Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/9E0B11CE972411F09921BFC2DAE4EC9C.roa
File: 9E0B11CE972411F09921BFC2DAE4EC9C.roa (raw, json)
Hash identifier: eic4IoFkHL6zHdTr9PyGYfQOmyAMe1591VUiCAZuplQ=
Subject key identifier: 14:52:ED:EB:FE:DF:C1:09:F5:C6:67:1F:25:CB:9E:47:EF:43:97:CB
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 097F
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/9E0B11CE972411F09921BFC2DAE4EC9C.roa
Signing time: Sun 21 Sep 2025 19:53:18 +0000
ROA not before: Sun 21 Sep 2025 19:53:11 +0000
ROA not after: Mon 31 Dec 2035 19:53:11 +0000
asID: 37027
IP address blocks: 165.49.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Sep 21 19:53:11 2025 GMT
Not After : Dec 31 19:53:11 2035 GMT
Subject: CN=68d057ae-b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:92:b6:04:7b:0a:46:e0:16:89:1a:b5:45:
54:b2:e4:24:13:8b:5f:55:aa:9a:40:2e:a6:69:42:
7d:8b:ce:b3:65:09:ea:bb:a6:49:4a:6b:d2:1f:cc:
eb:03:19:84:7a:fe:ec:01:99:b5:7e:3d:52:e4:4d:
ea:8c:79:c2:12:4d:03:d2:06:7a:81:38:ea:7d:e9:
b5:27:b6:93:2f:d7:66:82:d9:1f:7b:62:bc:c6:7a:
e1:63:e1:2e:e0:64:1f:10:59:00:8f:fe:7f:a1:da:
ab:85:56:aa:f7:bf:85:6a:2d:83:6d:0c:e1:08:48:
44:cd:fb:7a:88:4a:98:1a:6b:a6:09:59:b4:5b:2e:
d1:31:f6:3f:9d:99:0b:f6:32:6f:29:c2:81:8b:8f:
2e:ee:12:13:bf:0d:00:55:bb:8a:13:04:f9:0e:64:
b3:6b:0e:e1:fc:c0:dc:a8:92:fd:16:8b:78:00:23:
21:a8:e6:95:a5:85:22:eb:6b:82:0e:e1:3a:fa:b0:
9a:8d:81:ae:e2:66:90:c5:5a:6a:8a:89:83:88:b0:
75:f1:c5:4c:82:4b:9a:44:78:63:22:37:29:38:f7:
7e:d0:26:b2:2e:7f:d2:10:ae:08:4b:00:79:1b:f2:
d5:b6:6e:5a:de:9d:0b:46:1f:b3:48:44:ae:0d:10:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:ED:EB:FE:DF:C1:09:F5:C6:67:1F:25:CB:9E:47:EF:43:97:CB
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/9E0B11CE972411F09921BFC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.83.0/24
Signature Algorithm: sha256WithRSAEncryption
93:be:90:26:5e:a6:6f:2a:7a:16:ec:7e:b6:90:27:0d:ce:6f:
9a:08:a7:47:d4:c6:30:df:d6:2b:b1:cb:d4:14:12:ab:a3:05:
6e:ad:a5:49:fe:06:c7:26:8b:13:47:90:1b:ae:26:4c:b2:33:
6e:fb:83:5f:94:91:5f:1c:bd:28:f3:75:c9:7e:72:0e:69:e4:
b7:8a:3a:ef:6a:80:50:75:5d:5d:c1:59:18:2e:1e:16:97:10:
c9:53:dd:3a:77:7c:27:41:1b:39:25:a2:50:eb:58:36:00:75:
cf:a0:cf:52:be:c5:a8:c2:ce:1b:5e:ae:11:32:30:14:a4:a9:
37:03:bc:3b:d0:55:06:fa:49:b9:cb:6e:2a:16:ca:b8:94:2f:
b5:73:ce:de:70:90:53:1f:bb:e7:cb:9c:1e:43:3c:86:38:ff:
dd:c5:4c:d8:1a:b5:17:5a:60:c0:c1:34:c6:2e:fc:91:67:8e:
c4:dd:06:fb:da:39:2e:2d:b5:bf:e0:93:14:f7:44:bb:35:f2:
c4:73:ff:0d:20:16:ad:03:ff:fe:ee:55:5e:cb:9a:1f:4d:4d:
1f:51:45:e7:43:e0:a3:89:50:a7:dd:5f:6b:9b:ab:7c:c8:3c:
07:ee:f1:ac:24:dc:4e:34:1c:c1:9d:a3:a2:15:5d:f1:f0:b4:
4c:91:54:72
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTA5MjExOTUzMTFaFw0zNTEyMzExOTUzMTFaMBgxFjAU
BgNVBAMTDTY4ZDA1N2FlLWIwMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDP1ZK2BHsKRuAWiRq1RVSy5CQTi19VqppALqZpQn2LzrNlCeq7pklKa9If
zOsDGYR6/uwBmbV+PVLkTeqMecISTQPSBnqBOOp96bUntpMv12aC2R97YrzGeuFj
4S7gZB8QWQCP/n+h2quFVqr3v4VqLYNtDOEISETN+3qISpgaa6YJWbRbLtEx9j+d
mQv2Mm8pwoGLjy7uEhO/DQBVu4oTBPkOZLNrDuH8wNyokv0Wi3gAIyGo5pWlhSLr
a4IO4Tr6sJqNga7iZpDFWmqKiYOIsHXxxUyCS5pEeGMiNyk4937QJrIuf9IQrghL
AHkb8tW2blrenQtGH7NIRK4NEOM5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUFFLt
6/7fwQn1xmcfJcueR+9Dl8swHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzlFMEIxMUNFOTcyNDExRjA5OTIxQkZDMkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMVMwDQYJKoZIhvcNAQELBQAD
ggEBAJO+kCZepm8qehbsfraQJw3Ob5oIp0fUxjDf1iuxy9QUEqujBW6tpUn+Bscm
ixNHkBuuJkyyM277g1+UkV8cvSjzdcl+cg5p5LeKOu9qgFB1XV3BWRguHhaXEMlT
3Tp3fCdBGzklolDrWDYAdc+gz1K+xajCzhterhEyMBSkqTcDvDvQVQb6SbnLbioW
yriUL7Vzzt5wkFMfu+fLnB5DPIY4/93FTNgatRdaYMDBNMYu/JFnjsTdBvvaOS4t
tb/gkxT3RLs18sRz/w0gFq0D//7uVV7Lmh9NTR9RRedD4KOJUKfdX2ubq3zIPAfu
8awk3E40HMGdo6IVXfHwtEyRVHI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:39 2025 by rpki-client