Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0F0AAC9279B911F0927D4EC1DAE4EC9C.roa
File: 0F0AAC9279B911F0927D4EC1DAE4EC9C.roa (raw, json)
Hash identifier: RTOK2nQuUHY5KnEhV9IsbV1Tj0ngIC8ALn73Xi5KBag=
Subject key identifier: 59:83:44:14:BB:D6:DE:50:B8:43:7F:7A:4E:EF:3F:35:5B:AA:02:DB
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0931
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0F0AAC9279B911F0927D4EC1DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 09:20:18 +0000
ROA not before: Fri 15 Aug 2025 09:20:13 +0000
ROA not after: Mon 31 Dec 2035 09:20:13 +0000
asID: 9304
IP address blocks: 165.49.64.0/24 maxlen: 24
165.49.68.0/24 maxlen: 24
165.49.104.0/24 maxlen: 24
165.49.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 15 09:20:13 2025 GMT
Not After : Dec 31 09:20:13 2035 GMT
Subject: CN=689efbd2-6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:ad:7f:f1:e8:26:63:a4:a4:ca:83:a3:80:
14:a6:f8:c3:3c:ff:52:b6:04:16:b8:55:80:41:9f:
49:db:6f:cb:af:24:2f:12:15:44:97:d7:4f:e2:e5:
ac:34:1f:15:3f:bb:9e:ed:ad:30:32:2e:f6:4a:41:
0a:f4:2d:3d:8c:b6:61:b3:fb:5b:d5:3f:43:ff:63:
9a:c1:7e:cf:d4:8d:93:dc:7c:64:79:1c:ec:f7:cb:
a2:c2:73:6c:ad:6d:0c:53:86:8b:c5:f1:c9:23:90:
48:f1:45:04:ac:29:31:2b:b8:1a:0f:85:98:b8:d7:
a1:2c:9b:ec:3b:3e:fe:dd:92:0f:0b:06:ce:a1:b9:
4c:d5:32:f5:6e:ee:1a:42:20:5e:85:d4:a8:13:48:
8f:66:82:d4:1c:ae:7c:e0:27:f3:7f:09:75:09:9c:
a5:01:61:0d:36:66:07:91:de:2d:01:f9:68:c1:e9:
36:7c:f9:a8:8a:56:1e:75:5b:b4:c9:87:c5:60:01:
d6:72:c9:6e:bc:49:cd:37:c9:62:0f:d3:1b:a4:ad:
1d:1f:cc:49:83:ca:30:77:7e:78:04:82:b6:34:1b:
fb:cf:5a:14:aa:43:44:ed:f9:09:e9:b9:99:7a:0f:
d0:79:fc:b1:01:08:d5:2a:bd:8f:fa:6d:be:69:23:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:44:14:BB:D6:DE:50:B8:43:7F:7A:4E:EF:3F:35:5B:AA:02:DB
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0F0AAC9279B911F0927D4EC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.64.0/24
165.49.68.0/24
165.49.104.0/24
165.49.126.0/24
Signature Algorithm: sha256WithRSAEncryption
31:37:79:2e:83:54:79:e6:5f:f1:e5:c5:68:f2:8c:0d:1b:bc:
48:61:1e:e9:60:73:78:11:55:be:42:ad:1d:40:dd:a0:ba:0e:
34:0f:ce:e0:69:7b:0f:eb:40:6a:45:bb:81:aa:ec:29:2c:56:
f3:5f:5e:e0:de:89:37:66:b6:4a:37:4a:09:e7:bf:5e:31:0a:
e0:c1:91:f1:b5:2b:85:ca:15:63:23:d8:d5:bf:6c:5f:21:1d:
c8:2d:0f:e6:67:64:bb:aa:9d:53:d0:82:55:81:b3:c7:48:30:
56:a4:e9:65:f1:45:d2:33:a3:27:0d:12:82:cc:92:6b:1a:16:
c3:75:e6:e6:a9:3c:d0:d4:84:ae:4e:49:79:bb:3c:2a:1c:a6:
a0:d4:fc:ad:50:50:90:d9:86:82:45:c5:de:e1:9d:a6:7f:c6:
03:64:d8:2f:f8:19:a1:40:50:51:1f:0d:33:d7:01:18:48:87:
5a:45:2c:8d:4c:7d:bf:ed:bd:9d:ee:75:2e:76:48:6f:6a:dc:
b5:6a:76:ed:e9:b6:74:9b:64:fe:c2:6e:ec:4d:25:0f:06:96:
07:37:86:e2:2a:f3:39:7d:e3:26:ec:3a:d4:fc:62:11:2f:ea:
e5:bd:7b:39:8f:d6:f8:92:ab:75:6b:b9:36:c3:89:66:cc:e1:
6c:6a:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:47 2025 by rpki-client