Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/507FBDD27C5911F0922D4DD8DAE4EC9C.roa
File: 507FBDD27C5911F0922D4DD8DAE4EC9C.roa (raw, json)
Hash identifier: ONRtPNcCGpVJLqSS7GqSFVtJETLx1tOcSIGukxc6CHM=
Subject key identifier: AF:2B:04:56:90:F3:CD:B3:9F:53:85:07:6A:8B:2C:4D:19:2B:21:EA
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 093B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/507FBDD27C5911F0922D4DD8DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 17:32:30 +0000
ROA not before: Mon 18 Aug 2025 17:32:24 +0000
ROA not after: Mon 31 Dec 2035 17:32:24 +0000
asID: 6079
IP address blocks: 165.49.76.0/24 maxlen: 24
165.49.79.0/24 maxlen: 24
165.49.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363 (0x93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 18 17:32:24 2025 GMT
Not After : Dec 31 17:32:24 2035 GMT
Subject: CN=68a363ae-33e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:58:3d:17:ed:92:55:e2:40:bc:e9:f8:4b:
43:84:c1:f2:1b:f9:be:d6:72:b9:a2:63:b9:2f:14:
9e:a7:df:ae:79:e2:58:bd:54:c2:bd:c5:c4:e6:d1:
5b:67:26:ca:11:fb:c6:bd:02:97:28:54:d9:8a:43:
f2:83:ec:70:a4:0e:57:0b:02:2c:2d:a0:7d:fd:9e:
1a:f9:91:44:8b:7b:3b:ab:bf:95:89:e8:5a:45:87:
f0:46:63:d0:fd:ce:24:fd:22:35:0d:76:ba:53:14:
3a:3a:43:ae:63:82:b6:bc:2f:40:09:29:f0:39:fe:
21:cf:cd:a5:22:a3:ef:b3:fd:f6:ce:f7:c0:15:e0:
55:fd:6b:5a:ed:fb:d9:26:3f:d0:4d:2f:91:c0:be:
ba:5f:a4:f2:74:61:b5:32:3c:e6:c2:ed:3a:33:33:
23:88:6a:1e:54:08:e7:e0:8c:d7:e6:37:da:16:3d:
86:ed:18:b4:09:95:fe:6f:9b:9b:7c:62:51:94:60:
be:33:e7:1e:9b:b9:34:8a:ac:e7:13:7a:87:a8:3d:
bc:58:27:45:f1:71:e1:ee:fa:07:d2:a4:1a:48:f5:
36:32:71:e7:6d:dc:5d:69:39:24:14:60:1a:04:c1:
37:00:6f:07:f3:9d:3f:55:14:34:1f:b3:a6:af:60:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:04:56:90:F3:CD:B3:9F:53:85:07:6A:8B:2C:4D:19:2B:21:EA
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/507FBDD27C5911F0922D4DD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.76.0/24
165.49.79.0/24
165.49.109.0/24
Signature Algorithm: sha256WithRSAEncryption
be:8f:62:d1:dd:e8:82:26:29:1a:0a:bd:ef:0a:a0:19:5f:ec:
04:d2:07:77:24:9b:9e:ce:05:d2:b9:dd:01:d9:80:1d:fd:d5:
ef:a3:06:f3:c9:7c:42:45:d3:4e:08:ae:80:95:3d:0c:34:2f:
cc:00:85:ca:a8:f9:89:48:a7:e3:57:e2:bc:1a:0d:99:08:47:
76:c2:65:11:d5:c6:ec:1a:a8:26:c4:6c:7c:bd:cd:1f:5d:a9:
6a:c0:ae:15:f2:29:dc:77:36:9b:5d:6e:84:ce:70:49:30:1c:
c6:ec:49:81:8b:e1:58:df:1d:79:62:72:c0:74:40:dd:a8:52:
63:47:b8:3a:8d:54:09:7a:a3:55:b3:da:9d:6d:7f:8a:c2:01:
7b:c3:07:df:7f:4e:38:1e:42:ef:41:b0:32:3c:ad:79:a5:d4:
fd:76:b6:39:86:45:8c:aa:7b:3d:a0:f8:41:5d:c1:38:98:4e:
44:35:d8:c5:75:9c:5d:62:de:0b:63:b1:9a:b6:43:8e:3f:fd:
c1:af:c4:c0:8c:6c:68:ef:1a:93:47:af:d6:09:ef:b0:ef:a3:
80:8a:f3:44:71:77:f9:86:ee:fa:7b:3a:e2:ca:c9:72:02:9f:
8c:1c:e0:d5:d4:17:ca:26:56:be:64:04:c3:80:b8:da:3a:60:
49:a7:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:53 2025 by rpki-client