Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/79A3D98C7C2211F0B8417E7CDAE4EC9C.roa
File: 79A3D98C7C2211F0B8417E7CDAE4EC9C.roa (raw, json)
Hash identifier: 8Lx8FFqWzUXft4NcRJ1P5RNS4nyX2jczSfZ8VwD5kCc=
Subject key identifier: 01:1F:39:69:AF:46:D9:C7:CD:BF:DE:2A:D9:6B:2D:C5:A5:0C:36:24
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0FAB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/79A3D98C7C2211F0B8417E7CDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 10:59:56 +0000
ROA not before: Mon 18 Aug 2025 10:59:51 +0000
ROA not after: Thu 18 Aug 2033 10:59:51 +0000
asID: 327790
IP address blocks: 161.123.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4011 (0xfab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 18 10:59:51 2025 GMT
Not After : Aug 18 10:59:51 2033 GMT
Subject: CN=68a307ac-3e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:7c:67:59:b2:d5:ce:f6:06:72:80:ec:83:
1c:88:bf:ba:ef:4f:e4:b0:f2:4c:d9:66:b5:10:36:
58:c4:32:d6:67:1e:33:f2:4b:02:67:72:68:c6:81:
75:dc:d4:05:65:6d:72:fb:e5:c6:7f:c9:20:35:f3:
31:dd:14:b0:4b:b0:95:fa:f2:9a:ea:97:97:b2:88:
08:1b:65:b4:99:e7:51:0a:e7:ad:94:f9:f5:b3:d4:
1a:82:73:4f:af:2e:25:37:8b:f9:4d:f1:2d:e2:31:
dc:dd:31:81:0c:a6:b3:dc:42:45:3a:3f:85:5b:e0:
a1:03:7d:20:1b:ea:81:bf:5e:14:ee:b4:82:05:bd:
a2:17:2a:15:6c:b2:21:e9:4f:b9:e2:62:24:38:2e:
3c:c0:96:a2:58:d8:02:34:50:96:1b:20:22:82:ab:
ee:c9:c9:4b:40:52:f5:3c:cc:71:3e:15:07:6d:b8:
da:de:a9:aa:23:1d:f9:a2:69:b9:62:e0:72:b2:86:
7a:d5:d9:59:90:d6:7e:8f:96:44:74:92:90:50:22:
3a:28:ca:7c:79:7a:cb:95:8d:f0:58:59:3b:88:8e:
c8:60:a8:53:8d:c7:d8:34:84:9c:0f:c8:5a:fa:3e:
8c:45:cd:4f:3d:d4:9f:4b:7a:00:31:16:95:6b:c6:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:39:69:AF:46:D9:C7:CD:BF:DE:2A:D9:6B:2D:C5:A5:0C:36:24
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/79A3D98C7C2211F0B8417E7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/23
Signature Algorithm: sha256WithRSAEncryption
23:03:4c:cc:c2:ef:ce:83:f0:6d:4e:0d:db:c3:29:3f:fe:23:
f1:d2:c4:7d:05:9d:9f:54:61:52:fc:0d:46:b1:ce:62:79:4b:
c0:17:3a:b9:81:d8:d0:90:99:49:26:aa:1b:c1:af:2b:da:50:
99:d3:f4:32:c7:e6:ff:73:85:4b:18:26:e7:31:db:50:67:5b:
20:57:38:0f:f0:8e:82:33:b8:12:5c:cb:cd:bf:33:9e:c6:08:
fb:25:d0:1f:00:4f:e6:aa:2b:c2:11:c9:2d:48:ce:87:26:08:
ce:7d:5b:23:ad:ac:b7:84:91:93:cb:9d:c4:2f:9a:d4:93:08:
69:d0:b0:3e:78:6f:27:ed:be:98:46:c7:1b:e5:f1:50:bc:80:
95:0e:2b:8b:ca:b9:de:f2:77:c8:63:ac:7e:56:68:01:05:ae:
2d:c4:2b:96:a9:ba:67:e5:fd:a7:fd:e7:fe:f6:84:22:97:e4:
05:9b:72:45:9f:36:f3:85:3b:77:86:fe:55:ee:da:63:e0:7d:
d5:6a:a5:0c:7f:9b:25:a7:10:61:5a:c6:2e:63:57:56:6a:45:
27:f2:4a:63:a9:f1:f6:7e:5c:31:d9:e0:83:54:a9:b5:6f:10:
fa:91:22:82:f7:9b:ff:aa:45:6e:00:fa:f4:bb:c4:26:bc:c5:
b1:e1:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:01 2025 by rpki-client