Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D77FA9A29A9D11F09E6742D3DAE4EC9C.roa
File: D77FA9A29A9D11F09E6742D3DAE4EC9C.roa (raw, json)
Hash identifier: CpCUvi3H7Tm+VoBnr5VHgmw/IJFRl3w+kMBD+8qmVOc=
Subject key identifier: AC:25:28:E3:B5:EA:47:63:C0:39:C3:C2:E5:CF:6F:43:CB:00:0A:9D
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0989
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D77FA9A29A9D11F09E6742D3DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 05:58:37 +0000
ROA not before: Fri 26 Sep 2025 05:58:31 +0000
ROA not after: Mon 31 Dec 2035 05:58:31 +0000
asID: 209181
IP address blocks: 165.49.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 01:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441 (0x989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Sep 26 05:58:31 2025 GMT
Not After : Dec 31 05:58:31 2035 GMT
Subject: CN=68d62b8d-328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:2b:39:4c:51:f7:87:a1:f2:4b:59:f5:a2:
4e:ce:34:81:64:3c:8e:11:d7:7a:b0:89:81:5a:15:
fb:fd:5f:f8:74:27:1b:86:c9:eb:3b:24:f0:f7:7b:
0d:c4:03:3f:0b:07:6c:7e:da:27:3d:21:a6:3d:b8:
fc:62:fc:af:0a:fa:27:84:bc:2c:ed:8d:92:2f:24:
fd:f0:d7:39:a1:a6:aa:c9:13:da:79:1d:ff:8f:8c:
e3:95:f8:f3:2b:20:91:99:e4:fd:94:1e:36:ec:8e:
e8:35:75:e0:ea:8e:9e:e7:da:24:46:22:1c:d1:41:
56:79:0d:4c:81:db:df:0b:c5:41:e9:68:dd:e3:3f:
ef:57:ac:f5:c4:0d:7e:0b:08:2a:48:ff:58:c2:b7:
cf:f5:7c:be:39:71:a0:ea:98:93:8e:dd:3a:51:dc:
13:d2:b2:c6:51:2f:cb:03:e4:c2:53:04:46:cb:ae:
cb:be:74:6a:ae:cd:34:28:3f:13:55:39:01:86:78:
6b:7d:f5:b1:92:2e:82:79:08:f0:77:3c:85:13:c6:
d2:9d:ef:cf:40:e1:ea:59:63:d3:7f:3f:83:a3:25:
bd:a1:f9:78:65:c4:8f:a8:36:66:6d:8d:d6:91:93:
56:c5:8c:ef:97:9d:8f:14:45:87:c5:cb:53:0f:33:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:28:E3:B5:EA:47:63:C0:39:C3:C2:E5:CF:6F:43:CB:00:0A:9D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D77FA9A29A9D11F09E6742D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.71.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c3:ba:9e:74:92:a9:88:04:70:f8:1f:66:62:0e:47:6c:17:
8b:eb:f8:e7:c7:d8:6d:47:6b:6a:79:3d:a0:74:bb:09:cb:d9:
fa:d1:2c:f4:d9:ec:36:5b:64:f5:f7:9f:f5:f1:5d:fe:54:22:
67:01:d8:98:81:da:65:00:be:2a:be:8e:8e:6d:da:7a:62:8c:
5f:ac:2e:8f:da:94:7d:91:8c:ae:92:c6:e2:a0:ac:23:01:43:
49:35:49:25:b4:e7:a9:d2:0d:b9:78:b8:19:63:49:3e:bd:ac:
03:a6:c1:86:88:b6:ea:52:7b:b3:42:94:07:4e:dd:8e:d5:e7:
3c:45:b4:8e:1c:c6:7c:16:94:40:0d:34:7b:2a:54:f6:ef:c4:
ea:1f:ed:e1:37:91:be:6f:79:bb:46:46:aa:4a:8d:b4:e0:f9:
0f:19:50:cf:0b:96:cb:21:fc:8b:4b:90:2e:41:ae:d1:7c:6a:
79:9c:5c:b9:a5:0f:04:3f:54:9d:1c:ba:49:f6:75:56:36:e7:
4b:6e:41:90:fc:23:70:3d:d9:0f:50:a2:3f:47:66:9b:c6:07:
05:83:1d:5d:71:18:fc:4e:04:7b:e9:9f:e2:3a:4c:78:21:37:
e8:f9:46:00:22:74:35:e7:16:2b:98:5b:c7:89:21:c2:98:66:
51:cf:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 01:49:52 2025 by rpki-client