8:97:f7:7e:37:7f:b2:3d:cc:3b:79:81:6e:
71:d4:4f:d5:7b:2a:d0:f6:54:1d:63:48:86:33:59:1f:b1:47:
6e:b4:81:b1:d1:3b:10:82:31:69:f5:36:11:4b:5f:a6:6d:90:
27:20:d0:ac:d9:de:37:bf:0d:07:5b:a9:cc:13:39:93:e9:f6:
33:c9:7b:69:d3:9c:35:28:d4:2e:cd:ad:56:51:38:ca:84:f3:
58:5b:61:d5:71:a3:d0:87:a5:1e:b8:64:53:47:d4:e3:3a:7e:
ea:48:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:14 2025 by rpki-client