Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6D6CF3AA28111F08CB7C37CDAE4EC9C.roa
File: D6D6CF3AA28111F08CB7C37CDAE4EC9C.roa (raw, json)
Hash identifier: dzfpMureyFGCxDmeVZMU/sbEFcgMUTyrQufk6G/vK8Q=
Subject key identifier: FD:D2:16:04:4D:6A:38:1D:13:CC:10:95:5E:73:CD:93:C8:FF:C0:F1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 099A
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6D6CF3AA28111F08CB7C37CDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 06:58:19 +0000
ROA not before: Mon 06 Oct 2025 06:58:14 +0000
ROA not after: Mon 31 Dec 2035 06:58:14 +0000
asID: 205886
IP address blocks: 165.49.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 6 06:58:14 2025 GMT
Not After : Dec 31 06:58:14 2035 GMT
Subject: CN=68e3688b-0b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:e6:61:0e:1d:1d:de:8c:52:c5:04:17:7e:
90:f0:a8:d9:88:5b:42:53:38:99:f9:86:9d:7e:30:
33:cb:dc:ad:9d:e4:bb:d0:e7:5b:f5:26:a2:59:f7:
92:e8:7e:a0:ea:7a:97:b7:d1:04:4e:0b:04:48:41:
86:94:8a:18:78:86:91:73:01:46:3b:51:cb:f5:6c:
c1:09:60:c6:c9:df:0d:e0:5b:42:9f:2f:91:dc:67:
58:cf:33:c5:a5:d0:55:b1:c1:7d:8c:bf:2e:4d:7e:
43:2d:80:c3:8c:57:b8:47:96:96:60:a7:cb:2a:f3:
1b:f5:78:36:1e:72:94:fb:41:8c:f2:6c:c2:bb:9c:
89:0e:76:da:7b:5f:d1:48:3d:91:37:3d:d9:15:31:
74:d0:e9:39:44:57:e6:62:19:59:0a:03:e8:87:0c:
dc:68:22:d1:6d:a9:b8:54:82:1b:49:20:97:d5:41:
59:e8:5f:5b:8d:f6:4c:e5:86:69:1c:67:35:be:17:
37:21:7f:c4:fb:89:d9:1d:44:2f:09:f1:73:d1:34:
6c:3e:4e:0f:99:9b:18:86:f4:a4:e3:a8:cf:fd:97:
03:de:1c:3b:1a:9d:9e:64:b2:68:c8:1e:c6:03:32:
4c:23:6e:f2:32:10:91:29:d8:13:40:5e:d3:60:c9:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D2:16:04:4D:6A:38:1D:13:CC:10:95:5E:73:CD:93:C8:FF:C0:F1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D6D6CF3AA28111F08CB7C37CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.206.0/24
Signature Algorithm: sha256WithRSAEncryption
34:46:a3:87:13:9f:62:a7:57:d9:b4:f3:38:97:37:9b:0c:8b:
8b:1e:a3:78:68:b9:63:8f:8d:b4:97:86:4d:02:80:b6:28:89:
42:f4:bb:d1:c9:0e:16:a6:40:ef:c4:2d:75:0b:c3:79:d7:a5:
8b:cc:50:56:f8:73:58:28:e7:6c:b1:4a:0d:7c:fa:22:8d:d8:
11:ce:db:fc:7b:98:90:4d:b5:e0:b0:bf:94:87:b3:51:f5:03:
ca:fa:54:85:12:45:9e:a0:f3:01:1b:7c:be:50:84:55:26:0f:
36:e6:7b:50:e0:db:8b:dc:f8:85:ad:be:30:d5:08:ab:a7:bc:
4f:80:83:29:5c:a3:5d:1a:e8:6c:4d:59:5b:bb:e1:e0:26:7e:
79:89:d6:5a:29:0b:38:72:01:24:6a:40:10:8d:e0:52:53:ea:
23:a5:93:01:4c:ac:12:be:88:6a:a0:77:2f:63:9c:44:b5:d4:
f0:5c:e9:4e:db:c9:18:f0:4e:95:eb:4c:c0:6d:63:40:6c:01:
a7:67:b4:21:5c:ce:90:d2:d5:fd:3e:39:ed:cd:cc:56:49:44:
9c:75:4c:42:fb:70:9c:96:56:79:dc:22:34:e1:a8:97:d5:54:
ac:41:c9:7d:2e:9c:4f:db:0f:7c:e5:e7:8d:e7:2e:b3:95:ac:
f8:06:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:27 2025 by rpki-client