Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/569F58107BA211F0AAAFBAA7DAE4EC9C.roa
File: 569F58107BA211F0AAAFBAA7DAE4EC9C.roa (raw, json)
Hash identifier: cXXNHpCVy1ehHpRZtPU/lUYnpF9J8NuAZGC+KVSuGEk=
Subject key identifier: 28:EE:64:BB:6A:04:D1:D2:C4:2A:04:D1:05:51:CD:EB:41:85:18:32
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0935
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/569F58107BA211F0AAAFBAA7DAE4EC9C.roa
Signing time: Sun 17 Aug 2025 19:42:42 +0000
ROA not before: Sun 17 Aug 2025 19:42:36 +0000
ROA not after: Mon 31 Dec 2035 19:42:36 +0000
asID: 9304
IP address blocks: 165.49.89.0/24 maxlen: 24
165.49.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357 (0x935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 17 19:42:36 2025 GMT
Not After : Dec 31 19:42:36 2035 GMT
Subject: CN=68a230b2-ecf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:df:78:db:f1:b0:4d:60:8f:01:bf:26:9e:
39:d3:be:0f:38:77:1e:6e:40:af:26:03:03:aa:29:
a2:a4:ae:6a:0c:40:88:26:c5:d8:f0:96:a9:31:c7:
4a:83:5d:72:04:1b:a7:15:53:71:55:df:ca:46:d1:
5b:8e:70:f8:0e:4a:57:4c:b0:e6:30:ec:5b:c4:d2:
15:40:6f:92:85:18:ee:c2:9f:53:52:fa:4c:7c:2d:
38:38:a9:ce:da:49:10:9c:42:aa:ff:62:36:93:a0:
70:ba:2e:74:91:df:78:06:9a:6a:fc:e0:4a:32:b5:
e0:a2:21:7b:8d:6f:0c:1c:23:af:01:d6:6c:c1:11:
d2:11:41:b3:32:54:51:00:27:10:39:a1:0d:df:51:
2e:5b:71:03:80:46:ac:d6:a0:57:b0:ca:f6:16:cc:
6c:5a:b7:82:45:ce:30:47:f7:b9:cc:b2:27:62:af:
2e:9f:80:0d:43:3e:6d:96:0f:38:7a:c8:6c:cb:e8:
35:e8:b3:a3:fc:24:69:2f:9e:82:b7:50:64:24:b0:
c6:1e:14:fb:6d:0c:a1:e6:de:e6:c9:df:8f:4c:e1:
99:4e:2f:85:fb:d5:f5:ea:b7:c9:3d:13:68:5c:69:
23:2c:51:20:7a:bc:7f:fa:59:25:36:55:57:fb:02:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EE:64:BB:6A:04:D1:D2:C4:2A:04:D1:05:51:CD:EB:41:85:18:32
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/569F58107BA211F0AAAFBAA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.89.0/24
165.49.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:70:f2:0d:70:b3:c0:66:6a:85:24:80:cf:2c:6f:90:80:4c:
8e:e4:06:b8:a4:15:d5:5b:41:4b:de:f9:47:87:b1:1e:56:3e:
28:5b:25:b9:5c:29:57:6f:5b:62:ac:a9:e1:24:72:aa:28:ce:
79:fc:5a:c3:bd:7d:0c:3f:72:9f:41:6e:40:d9:ec:8e:a0:f3:
5c:64:c0:fc:56:c2:60:65:1f:cc:f0:96:f7:64:f3:75:a2:09:
c8:d9:1e:93:fe:39:37:a4:b4:5b:af:e4:e4:75:3b:9a:c1:51:
15:94:ad:21:23:39:28:cf:2c:ed:19:02:ff:b4:c6:44:6e:51:
83:2f:0c:05:a4:cf:3d:3e:4f:2f:df:97:2b:bd:9d:02:c7:7d:
1d:70:b7:43:58:2e:1a:e1:49:69:35:5e:9f:ab:a4:be:00:f6:
38:cb:3d:88:bf:dd:c0:ae:fe:48:f2:8d:59:d2:d8:6c:87:3b:
c7:c8:3c:4f:3e:31:ef:1d:dc:ed:8d:43:c9:78:15:58:c9:f5:
dc:11:e1:21:55:de:49:22:e8:72:33:9a:e0:fa:91:68:1e:26:
4e:f3:d9:0f:13:56:51:90:d5:65:0a:aa:d4:ea:3d:8b:99:68:
56:d9:39:76:de:68:69:59:27:4c:33:91:18:2b:99:f5:ef:3f:
41:2c:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:51 2025 by rpki-client