Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa
File: 0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa (raw, json)
Hash identifier: FbqPhXgVxRFKRyej1hOMFhCZh8mpxY1cmyW2uqTiFs0=
Subject key identifier: 5B:50:0F:65:7F:A0:95:22:29:47:4E:3F:96:F3:B9:4A:CD:28:A3:DF
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 03C2
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa
Signing time: Wed 10 Sep 2025 13:42:54 +0000
ROA not before: Wed 10 Sep 2025 13:42:48 +0000
ROA not after: Tue 31 Dec 2030 13:42:48 +0000
asID: 15964
IP address blocks: 165.211.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962 (0x3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Sep 10 13:42:48 2025 GMT
Not After : Dec 31 13:42:48 2030 GMT
Subject: CN=68c1805d-fa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:8e:f6:73:27:3e:1d:0a:a0:e8:f2:98:86:
64:24:b5:18:e1:1a:db:97:58:78:fe:48:bd:5b:23:
c6:04:a9:be:b4:41:c8:3c:a7:a5:9b:0a:76:39:bd:
75:88:a4:13:1a:2e:d9:89:67:a8:8b:2c:08:04:fc:
b6:19:23:fa:c3:d1:3c:42:36:1f:e6:ab:6f:09:54:
58:1d:e9:7e:a7:fb:e7:97:88:df:5f:cd:47:7c:a2:
95:9b:0f:bc:20:2a:43:68:fa:8c:c6:43:ef:03:a6:
43:9e:b7:df:e3:a8:25:d3:d4:2f:9b:05:e4:e9:38:
d6:38:55:57:2b:85:8f:60:1e:78:17:1c:b1:ce:ab:
0a:4e:09:9b:f7:de:0f:97:bd:54:db:ed:73:d1:73:
a1:45:87:d1:ca:fc:69:68:d9:5e:af:4f:87:ae:3e:
23:8b:70:6b:1e:cc:89:6c:b1:c8:89:e7:fb:d9:cf:
d0:2d:77:8d:16:e1:35:04:f4:25:2e:63:7a:da:fb:
aa:c3:9c:d4:89:44:5e:fe:55:88:d5:5c:73:08:1c:
6d:63:4a:92:c7:34:6d:6e:19:29:51:28:e4:16:9b:
46:79:c2:f4:95:cd:30:dd:e9:73:f4:ce:0d:ad:a3:
15:ed:b5:28:23:41:e2:a3:a4:27:1d:b4:e5:67:f3:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:0F:65:7F:A0:95:22:29:47:4E:3F:96:F3:B9:4A:CD:28:A3:DF
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.211.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f7:cb:6f:87:8f:12:b4:47:fc:31:a1:18:6b:93:78:58:81:
f6:be:fe:3a:13:c4:76:9b:5f:62:90:6f:e1:ac:d2:ae:f5:49:
8e:13:f3:47:46:03:6a:5e:12:dc:51:5f:1f:7b:e0:50:a1:b8:
08:53:52:21:f0:07:33:0d:c7:98:cf:de:42:2e:9d:3b:72:66:
9a:fb:d7:f4:bc:c6:60:a2:e1:67:a2:5f:bb:f4:ca:eb:d4:7b:
70:bf:f9:43:56:b2:d4:12:56:ea:1b:5a:00:cb:d9:cd:ef:83:
5b:a1:32:f8:9f:e1:2c:89:5c:3f:aa:be:71:c9:02:c2:4d:17:
e2:26:e9:12:ae:91:4d:93:75:e1:05:3a:99:d2:aa:6e:20:89:
46:46:84:7e:b4:69:81:e8:d5:e9:ba:c8:86:4a:76:78:57:46:
57:f1:5f:f9:88:90:22:0f:2e:be:9b:18:3c:ae:78:e0:73:53:
93:c5:12:4d:46:45:be:7b:55:82:c3:4e:12:3e:c3:73:21:8a:
15:ce:7c:69:7c:6b:a0:81:c6:0b:36:8b:e2:6a:25:d7:e2:5b:
f9:6a:3d:78:2b:35:a3:fe:2d:0f:fa:73:e0:c4:8f:56:d2:2c:
31:5d:ef:fe:f2:8f:f1:47:31:00:a2:d1:5e:be:77:04:a6:cc:
ff:d6:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:52:16 2025 by rpki-client