Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/7B878842979E11F0945CFBE2DAE4EC9C.roa
File: 7B878842979E11F0945CFBE2DAE4EC9C.roa (raw, json)
Hash identifier: pEG0uHSXWIBCr2jymZAZDDncTwf2vM+/+EOiZZtM6Uo=
Subject key identifier: 15:48:DA:DC:79:86:40:8D:42:3B:DD:D6:F4:94:30:54:0C:A8:C7:EF
Certificate issuer: /CN=F36C11E4AR/serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
Certificate serial: 02BB
Authority key identifier: 1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83
Authority info access: rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/7B878842979E11F0945CFBE2DAE4EC9C.roa
Signing time: Mon 22 Sep 2025 10:25:38 +0000
ROA not before: Mon 22 Sep 2025 10:25:33 +0000
ROA not after: Tue 22 Sep 2026 10:25:33 +0000
asID: 328169
IP address blocks: 165.73.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 03:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C11E4AR, serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
Validity
Not Before: Sep 22 10:25:33 2025 GMT
Not After : Sep 22 10:25:33 2026 GMT
Subject: CN=68d12422-6d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:81:15:79:c3:cd:74:c1:44:4e:be:c8:98:
5f:ee:cc:5c:e0:2d:28:57:90:ea:6b:f6:cd:d3:fd:
54:02:5c:60:37:b6:6f:d9:9f:2c:22:73:1b:cc:4f:
2d:15:dd:7f:a9:64:20:d1:6c:54:a9:63:e6:b2:f8:
27:15:8e:fb:4d:ca:68:67:59:12:a8:e4:fb:cd:96:
85:26:a9:35:02:50:9c:05:89:be:7b:67:5e:90:41:
df:ec:33:f4:ee:b2:d2:bb:39:f0:ad:66:de:25:97:
ff:2b:c3:3a:92:79:c0:a9:33:a5:59:71:b8:d0:a7:
f2:21:2d:68:0d:e1:2e:9c:70:9f:5d:b1:73:e5:c6:
b3:d0:f6:20:f8:8e:5e:bf:d4:b5:7b:f4:40:5d:64:
e8:4f:79:5a:41:17:4a:4b:10:30:2d:33:51:b2:e6:
c4:3a:3f:d0:57:59:37:f2:f6:19:af:dd:34:03:c8:
ac:9b:63:ac:2f:32:a3:7a:10:cb:26:76:19:52:3f:
9c:66:36:ab:ba:30:f2:3f:8b:d4:c7:e0:ff:88:4e:
b1:3e:b0:e0:83:dd:a3:1c:ce:e8:53:89:bb:00:1a:
bb:e1:b3:5f:51:e0:a3:82:b2:fc:a4:9e:5e:cd:c7:
54:62:ad:e5:27:ee:b5:d5:12:02:b7:f7:7f:ca:bf:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:48:DA:DC:79:86:40:8D:42:3B:DD:D6:F4:94:30:54:0C:A8:C7:EF
X509v3 Authority Key Identifier:
keyid:1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/7B878842979E11F0945CFBE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.73.132.0/23
Signature Algorithm: sha256WithRSAEncryption
92:05:81:17:a6:80:09:8d:6e:65:00:ba:38:eb:7f:41:3c:2c:
1f:fd:4b:23:a7:5f:23:d4:73:09:1f:fa:cb:ea:7a:95:bb:1c:
32:b2:1f:8b:49:00:68:73:9a:3b:03:7d:9f:f4:b8:24:84:be:
81:85:bc:94:48:d1:9b:7a:4f:95:e3:30:b0:d9:2b:65:27:3c:
29:02:d3:01:a0:8e:03:58:6e:a7:ca:d6:82:98:67:d9:79:5a:
b4:da:60:67:d8:c1:07:05:88:eb:54:cf:be:a2:d9:51:8e:29:
2e:c4:37:ea:64:ce:74:47:06:8d:2b:40:32:4b:5b:6c:20:af:
77:aa:09:81:63:2a:18:ba:9c:47:0e:b8:12:26:ce:0f:1c:8f:
ff:e3:8d:67:72:dd:d8:cc:84:19:a9:ba:f4:64:52:8a:43:ba:
3b:0a:01:95:68:a0:a1:62:32:83:60:a3:e3:61:0c:99:fe:c0:
b5:65:45:2d:2a:45:3a:8d:ce:14:f7:53:69:68:59:f6:c6:00:
6c:13:db:c3:53:89:74:7d:6c:e9:15:61:28:cc:65:0b:34:b1:
a1:5d:f4:5a:18:54:c9:fb:57:38:03:93:09:cf:97:60:87:11:
4a:17:76:6c:ff:a4:02:c9:79:70:0d:7d:fc:17:84:84:b5:67:
a0:fa:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:27 2025 by rpki-client