Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/898C3760A22711F0AE893DA6DAE4EC9C.roa
File: 898C3760A22711F0AE893DA6DAE4EC9C.roa (raw, json)
Hash identifier: H7pKgK3tIKLEzZQ9gR8fdlgxdsnsT0frmpA3XFMoftA=
Subject key identifier: 6B:E8:D9:85:3C:ED:07:5E:A8:D0:29:55:53:54:86:D9:E2:40:50:85
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0FDD
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/898C3760A22711F0AE893DA6DAE4EC9C.roa
Signing time: Sun 05 Oct 2025 20:11:55 +0000
ROA not before: Sun 05 Oct 2025 20:11:49 +0000
ROA not after: Thu 05 Oct 2034 20:11:49 +0000
asID: 61290
IP address blocks: 161.123.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4061 (0xfdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 5 20:11:49 2025 GMT
Not After : Oct 5 20:11:49 2034 GMT
Subject: CN=68e2d10b-d437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:97:bb:1e:3c:7f:b4:0f:d9:cf:82:41:44:
65:83:e3:04:01:ab:5a:be:8b:f0:d3:99:2a:0d:65:
e9:0e:d5:b4:b1:d2:96:09:9a:83:52:7e:11:4f:17:
b7:6d:fc:49:3c:dd:ea:2b:a3:d4:0e:f9:ed:f3:74:
62:58:c4:76:ab:fa:0d:52:f2:d0:3c:34:d9:34:7e:
10:76:bf:2d:27:16:b7:19:99:ef:c6:c4:67:bc:3b:
76:8e:22:4f:b1:d0:0f:ec:ef:0b:c2:b8:33:b5:99:
10:fe:d3:58:72:13:a0:ec:40:a9:1d:1d:06:f5:95:
31:83:fe:2e:e4:3e:30:8b:58:82:da:bb:32:3a:47:
f5:62:db:fd:6a:42:3c:a6:46:d6:22:b8:f0:1b:39:
a3:bd:d7:dd:1e:1a:83:37:02:56:b9:99:d2:08:a1:
ad:ee:24:c1:8e:40:3b:a6:f4:77:19:b4:52:a3:d0:
b5:90:7f:2e:c7:47:af:fb:8f:91:c0:6c:f7:33:65:
d4:d8:d5:b5:fe:c8:d5:66:ba:c7:5e:ab:d8:0e:c9:
26:00:b8:0f:b8:7c:51:60:23:21:31:3b:b8:1c:06:
47:a3:f0:e8:ab:cd:bc:a0:21:34:d3:01:0c:c5:6e:
b1:22:ce:84:68:e8:db:cd:40:24:bd:4b:6d:b3:d2:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:D9:85:3C:ED:07:5E:A8:D0:29:55:53:54:86:D9:E2:40:50:85
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/898C3760A22711F0AE893DA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
74:29:87:68:de:fb:31:12:ce:ad:15:5a:48:16:95:d4:75:cd:
7d:0b:d9:52:f1:7e:29:4c:78:0f:4d:1c:ec:74:c1:38:96:c3:
fe:9d:a8:bf:3f:ee:ec:fc:4b:01:99:4d:c7:2c:28:43:2c:4a:
38:aa:eb:e7:eb:b3:d4:b2:78:1b:4f:08:21:35:7c:e6:dd:28:
18:04:e0:cf:79:10:0f:3c:96:64:dd:40:31:ea:ee:ef:63:45:
d1:87:46:e1:ce:a4:38:35:ac:c9:ff:ac:fa:27:52:90:b6:3c:
d3:00:b3:b0:d4:89:14:25:56:24:ff:d9:ff:28:e6:1d:63:bc:
fe:fa:1f:b7:f5:a9:03:79:d2:ce:44:b8:76:8f:44:8b:cf:b1:
b8:61:bf:83:ff:da:86:96:9d:d2:0b:63:2c:11:fc:d2:3e:42:
c0:d8:e0:58:dc:7f:cc:1b:f4:f3:75:14:75:74:a4:37:97:9c:
50:0c:b7:9e:6e:79:90:e0:a0:26:2e:b4:5e:89:67:5a:6b:84:
89:09:e7:66:8e:94:85:88:76:aa:6e:90:85:e3:c0:5d:37:34:
32:63:07:44:41:cb:41:61:4d:4c:d1:fc:40:b5:df:0e:7d:10:
45:af:46:96:a2:fc:21:a4:47:32:de:8f:d6:99:4d:2c:8f:ad:
fb:26:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:08:03 2025 by rpki-client