Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7B7A1BC2795211F0841C1297DAE4EC9C.roa
File: 7B7A1BC2795211F0841C1297DAE4EC9C.roa (raw, json)
Hash identifier: 0P2eZ2wz+48M1iSaSjbbpTqlj9YFT6kJiQpMaDhAiB0=
Subject key identifier: 15:68:BD:78:AF:5B:BA:C6:0B:A3:32:99:CD:CD:CC:3D:0A:0C:FB:9A
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 092E
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7B7A1BC2795211F0841C1297DAE4EC9C.roa
Signing time: Thu 14 Aug 2025 21:06:02 +0000
ROA not before: Thu 14 Aug 2025 21:05:57 +0000
ROA not after: Mon 31 Dec 2035 21:05:57 +0000
asID: 202736
IP address blocks: 165.49.67.0/24 maxlen: 24
165.49.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350 (0x92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 14 21:05:57 2025 GMT
Not After : Dec 31 21:05:57 2035 GMT
Subject: CN=689e4fba-cca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:a9:f3:be:ca:25:3b:c9:60:3d:14:b9:8b:
e9:26:b1:ae:07:5b:54:93:47:19:fa:7e:62:04:55:
98:22:ac:60:d5:96:39:ab:a7:7b:51:84:72:72:a4:
fa:bb:6a:13:a7:0a:12:b5:a7:4b:80:eb:5d:da:61:
57:33:04:d6:5b:62:9b:35:5c:30:e2:64:8d:d6:d0:
ae:0a:ed:15:2c:af:60:ac:95:60:6f:ae:09:c8:93:
e0:07:e1:5f:ad:50:a4:c4:58:e1:21:2c:aa:01:6e:
f7:3d:0c:9f:54:de:86:4f:bd:93:bf:d5:4a:8e:c6:
6f:26:b6:6d:14:9e:e4:8e:01:c0:41:f1:9e:91:df:
fa:2a:3e:85:8f:c7:ea:20:28:e9:f4:ec:b6:b5:b0:
f5:34:8a:ae:e1:bf:3c:a9:70:be:a0:5f:1a:66:dd:
5c:c3:29:65:31:5f:17:2f:2e:37:ef:eb:e5:3a:61:
3c:1e:9a:96:47:17:10:0f:40:61:b0:75:dc:d3:ab:
4f:6d:f2:04:7a:89:64:90:8e:bd:37:13:36:61:ae:
bb:0f:d0:54:93:4d:42:d4:59:26:e5:34:ca:27:9f:
f5:2b:9b:a7:d5:4c:e4:35:0e:6a:0c:10:5c:5e:f7:
3b:dd:cf:23:3a:80:c3:f9:8e:80:e4:f0:14:94:b2:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:BD:78:AF:5B:BA:C6:0B:A3:32:99:CD:CD:CC:3D:0A:0C:FB:9A
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7B7A1BC2795211F0841C1297DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.67.0/24
165.49.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c1:6f:cd:01:45:2b:26:a6:50:f2:25:14:22:49:67:09:d5:
b5:e5:eb:9f:83:af:bd:31:07:4f:7b:c2:5b:27:62:92:40:b0:
70:db:c3:4b:5a:24:28:76:f5:1f:b1:af:f5:0f:1a:f1:82:fe:
8d:2e:ba:4a:c8:db:8a:98:c2:fc:61:b1:2a:62:2c:79:89:08:
60:17:63:bc:81:73:f9:40:09:c2:34:31:af:db:fc:1f:71:55:
36:20:ea:27:23:6e:5a:4f:3c:e4:6c:85:79:f0:79:1a:05:ad:
3b:9b:05:d9:a3:e4:78:62:d4:4a:27:92:8f:29:05:72:bf:da:
07:1e:dc:c3:0d:e8:e7:11:81:bc:66:dc:ab:79:2a:ca:82:2d:
93:58:11:fd:18:b0:b0:df:88:54:15:f8:16:45:4f:57:6b:11:
d6:f5:78:05:04:4f:12:b7:57:b3:82:de:6d:e5:0f:bd:26:31:
a3:cd:b5:e0:e5:35:26:45:da:eb:bf:a8:ef:1d:03:86:53:70:
c6:61:ce:02:93:d0:07:1e:52:a2:6b:9b:be:d0:7b:cc:48:65:
94:c6:b1:5c:25:99:a0:8b:d6:59:1b:ac:8c:60:93:1f:78:81:
e8:7a:a4:ae:55:58:cf:93:99:75:88:a4:5e:0a:d6:cc:3b:bd:
a8:69:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:45 2025 by rpki-client