
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1A7118A4A45D11F09B33AE7CDAE4EC9C.roa
File: 1A7118A4A45D11F09B33AE7CDAE4EC9C.roa (raw, json)
Hash identifier: 7IVZRQ6FdujjPOBfzjaj60g55O9QNcYi2hra3861rjI=
Subject key identifier: 52:56:42:89:8A:68:95:CA:CA:BD:21:CB:AB:FC:6D:F3:32:E9:C4:AD
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 099E
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1A7118A4A45D11F09B33AE7CDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 15:40:23 +0000
ROA not before: Wed 08 Oct 2025 15:40:15 +0000
ROA not after: Mon 31 Dec 2035 15:40:15 +0000
asID: 834
IP address blocks: 165.49.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2462 (0x99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 8 15:40:15 2025 GMT
Not After : Dec 31 15:40:15 2035 GMT
Subject: CN=68e685e7-7c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:61:b9:22:0c:00:5b:7a:e4:39:23:de:f4:
6f:b8:76:72:1a:18:fd:f3:d9:6c:b2:2b:68:34:a1:
93:cf:ae:34:83:60:e4:f4:d7:08:97:26:67:3b:35:
5d:bb:da:d9:59:75:65:28:f1:8e:8b:50:2a:af:c8:
83:98:fb:25:29:47:f6:36:53:c2:53:2c:e8:2b:b4:
77:dd:f4:6b:09:e0:44:9d:e6:34:ad:b1:44:b6:59:
2b:07:c5:e2:99:63:98:94:70:7c:cf:c0:60:f7:3b:
b4:1b:b3:40:c5:de:b9:9b:e8:a5:18:08:f5:c4:e3:
a6:66:c4:af:5a:3c:86:67:18:8a:41:57:55:ec:6d:
52:94:0c:44:f7:5a:17:7f:ec:35:fe:d1:e2:1c:de:
9b:81:f4:f1:3f:63:bb:40:b2:2b:02:72:9c:1b:a5:
d9:f7:18:d5:ce:08:56:3c:8c:d8:a5:a5:12:1d:43:
7d:92:9a:13:a9:be:31:09:af:31:54:7b:5b:82:ab:
a8:bd:96:1f:18:3f:2a:c3:c2:57:b2:4e:64:d2:c9:
b9:04:95:27:a5:ab:d2:ce:a7:d8:41:6a:72:2c:bc:
f8:ee:93:37:10:86:09:d4:08:88:be:49:75:fd:df:
cb:57:e9:e8:bb:56:e7:6f:57:44:00:23:88:81:12:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:42:89:8A:68:95:CA:CA:BD:21:CB:AB:FC:6D:F3:32:E9:C4:AD
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1A7118A4A45D11F09B33AE7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.226.0/24
Signature Algorithm: sha256WithRSAEncryption
45:32:7b:dd:14:d7:ee:f0:58:99:6a:27:6b:ad:b1:21:f0:67:
d8:8d:49:ad:9f:30:9c:60:34:c8:5f:03:76:82:e3:8e:71:fe:
51:41:37:65:dc:b3:98:c7:38:2c:77:af:ef:b4:10:bd:b9:c5:
6c:4f:c9:b7:e4:1b:90:45:09:19:2b:9e:ba:3e:fb:f8:f9:97:
52:10:7d:26:10:9a:85:9a:b5:cd:3b:b1:6d:5d:e4:5e:19:ad:
34:64:56:53:85:42:56:73:bf:4e:bd:77:9d:0a:42:92:60:dc:
36:7f:16:9a:ce:c8:a5:c4:62:a2:ee:2f:d7:e3:63:b4:c1:b5:
95:e8:5c:d4:fc:b5:4c:40:60:8c:48:96:96:b3:62:e9:93:5e:
1b:ad:fa:0e:98:73:1f:d9:74:fd:8f:e5:74:5d:a6:64:1f:18:
51:81:af:9b:4f:0f:a3:dc:71:20:70:70:fb:5f:9e:23:41:00:
c6:8e:75:72:10:97:33:70:28:b0:d4:97:60:d9:fb:01:a9:b9:
66:66:ca:e1:22:f8:a6:40:88:b9:aa:92:51:b2:5c:4e:38:36:
7d:8a:05:22:42:4f:6a:37:04:d0:e3:98:26:af:ad:f7:95:71:
c8:fd:0a:65:96:a1:57:97:2f:1f:5b:a1:a0:48:a2:77:eb:5b:
25:8f:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:42 2025 by rpki-client