Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4E3AD9F6688311F0AAF2939CDAE4EC9C.roa
File: 4E3AD9F6688311F0AAF2939CDAE4EC9C.roa (raw, json)
Hash identifier: WNl4USMxt/1oVRlq3QeNUJM1Oo8gZjWcOB02HspUgFw=
Subject key identifier: F7:50:C1:4B:74:5D:C7:EE:8C:B1:E8:16:84:64:73:81:EA:D1:15:E7
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 08FD
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4E3AD9F6688311F0AAF2939CDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 11:42:41 +0000
ROA not before: Thu 24 Jul 2025 11:42:36 +0000
ROA not after: Mon 31 Dec 2035 11:42:36 +0000
asID: 37564
IP address blocks: 165.49.0.0/18 maxlen: 24
165.49.128.0/18 maxlen: 24
165.49.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 24 11:42:36 2025 GMT
Not After : Dec 31 11:42:36 2035 GMT
Subject: CN=68821c31-9292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:42:87:f5:f2:9f:11:da:c1:76:a6:c8:51:
ed:d5:3d:0b:fb:f3:49:44:2b:39:84:cd:f3:cb:55:
2d:40:ca:89:fb:b5:66:4e:fa:57:da:ac:4a:ca:d0:
e5:83:e6:7f:7d:12:82:23:e8:4a:d6:7d:e3:f1:0f:
22:a7:98:0e:94:ca:e0:c5:d0:f2:83:e3:24:7b:e9:
c8:95:ef:00:8c:b8:5e:6f:c1:ff:7f:54:b0:3d:57:
6f:c3:43:f5:42:b8:e4:98:f6:b1:f9:ca:e3:c5:59:
37:3a:5d:1f:b2:a5:c3:60:3e:b4:69:c7:a6:f2:93:
b9:1f:c6:97:b0:65:64:1c:8e:1f:2d:d9:46:9d:9e:
2b:68:bb:c9:63:95:3a:aa:9b:4d:56:cc:a6:1b:f6:
64:80:5c:33:aa:9e:92:17:09:10:79:43:31:ee:a9:
af:bf:25:81:f7:d3:04:4f:f9:b9:ac:a3:6b:cb:06:
bc:26:49:07:7d:6d:9f:52:3e:0c:37:c7:70:0c:7f:
03:8b:99:4c:b1:1b:bc:b6:6c:92:82:90:65:e7:87:
a4:50:ee:4e:c7:1c:95:4b:e0:bb:04:67:c5:42:7d:
ca:54:97:cc:40:8a:9e:64:56:c0:24:23:24:08:0a:
23:86:55:ea:8f:45:40:23:cf:b3:08:50:e7:fa:7d:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:C1:4B:74:5D:C7:EE:8C:B1:E8:16:84:64:73:81:EA:D1:15:E7
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4E3AD9F6688311F0AAF2939CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.0.0/18
165.49.128.0/17
Signature Algorithm: sha256WithRSAEncryption
68:0d:7d:1d:c7:26:fb:7c:6a:28:cc:bb:b1:4a:a9:7e:6e:b8:
e5:44:57:a8:7d:11:be:a1:85:97:79:db:48:cc:d4:56:fe:0d:
41:cd:6d:3b:20:81:76:4e:65:b3:f8:9f:1e:9b:21:57:70:e1:
ec:14:44:bb:68:37:12:14:7d:b0:e2:3f:36:ba:0d:8f:96:de:
68:b6:36:ad:fe:03:13:03:0a:cd:58:1c:01:2b:2d:31:5c:91:
5a:5e:c5:75:07:f0:1b:71:7a:55:50:28:c8:34:6f:fa:27:20:
d7:f8:07:c0:98:92:79:ec:51:fc:61:0d:40:42:95:7a:99:93:
fa:fc:54:94:06:91:08:bc:5a:eb:e6:0e:04:49:1e:8f:cc:e2:
06:3a:51:7e:86:9e:a1:88:8a:46:78:b7:60:69:b5:e5:a6:1d:
87:89:63:a4:a3:d8:08:39:6d:49:43:f7:c9:63:f2:ae:0c:93:
a5:35:48:94:3c:02:f2:60:c5:da:d5:3f:3f:61:25:dd:2c:14:
2b:16:9c:cd:db:64:7c:39:e8:3b:58:35:3b:e0:3d:1f:c4:c4:
8c:f8:8e:42:ae:f3:39:8e:b1:4b:9f:09:07:99:51:08:68:c0:
89:8b:4d:ae:00:a9:54:e4:0e:10:5d:df:b3:0b:20:f3:31:98:
27:5c:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:56 2025 by rpki-client