Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/7AA044D690A611F0986ABFC6DAE4EC9C.roa
File: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (raw, json)
Hash identifier: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=
Subject key identifier: 9A:75:23:BF:DD:6C:09:4F:9A:F2:62:E0:52:04:48:54:4C:E8:02:4B
Certificate issuer: /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial: 03E5
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Authority info access: rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/7AA044D690A611F0986ABFC6DAE4EC9C.roa
Signing time: Sat 13 Sep 2025 13:35:15 +0000
ROA not before: Sat 13 Sep 2025 13:35:10 +0000
ROA not after: Sun 13 Sep 2037 13:35:10 +0000
asID: 329129
IP address blocks: 169.239.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 997 (0x3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Validity
Not Before: Sep 13 13:35:10 2025 GMT
Not After : Sep 13 13:35:10 2037 GMT
Subject: CN=68c57313-f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:e1:51:bc:a9:cc:9d:47:7c:35:96:28:e3:
be:b8:2f:e8:ce:34:7a:22:85:f1:8e:34:c6:67:bc:
6f:b4:fa:00:a8:9e:82:46:e0:e1:dd:11:9c:b2:8f:
6b:1d:16:9d:d8:64:75:d1:79:40:ea:74:66:42:74:
5d:ce:d8:66:63:8c:da:a5:e2:3a:dd:75:b0:b6:68:
eb:81:f1:65:66:0d:30:07:b4:c9:c6:0d:4d:8a:1c:
a3:95:2a:b0:46:3b:3c:ef:3a:b2:25:b3:10:ce:5e:
e9:19:f5:d1:d2:81:1f:12:53:55:63:b4:ee:a3:57:
7c:38:3b:4e:45:16:33:cd:13:37:fe:20:fb:75:54:
ea:24:33:c6:c9:f7:58:3a:85:f8:ce:4a:51:a4:e8:
1d:c2:31:19:66:f3:1f:e1:ef:0d:a5:54:5f:0d:8b:
39:57:f0:bf:a0:26:6e:15:9a:b0:68:69:6c:b5:4b:
81:86:78:59:2f:34:8d:a0:5e:af:76:ee:c7:00:61:
bb:99:08:d1:05:83:0e:a6:1e:4f:ef:7e:33:26:96:
cb:78:cf:71:ca:14:2d:24:84:54:1c:4c:37:3f:18:
98:e3:e4:27:c2:8d:5b:7e:7c:f1:ff:19:de:b2:c0:
05:ba:22:c1:3e:a3:08:d0:d6:3a:64:cf:67:63:e7:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:23:BF:DD:6C:09:4F:9A:F2:62:E0:52:04:48:54:4C:E8:02:4B
X509v3 Authority Key Identifier:
keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/7AA044D690A611F0986ABFC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.94.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5d:68:0a:86:4a:60:d4:bd:cd:47:35:eb:93:9b:36:ed:a0:
05:56:62:8d:fd:2f:bc:87:af:30:ee:7d:f4:d2:5a:50:55:eb:
12:5a:4b:91:9f:41:c0:86:41:88:aa:36:27:87:ee:ea:b7:35:
97:2a:a9:42:fd:cb:d8:c5:4c:5e:91:5a:bf:ac:af:7d:55:8c:
f7:3f:76:60:02:aa:ae:dd:a8:f4:36:cc:1e:74:3c:d9:4f:b3:
b7:84:1f:d3:b6:11:8b:33:37:f0:04:bd:ea:fd:0b:de:a1:6a:
30:1b:01:dd:e0:65:a9:1d:10:0d:54:02:97:3b:4b:c6:98:90:
54:83:da:76:71:b4:04:b5:e9:06:d3:5a:80:5f:6b:d4:10:86:
f1:21:f9:d5:25:cc:74:d6:6e:c4:17:dd:8a:46:c2:9f:c1:40:
71:0b:e8:82:47:2a:8e:41:f4:7b:50:dc:d6:dd:ea:d7:b9:27:
fa:91:90:99:62:42:d7:d9:64:4a:b6:53:cb:c1:d6:a8:d0:00:
5d:f6:f7:74:c0:e9:d5:57:58:cb:d3:3e:40:79:00:b8:b7:d9:
ea:3c:9d:b4:31:16:87:11:1d:36:72:2a:ce:42:72:d3:c8:f6:
96:26:bf:c8:04:13:9d:b0:1c:61:89:ef:10:70:f6:e4:14:b8:
71:71:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:50:07 2025 by rpki-client