Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3DD2B0E2739711F0B3012BC1DAE4EC9C.roa
File: 3DD2B0E2739711F0B3012BC1DAE4EC9C.roa (raw, json)
Hash identifier: 5szgBnHPbJ2OoLRMlgBChDMITtVp0z8ivwwMXpckxRY=
Subject key identifier: 78:12:BB:42:28:54:9C:65:37:39:44:29:39:90:C8:5B:7B:9A:06:10
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 091B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3DD2B0E2739711F0B3012BC1DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 14:03:07 +0000
ROA not before: Thu 07 Aug 2025 14:02:59 +0000
ROA not after: Mon 31 Dec 2035 14:02:59 +0000
asID: 3320
IP address blocks: 165.49.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 7 14:02:59 2025 GMT
Not After : Dec 31 14:02:59 2035 GMT
Subject: CN=6894b21b-95c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:03:8c:77:39:48:c0:00:2e:e8:f8:a0:4a:
28:14:44:7f:8b:29:92:ab:e0:c4:13:75:0b:78:fb:
05:f1:ec:64:0a:da:6e:fe:38:5c:cf:ca:38:8a:dc:
0b:65:7d:33:cf:da:8c:ee:2b:20:bb:cc:24:d3:25:
dd:7b:8d:0c:5d:c0:39:2a:24:db:00:a4:df:e4:8d:
2e:53:37:83:73:3b:17:e9:9b:48:85:14:d7:1a:61:
4d:c3:51:70:30:02:51:40:da:7d:3d:d3:c8:94:18:
71:89:c4:e3:1d:f2:2a:1d:6e:40:70:f5:dc:1c:67:
ce:86:f7:bf:dc:47:8b:46:fd:75:8b:99:88:9b:6b:
d9:cb:c5:30:d2:97:a6:d7:69:88:ca:12:b1:f4:c6:
f9:1d:b3:d7:36:d9:86:bd:6b:af:a2:17:a4:fa:b3:
31:f7:36:1e:1d:a1:06:41:9c:b8:41:00:9c:6e:1b:
0c:65:3c:81:ce:35:e8:4a:ac:50:12:d1:9a:05:ab:
55:aa:2c:2e:a4:bb:5d:92:cc:2c:9e:c2:09:b7:49:
37:55:8a:77:96:de:63:75:46:3a:38:fd:4b:60:ce:
52:83:fe:f6:22:85:83:5f:9b:51:db:1d:d4:57:cd:
9c:25:9b:d7:63:1d:fc:6f:56:b7:80:97:cc:ca:ba:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:12:BB:42:28:54:9C:65:37:39:44:29:39:90:C8:5B:7B:9A:06:10
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3DD2B0E2739711F0B3012BC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.107.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d5:85:81:91:43:af:29:14:72:61:19:f0:68:09:ec:00:23:
03:97:66:bc:5c:ff:c2:29:42:a5:f3:cb:1d:13:ee:a2:3a:da:
ba:6e:4c:f8:e9:59:54:af:dc:ca:ef:88:f8:97:15:e7:ce:d5:
dc:a2:ba:20:f0:a8:2d:f0:38:1b:bf:51:22:40:5d:73:79:63:
54:f5:88:87:19:24:ab:f1:58:e3:9a:92:4b:a6:92:c5:84:9e:
db:7e:6f:b3:25:07:0f:9a:1a:34:fd:e5:de:22:9d:a8:4a:4d:
c3:17:e3:5b:d5:f2:26:c6:25:32:ef:c8:8c:73:0b:98:8f:74:
94:90:72:7e:52:dc:cd:eb:35:0f:82:be:81:2a:f5:3d:b1:ac:
56:eb:9d:fd:37:9a:a1:58:6a:b6:02:a1:12:90:02:21:2f:82:
12:4b:67:23:1d:07:1b:63:14:7a:e1:37:9f:17:df:94:e0:7c:
14:7d:6b:e0:a5:5e:1f:16:d7:cb:65:0c:cc:07:ba:21:ab:a8:
35:97:71:6c:1f:9d:09:d1:b0:0c:ab:92:8c:37:67:c6:12:83:
a9:c5:0e:ae:39:4b:3b:ca:fd:44:38:19:9b:5c:dc:ce:78:52:
92:b9:58:7c:9d:cd:4b:7c:45:39:0a:0b:a9:e6:b9:68:27:10:
f7:37:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:35 2025 by rpki-client