Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5799A10E824A11F0BA6435AEDAE4EC9C.roa
File: 5799A10E824A11F0BA6435AEDAE4EC9C.roa (raw, json)
Hash identifier: PevKVSivvh6cILHKsYbL3cpyOIKYuDJgTNGNP6OINwU=
Subject key identifier: FE:CA:A8:27:9F:94:E2:F2:52:74:C5:44:65:65:E5:BF:36:96:69:0A
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0950
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5799A10E824A11F0BA6435AEDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 07:00:26 +0000
ROA not before: Tue 26 Aug 2025 07:00:21 +0000
ROA not after: Mon 31 Dec 2035 07:00:21 +0000
asID: 834
IP address blocks: 165.49.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 26 07:00:21 2025 GMT
Not After : Dec 31 07:00:21 2035 GMT
Subject: CN=68ad5b8a-42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:57:83:a5:d7:d0:26:40:87:b8:93:92:d7:
94:43:89:dc:10:65:61:dc:b2:5f:76:9c:fc:2f:c4:
f7:58:8e:c8:20:44:56:5b:b8:cb:8e:26:a5:de:10:
f4:e4:50:e6:39:32:d0:48:7e:e3:ba:2f:b7:5a:ec:
34:8a:8f:41:c1:02:b9:55:6b:67:4d:01:74:3e:b7:
6e:b8:d9:72:8c:9e:ae:4e:a8:c0:b2:23:32:d5:52:
8b:3e:fe:74:40:15:97:dc:14:37:7d:36:54:62:3d:
4d:3d:57:8e:87:31:f8:10:20:cf:01:8d:43:70:18:
7c:6d:cf:94:c3:64:7e:7f:11:e7:dc:cb:08:86:53:
d6:98:4e:6f:ea:c5:06:7f:a1:db:e8:74:a1:cd:fd:
fe:2d:57:d4:f2:0a:1c:05:87:a5:2e:96:58:fa:1d:
4f:f4:77:7c:a0:dc:78:f0:81:53:d2:78:a7:e8:44:
70:b9:8b:84:f4:aa:e0:e8:6c:f2:da:e5:38:63:3e:
f8:bd:a5:35:88:32:55:ec:1a:7e:09:56:c8:ac:05:
55:0f:d5:fb:4b:e0:ec:0e:f2:d9:0b:d0:14:b0:a9:
32:7c:b5:04:db:c6:c7:47:2e:e8:f0:46:09:6b:57:
27:6b:f7:91:a5:25:c4:8c:21:ee:4e:fd:8c:1e:03:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:A8:27:9F:94:E2:F2:52:74:C5:44:65:65:E5:BF:36:96:69:0A
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5799A10E824A11F0BA6435AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.70.0/24
Signature Algorithm: sha256WithRSAEncryption
45:29:7c:b5:07:a1:46:9a:b0:74:a6:19:2e:c4:8b:1c:52:37:
c9:c5:12:b0:8d:73:8e:7e:6a:75:5f:33:74:8c:df:0e:8b:12:
ff:d0:75:75:7b:4b:22:32:ae:2f:5d:ad:a7:6a:28:dd:df:d5:
3d:80:f7:5b:ee:2b:81:3f:17:6b:e0:c7:2b:4a:fa:74:7a:36:
4e:d5:1d:0b:17:6c:53:88:b7:a1:04:75:b4:77:3e:13:4c:65:
97:8f:b4:0e:a1:81:62:e5:61:a9:b5:8e:ee:d8:a1:bf:f8:cb:
81:b1:6f:21:49:93:84:33:2f:6e:a4:5a:42:7b:55:81:4e:05:
23:a9:41:0b:77:8b:0e:35:55:a0:e8:02:06:6d:28:d0:3d:92:
ce:e1:af:95:ff:41:bf:5b:83:39:1d:eb:19:00:e8:7f:ad:9d:
de:ce:af:aa:11:f1:bc:41:5d:0b:eb:f8:b4:ad:d5:d4:8a:81:
35:da:d1:6f:5a:66:25:9e:78:5b:4e:df:22:73:64:3f:23:85:
09:79:67:2c:19:49:1f:17:5c:7a:3d:ad:0d:12:b7:9f:0c:3a:
3a:6c:b4:5f:3c:eb:3b:20:b8:90:01:7f:3f:33:7a:0a:fa:e6:
d4:17:da:16:29:45:53:bd:4c:53:54:23:2c:9c:d4:98:9a:58:
0e:6b:e1:af
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTA4MjYwNzAwMjFaFw0zNTEyMzEwNzAwMjFaMBgxFjAU
BgNVBAMTDTY4YWQ1YjhhLTQyZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDh51eDpdfQJkCHuJOS15RDidwQZWHcsl92nPwvxPdYjsggRFZbuMuOJqXe
EPTkUOY5MtBIfuO6L7da7DSKj0HBArlVa2dNAXQ+t2642XKMnq5OqMCyIzLVUos+
/nRAFZfcFDd9NlRiPU09V46HMfgQIM8BjUNwGHxtz5TDZH5/EefcywiGU9aYTm/q
xQZ/odvodKHN/f4tV9TyChwFh6Uullj6HU/0d3yg3HjwgVPSeKfoRHC5i4T0quDo
bPLa5ThjPvi9pTWIMlXsGn4JVsisBVUP1ftL4OwO8tkL0BSwqTJ8tQTbxsdHLujw
RglrVydr95GlJcSMIe5O/YweA/hdAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU/sqo
J5+U4vJSdMVEZWXlvzaWaQowHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzU3OTlBMTBFODI0QTExRjBCQTY0MzVBRURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMUYwDQYJKoZIhvcNAQELBQAD
ggEBAEUpfLUHoUaasHSmGS7EixxSN8nFErCNc45+anVfM3SM3w6LEv/QdXV7SyIy
ri9dradqKN3f1T2A91vuK4E/F2vgxytK+nR6Nk7VHQsXbFOIt6EEdbR3PhNMZZeP
tA6hgWLlYam1ju7Yob/4y4GxbyFJk4QzL26kWkJ7VYFOBSOpQQt3iw41VaDoAgZt
KNA9ks7hr5X/Qb9bgzkd6xkA6H+tnd7Or6oR8bxBXQvr+LSt1dSKgTXa0W9aZiWe
eFtO3yJzZD8jhQl5ZywZSR8XXHo9rQ0St58MOjpstF886zsguJABfz8zegr65tQX
2hYpRVO9TFNUIyyc1JiaWA5r4a8=
-----END CERTIFICATE-----
Generated at Tue Sep 16 03:01:12 2025 by rpki-client