Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/15FD165A795211F0B2170093DAE4EC9C.roa
File: 15FD165A795211F0B2170093DAE4EC9C.roa (raw, json)
Hash identifier: +6CmiPCn/6YIdFi9TOP8c9oZ30aPI0ca/Td7DQc5JYY=
Subject key identifier: 31:07:79:4C:C1:C8:A0:20:8E:D0:1E:0E:D9:1F:04:B1:46:61:1D:45
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 092C
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/15FD165A795211F0B2170093DAE4EC9C.roa
Signing time: Thu 14 Aug 2025 21:03:12 +0000
ROA not before: Thu 14 Aug 2025 21:03:05 +0000
ROA not after: Mon 31 Dec 2035 21:03:05 +0000
asID: 55201
IP address blocks: 165.49.67.0/24 maxlen: 24
165.49.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 14 21:03:05 2025 GMT
Not After : Dec 31 21:03:05 2035 GMT
Subject: CN=689e4f0f-2054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:7b:48:cc:6c:8f:ac:6e:3e:bb:4c:96:da:
6f:84:40:ba:e8:76:00:88:76:86:bc:75:01:a4:94:
96:df:37:6f:5b:ce:3f:5e:2a:af:1a:9d:40:b2:20:
6d:00:1e:0d:58:ca:03:fb:e1:8b:0a:a7:cb:af:e6:
ea:76:a0:0e:76:a8:d8:b9:f0:dc:cf:74:d7:ce:79:
b7:7d:8a:b3:90:57:26:ec:44:ec:7b:d3:7b:b2:f4:
1b:01:0b:5b:28:f8:4c:68:cf:44:e0:85:72:4c:db:
89:5e:ec:4f:c2:aa:5b:4a:88:60:ab:48:4c:9d:6b:
88:45:85:21:fb:29:f3:eb:65:3b:23:10:a5:c9:a6:
a9:83:ef:e4:56:b2:ce:69:ae:d7:7e:aa:de:14:2b:
9a:9e:e3:bd:6c:ca:4d:e3:b5:44:74:bc:5c:e5:70:
f6:82:d6:ad:7f:6b:41:04:55:4d:88:96:40:83:17:
03:9e:46:2d:63:44:4e:82:8d:17:e5:f3:02:08:f9:
51:b3:5f:02:57:6e:43:04:d3:dc:e0:b4:2f:b0:a8:
f0:33:a2:5c:f1:d3:44:c1:66:e7:24:ce:87:a3:1f:
d9:a6:d6:e1:ec:47:f0:67:34:55:27:99:df:9c:53:
b3:22:55:3a:12:cb:50:8d:a7:98:86:e9:bc:11:e6:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:79:4C:C1:C8:A0:20:8E:D0:1E:0E:D9:1F:04:B1:46:61:1D:45
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/15FD165A795211F0B2170093DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.67.0/24
165.49.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:29:80:b7:23:51:9f:3d:5d:31:44:c3:66:ad:3b:c1:98:54:
ed:c0:31:b2:15:c9:f1:cd:89:93:b2:1c:e4:7d:75:6e:6f:9e:
f6:d4:f3:28:15:81:84:e7:a6:7e:24:d7:7c:33:f1:c5:64:1a:
f1:a4:d7:f7:c9:43:bd:50:d0:62:80:af:d8:62:aa:00:95:db:
b8:15:6d:9e:af:56:de:82:30:d9:c3:88:ca:b3:9e:ce:84:77:
c3:22:0a:03:71:67:de:d0:b9:3e:07:86:8b:a3:6f:40:40:b3:
8f:aa:25:6a:2d:36:3a:b9:96:cb:e5:23:f7:fb:ae:7a:ad:89:
b5:98:ce:18:2c:4d:c7:f9:77:bc:8d:63:a7:47:09:17:1a:53:
00:8d:7e:71:36:b3:c3:9c:de:f4:0d:a5:22:42:ed:82:66:62:
ce:28:5a:f9:a4:98:b1:9d:51:67:87:de:69:84:b7:2a:1d:a4:
bb:b9:63:73:01:20:a3:10:8f:f4:d2:f9:7e:24:09:4d:ba:2b:
91:80:24:5b:52:f6:06:1a:56:a4:21:33:2d:1b:1f:d2:39:77:
9c:1d:aa:31:7c:92:f2:c5:57:05:3c:d9:be:bd:92:6b:7e:cd:
45:82:61:28:37:4b:a1:6d:9c:77:86:22:df:11:81:6e:9d:e6:
be:90:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:21:22 2025 by rpki-client