Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AC816EF6A69711F0AAE57DEFDAE4EC9C.roa
File: AC816EF6A69711F0AAE57DEFDAE4EC9C.roa (raw, json)
Hash identifier: gY0NiIGJTSyAcBI2YEuUPLV56ULKbHmE29zMTdQW7ds=
Subject key identifier: 09:5B:9C:6B:2F:DC:27:9F:53:36:F8:B1:83:2D:1F:03:B3:90:EB:0D
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09A9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AC816EF6A69711F0AAE57DEFDAE4EC9C.roa
Signing time: Sat 11 Oct 2025 11:44:42 +0000
ROA not before: Sat 11 Oct 2025 11:44:33 +0000
ROA not after: Mon 31 Dec 2035 11:44:33 +0000
asID: 205886
IP address blocks: 165.49.192.0/24 maxlen: 24
165.49.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2473 (0x9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 11 11:44:33 2025 GMT
Not After : Dec 31 11:44:33 2035 GMT
Subject: CN=68ea4329-f406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:ca:1b:93:5f:b3:d8:a8:13:47:bf:f4:ba:
00:2a:b8:48:9e:31:d9:35:b0:64:30:3b:71:11:62:
87:56:f7:77:d1:03:16:1b:93:fa:fa:60:2b:3b:f0:
aa:1f:f5:3a:7b:87:be:99:40:20:cf:93:f9:08:c7:
54:7c:92:d4:5b:fa:1c:35:6f:07:7c:5b:0d:12:1f:
b3:5d:71:ac:b8:fb:c7:48:fc:7b:58:64:38:fe:25:
6b:e4:fc:90:3d:bf:6c:69:33:ff:8d:43:f6:05:52:
db:cc:6c:15:1a:0f:8a:1a:ac:4d:6e:29:cc:a8:ef:
c5:99:64:18:87:01:87:25:55:ef:a7:cc:7e:a5:cb:
e2:1a:88:56:7b:15:4c:1d:d8:90:52:71:a1:30:8c:
48:77:16:2c:46:bb:33:5f:2c:23:2c:8d:02:91:8f:
44:ca:48:8c:3e:be:d3:e6:88:7a:53:ca:20:d5:72:
a2:a8:e2:8b:80:0b:17:2a:34:ef:04:a7:38:04:f4:
39:0b:81:52:cd:a1:12:92:bc:86:13:69:97:c9:c1:
18:94:50:f6:86:98:15:52:bf:27:10:7e:d7:c0:15:
ab:d6:7c:2d:85:23:b7:92:33:26:31:ac:7b:0a:64:
e7:8d:37:d9:8c:cd:b0:0a:56:28:33:5d:dd:e4:87:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:9C:6B:2F:DC:27:9F:53:36:F8:B1:83:2D:1F:03:B3:90:EB:0D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AC816EF6A69711F0AAE57DEFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.192.0/24
165.49.235.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0f:15:9d:71:cc:fc:49:3d:e2:85:32:8e:40:6b:b5:56:ab:
e9:9a:7b:4e:3d:91:7c:ac:f3:ba:62:0f:cc:07:99:5c:e5:ad:
26:d8:1a:82:17:8e:d6:86:7d:c7:b7:8f:cc:8b:03:c1:d8:52:
11:94:4b:e8:7d:20:79:0a:69:ec:a5:5a:b0:f0:c8:b2:c8:44:
e9:96:a1:86:97:a5:11:3c:eb:7c:56:7d:87:72:79:f5:07:bc:
ad:43:53:81:62:8e:3b:08:f5:16:c0:6d:65:2a:46:ea:d1:e0:
38:b0:c2:2c:5d:d0:a8:07:a1:e6:5d:cc:b3:17:12:10:98:2a:
4a:d0:3e:d9:bc:27:5e:8f:59:cc:b4:3e:58:44:3b:d3:80:39:
ec:65:ab:1a:70:4b:7b:2a:01:b1:cd:5c:23:ca:54:52:50:80:
0e:c4:88:96:28:e6:3d:e1:9f:09:85:ff:d8:9d:68:31:fa:0c:
d5:79:02:fd:f4:a2:8f:ed:e0:45:7f:b7:63:16:cf:79:a0:8a:
0c:08:83:c6:5f:7f:f5:80:fd:83:20:c6:7c:c6:54:8e:e0:31:
e3:23:30:b2:8a:ee:79:81:b9:d3:b4:4a:7b:30:2c:a7:f4:93:
8e:a7:e6:f6:b1:09:40:79:af:90:2c:e9:51:53:a7:1c:7f:c4:
5d:58:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:10 2025 by rpki-client