Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0A80F0A69E0C11F0BC130582DAE4EC9C.roa
File: 0A80F0A69E0C11F0BC130582DAE4EC9C.roa (raw, json)
Hash identifier: EOPjbc4CCp2VPGr5r+G1XA1clH66E4uN9vDBJk5CoYE=
Subject key identifier: CC:02:A3:CE:CB:1A:53:82:18:DD:9F:1B:FF:26:E7:C3:2D:AA:68:DF
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0992
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0A80F0A69E0C11F0BC130582DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 14:45:00 +0000
ROA not before: Tue 30 Sep 2025 14:44:55 +0000
ROA not after: Mon 31 Dec 2035 14:44:55 +0000
asID: 63199
IP address blocks: 165.49.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Sep 30 14:44:55 2025 GMT
Not After : Dec 31 14:44:55 2035 GMT
Subject: CN=68dbecec-2361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:af:f7:84:ee:bf:39:6f:56:c6:15:c9:bc:
0f:e1:8b:de:f9:80:30:dc:ac:2a:98:65:04:68:8a:
f4:f8:33:81:66:ee:3e:d5:3f:24:df:a8:34:66:9d:
3c:7e:2f:ce:ed:64:b1:3d:fa:64:a8:d3:35:ad:37:
00:65:85:df:f1:24:cf:7d:0c:26:7c:ff:df:f9:d2:
cb:f9:5e:83:69:eb:a8:23:5f:68:2d:bf:89:9d:10:
ae:54:f3:6b:c7:d0:89:98:ed:12:55:3d:74:26:3e:
ec:67:49:78:38:6d:9b:88:0b:86:ae:65:d3:69:0c:
6d:86:78:f8:54:54:0b:5a:84:04:7e:a1:82:65:e3:
52:34:72:4a:b2:1e:66:e1:aa:49:84:ec:52:f5:29:
58:86:bc:8c:e7:41:e2:d4:75:63:1c:14:4d:19:30:
1a:08:03:9f:15:06:cc:00:0d:76:9f:86:59:41:76:
cd:84:c5:11:62:f0:99:e2:ff:3f:f7:f3:76:01:7d:
a7:e9:62:bd:93:bc:dd:97:f1:62:b9:30:de:17:12:
8a:7e:3e:1a:fb:2d:18:08:ff:54:cb:55:6e:52:49:
41:88:e3:a0:36:39:f8:07:73:8d:fc:06:1c:78:c7:
18:2b:20:38:90:05:8d:cb:7e:2c:12:4e:54:04:67:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:02:A3:CE:CB:1A:53:82:18:DD:9F:1B:FF:26:E7:C3:2D:AA:68:DF
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0A80F0A69E0C11F0BC130582DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:4d:ca:e3:e6:25:e9:1a:87:d7:24:df:ed:bf:93:1c:d1:53:
39:1b:7b:e0:bc:95:0f:3f:b5:94:92:08:1e:21:89:ab:0d:e0:
dc:4b:d6:0d:82:cb:62:fb:ed:24:43:e1:23:b3:a6:0d:73:9a:
8e:e8:f9:c2:e1:08:95:69:11:3a:8a:9b:e3:3b:e8:f4:01:ba:
e2:b8:57:a7:df:06:bf:79:7a:0c:c8:63:2b:55:fe:95:e6:f7:
c6:87:ce:42:46:5a:fe:e4:cf:48:59:cc:17:4c:68:f8:3c:ef:
be:ed:b3:53:08:ad:e8:86:45:3f:0d:cc:2e:b9:5a:85:1e:66:
94:5e:ae:9c:de:56:ff:cf:73:4a:79:85:63:0e:38:92:52:95:
89:41:74:e1:c3:11:43:96:82:8a:76:46:d7:41:b9:96:23:f8:
01:ba:ff:99:88:55:18:fa:cb:28:99:b9:00:83:e7:be:6b:c3:
a8:38:88:52:a8:4a:c6:d9:97:9b:0b:0b:45:ed:e1:b9:27:55:
c4:62:06:db:8c:4e:5a:2e:a7:c7:1c:28:dc:92:9a:b0:48:12:
82:be:be:bf:16:d1:d7:a5:d0:bd:44:4a:e2:06:dd:95:d0:09:
10:f2:7c:fc:57:49:8c:69:56:11:54:b0:6b:49:e3:29:a6:d9:
f3:a3:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:02 2025 by rpki-client