Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/23690B58B40F11F09E48E993DAE4EC9C.roa
File: 23690B58B40F11F09E48E993DAE4EC9C.roa (raw, json)
Hash identifier: HSI/QGBkRIdNYmrC8uTUfleewltTIPqOdLMlEFUDxFk=
Subject key identifier: CF:2B:83:BC:27:53:85:2C:8B:78:5B:D1:10:6A:85:12:B2:8D:61:7E
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09C4
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/23690B58B40F11F09E48E993DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 15:02:36 +0000
ROA not before: Tue 28 Oct 2025 15:02:30 +0000
ROA not after: Mon 31 Dec 2035 15:02:30 +0000
asID: 4826
IP address blocks: 165.49.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Nov 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 28 15:02:30 2025 GMT
Not After : Dec 31 15:02:30 2035 GMT
Subject: CN=6900db0c-ebb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:5a:4b:32:88:2b:52:a5:08:c9:3a:c8:4c:
43:3d:5a:cc:d5:be:26:11:fd:e7:81:37:73:7d:79:
ac:92:da:07:91:d2:b8:5a:07:96:e7:cf:ab:cd:46:
62:c8:0b:50:bb:93:f5:51:f2:65:dd:5b:9f:5e:41:
d0:a8:bc:f0:e0:39:e2:82:85:1d:cc:e2:51:2d:2a:
b3:f4:f6:d2:80:f1:5e:c5:12:da:43:f7:70:b8:1f:
ea:cd:3d:99:11:56:81:5c:a5:72:8e:63:09:20:97:
62:af:8f:ac:e0:e1:9f:db:e0:ab:52:73:0b:ab:5b:
4c:16:ac:f2:8f:21:1a:b1:19:81:21:3a:94:c2:bd:
85:f0:45:30:94:c0:cf:0a:ec:fb:1f:6b:5d:dd:8f:
28:f8:be:fc:55:c0:c2:11:18:81:63:71:21:65:39:
8c:40:93:8f:5f:28:ba:1a:91:a3:ec:8f:b5:c3:72:
9f:c0:47:c3:53:9b:ec:a0:8c:80:56:c0:51:ea:6b:
c7:b3:4a:77:74:61:9b:2e:0f:f2:61:91:ea:bf:1a:
50:be:49:a9:97:e9:59:10:7b:10:f1:0e:fd:de:d3:
e4:af:57:d0:df:1d:e7:00:9f:32:8a:f1:04:ce:2b:
62:d1:5e:a0:e2:3e:a4:bd:b5:8d:fa:c7:ba:a8:80:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:83:BC:27:53:85:2C:8B:78:5B:D1:10:6A:85:12:B2:8D:61:7E
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/23690B58B40F11F09E48E993DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.210.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e8:49:28:f5:39:f5:ce:ea:8a:71:f4:93:69:32:3c:77:a6:
6a:96:8b:15:e9:c1:f2:5a:3a:17:80:a8:cf:df:79:f1:ff:11:
41:ef:d6:9d:b2:48:cd:76:6b:84:1c:e2:fc:23:f2:8c:0f:e2:
f8:72:8e:e6:d3:0d:19:75:21:a4:17:6a:f9:90:ee:4f:1c:66:
46:90:79:76:cb:2e:c3:78:77:00:0c:19:8b:4c:0a:75:b9:1f:
56:85:8c:31:cd:27:58:14:f5:08:2c:d3:bf:47:d2:65:95:bf:
2a:54:39:45:51:4d:0f:32:8c:3f:87:3c:12:09:49:7c:ca:35:
9e:5c:48:fc:1e:d0:44:a8:d2:05:73:6c:cb:72:3e:0b:1b:b3:
ae:33:2b:7c:e2:93:65:3b:9f:7f:fe:8a:5b:59:3e:e9:f8:ac:
41:aa:fd:c7:37:90:82:f7:f8:ab:98:69:e8:f1:2c:07:bc:e3:
27:d3:fb:b5:95:09:5f:6b:49:a9:88:1e:84:82:67:cc:a2:36:
b3:56:31:5c:06:36:27:05:da:3e:63:21:77:8b:4c:5d:09:d1:
86:7f:63:51:bc:f6:00:ca:d7:7f:53:0f:bf:cd:e2:4e:40:2e:
b9:f4:52:bd:b6:41:f4:35:c7:6a:b1:42:c8:b5:83:eb:63:68:
95:85:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 18:41:21 2025 by rpki-client