Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/602FC274B0AF11F09EC4FDD8DAE4EC9C.roa
File: 602FC274B0AF11F09EC4FDD8DAE4EC9C.roa (raw, json)
Hash identifier: vQ65qeLIXyIkmpP8F837pe9uMDrjWAfx0sSb9hAgO8M=
Subject key identifier: 9E:A7:20:9A:07:9B:06:5B:05:A7:49:09:D1:59:F6:F8:BD:22:E0:47
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09B9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/602FC274B0AF11F09EC4FDD8DAE4EC9C.roa
Signing time: Fri 24 Oct 2025 07:59:33 +0000
ROA not before: Fri 24 Oct 2025 07:59:24 +0000
ROA not after: Mon 31 Dec 2035 07:59:24 +0000
asID: 834
IP address blocks: 165.49.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Nov 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2489 (0x9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 24 07:59:24 2025 GMT
Not After : Dec 31 07:59:24 2035 GMT
Subject: CN=68fb31e5-aaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:1b:13:85:4a:d4:f2:ef:9f:81:29:f3:a9:
6b:f9:08:43:47:12:aa:32:35:49:5c:0e:62:8f:f2:
74:8f:16:8c:40:de:06:30:ea:52:53:fc:76:fc:8e:
ee:75:be:26:c9:e5:c1:c6:89:b3:f0:27:68:26:cf:
b0:6b:f0:9b:ad:9f:0c:46:71:6a:fc:46:2f:c0:e8:
fb:69:12:7f:92:ff:5a:9f:49:16:b8:5f:7a:2f:85:
f9:24:b2:0a:b4:29:66:f2:58:80:da:35:a4:52:c1:
d3:50:38:b5:2d:e5:09:b4:8d:d2:e4:a0:1e:92:22:
6e:e5:5d:a8:f7:89:2c:22:2c:34:d0:ed:8f:f7:ab:
cc:14:57:7a:92:de:fa:55:ad:f3:c7:10:c4:64:cf:
b3:91:5d:92:03:47:9a:d3:b0:da:ec:24:3b:b8:4c:
7d:db:49:f9:a2:9b:17:e5:36:a7:3b:64:1b:f1:90:
d9:94:9c:a4:ad:ff:e8:82:a6:66:c1:84:d9:23:77:
6a:ae:db:ea:13:ec:80:b7:6a:71:8e:e6:0f:58:9f:
b5:70:28:4e:30:77:af:2b:ff:48:1d:0a:32:e5:18:
e5:fe:9b:a5:99:7f:77:8a:7a:64:89:2d:ed:f9:f0:
6e:64:1c:9f:b3:89:64:bd:a4:de:85:18:be:7b:ad:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:20:9A:07:9B:06:5B:05:A7:49:09:D1:59:F6:F8:BD:22:E0:47
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/602FC274B0AF11F09EC4FDD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a9:71:75:fb:1b:f5:ab:d9:b5:05:cd:14:72:cb:7a:ab:21:
57:3b:2c:ed:04:97:f1:37:ce:28:6c:69:4b:92:40:f2:b3:b6:
ee:14:5d:1b:21:b7:5b:a1:21:a1:ad:b1:02:bc:7b:84:59:6d:
2e:48:d0:bd:5d:37:a8:6a:c4:2c:30:ce:5a:94:f7:2d:b0:27:
af:08:f7:e3:c5:6e:44:2f:68:e8:9c:fa:ff:fe:3d:cb:98:2a:
88:96:0c:90:7c:de:23:04:e5:00:bd:b9:8e:f3:f7:dc:15:fc:
a8:5c:51:ad:07:7d:11:9b:dc:2a:3f:07:c5:d0:e0:e8:8c:3c:
e3:ae:6e:94:e5:ea:9a:85:76:e6:ad:1c:b2:e5:d4:db:9f:f4:
6d:e7:b7:c1:32:1e:84:2d:0a:8e:4b:af:a1:4b:1b:09:b0:9e:
39:69:7f:a6:1e:85:2d:f6:19:d5:c8:d8:f2:c9:23:30:43:2e:
8b:69:5b:03:d8:19:cc:9e:7a:16:0d:66:44:82:23:82:2f:ca:
d9:aa:7c:ba:73:cd:11:d3:59:61:c3:39:41:1a:5a:e6:50:a0:
db:3f:f0:b3:8b:f8:fe:ec:5c:f2:c9:46:f1:14:45:d3:1d:0e:
e4:c6:25:90:3c:fe:8f:93:0e:16:6b:d7:52:3b:55:49:04:4e:
03:11:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:43:35 2025 by rpki-client