Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B534C98781F11F0932199D0DAE4EC9C.roa
File: 6B534C98781F11F0932199D0DAE4EC9C.roa (raw, json)
Hash identifier: s2oeJm0U8QCcD+GbNudSqC52QuLWGDj5ZE9gtBRjD3o=
Subject key identifier: D8:72:F5:BF:15:F1:E4:55:2B:AA:E2:EC:C2:FB:3A:85:2F:09:1D:B3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0FA4
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B534C98781F11F0932199D0DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 08:27:59 +0000
ROA not before: Wed 13 Aug 2025 08:27:54 +0000
ROA not after: Sun 13 Aug 2034 08:27:54 +0000
asID: 61290
IP address blocks: 161.123.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4004 (0xfa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 13 08:27:54 2025 GMT
Not After : Aug 13 08:27:54 2034 GMT
Subject: CN=689c4c8f-679d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:c3:6a:d7:60:b2:98:21:d5:a9:71:49:46:
66:13:be:0b:e5:ad:b3:09:22:54:df:2b:a8:12:ec:
5c:39:e1:16:2f:30:39:3d:60:ad:74:fc:3a:9d:87:
c4:31:29:10:c0:3a:ef:21:63:ec:6c:17:19:3d:0c:
bc:51:80:5b:52:39:44:5e:7a:c4:af:9f:b7:47:b1:
12:92:32:ba:e5:61:d7:ce:68:2d:fa:c9:dd:f5:ea:
fc:44:0c:e9:08:ee:79:e8:0a:d9:9f:ab:04:a3:c8:
6e:31:c2:2f:51:60:0a:c4:c0:b6:75:2a:0f:d4:d4:
2d:94:50:66:6d:4c:f5:df:b9:50:7a:58:e2:29:f8:
8c:2a:ad:26:41:52:f1:53:2e:11:d1:73:e3:eb:26:
8d:01:04:3f:64:d2:fb:cb:da:8b:e4:e9:06:db:cb:
f0:a8:45:d3:8c:e9:a3:6a:41:10:0b:01:b6:5c:78:
4d:2a:89:72:fb:23:f9:12:07:b3:58:cd:b7:11:b8:
ef:2a:cc:97:81:30:4d:72:a0:85:76:2a:97:04:f4:
f7:57:ca:60:5a:d1:57:42:6f:8d:a1:bd:7f:36:e3:
f3:4d:8f:6e:a1:f4:32:8e:ba:1b:7d:b5:65:c5:5c:
16:c4:8f:ea:36:00:8a:f3:0b:73:ae:bf:64:59:d7:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:F5:BF:15:F1:E4:55:2B:AA:E2:EC:C2:FB:3A:85:2F:09:1D:B3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B534C98781F11F0932199D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/23
Signature Algorithm: sha256WithRSAEncryption
32:9a:dd:83:ac:2e:33:59:fb:6d:8d:b8:20:cc:25:21:6c:9c:
8f:9b:8d:8b:1d:23:36:9f:40:c6:45:03:89:97:41:3d:80:73:
f8:f6:ed:b9:c7:ec:c9:b0:28:7e:88:c4:b4:ed:a6:9e:33:f3:
1c:f9:26:b5:f3:a1:e0:52:70:41:f7:17:d8:79:76:ac:c6:c7:
93:65:2b:78:68:40:ab:15:dc:72:ba:9c:ea:87:e5:3a:f4:a2:
07:34:72:3c:a4:f3:a4:b3:00:70:9a:61:66:8b:b5:72:04:89:
8b:40:fc:71:87:9d:2c:bf:1e:96:53:42:32:aa:c3:1b:0b:2a:
e3:fb:44:27:7d:fe:c8:5a:a9:00:c2:ff:2f:68:f4:00:08:b0:
f6:a7:f7:d4:c8:27:fd:71:2a:04:97:a4:00:5b:7b:f3:f6:cf:
e7:01:6b:45:34:76:c7:07:3d:84:c4:5b:3c:5a:29:46:d4:f5:
38:43:43:03:72:b0:68:c6:6c:e6:98:bf:2e:30:b5:ef:06:81:
75:ba:1e:7a:3a:af:35:ae:d6:3b:65:a9:d7:8b:ef:09:41:2b:
2b:cd:49:16:46:a9:a1:5e:9c:f9:ba:55:a1:19:a8:36:9d:f3:
be:e1:e1:8d:4f:5f:0e:03:5a:b4:30:3b:27:91:3c:e4:bd:87:
2a:84:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:25 2025 by rpki-client