Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/69E39DAAA68111F0BE881FE4DAE4EC9C.roa
File: 69E39DAAA68111F0BE881FE4DAE4EC9C.roa (raw, json)
Hash identifier: NrwR5CkO5mb0vC3mbG/t61a4GMk7T5Krnmp7n0KXB6E=
Subject key identifier: AD:D1:9D:29:79:5D:E8:54:67:76:EC:E3:A8:58:D8:1B:F3:F8:1E:8A
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09A7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/69E39DAAA68111F0BE881FE4DAE4EC9C.roa
Signing time: Sat 11 Oct 2025 09:05:21 +0000
ROA not before: Sat 11 Oct 2025 09:05:15 +0000
ROA not after: Mon 31 Dec 2035 09:05:15 +0000
asID: 9304
IP address blocks: 165.49.248.0/24 maxlen: 24
165.49.249.0/24 maxlen: 24
165.49.250.0/24 maxlen: 24
165.49.251.0/24 maxlen: 24
165.49.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471 (0x9a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 11 09:05:15 2025 GMT
Not After : Dec 31 09:05:15 2035 GMT
Subject: CN=68ea1dd1-b729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:c3:f7:36:df:c1:ff:70:11:2c:c7:f8:06:
0b:c7:43:32:bb:d0:d1:dd:e9:5f:57:11:86:d3:3d:
41:a7:9e:1f:27:6c:10:5b:cd:2e:91:14:df:36:cb:
10:b0:c9:bc:d7:06:2c:c5:98:d9:6c:d1:32:07:4a:
63:a1:85:ba:ff:4b:02:35:66:d0:38:6d:03:90:39:
83:10:2d:ce:35:fa:6d:a9:2d:48:ea:06:85:55:33:
92:88:51:cf:de:d5:e1:5a:db:7c:a5:5f:30:c5:cb:
fc:6c:ba:57:dc:4e:37:1a:19:61:dc:da:d8:85:a6:
98:b2:ce:ac:35:d5:7d:98:5e:dd:e1:58:1e:e9:52:
87:22:6c:12:50:6e:c6:9e:d3:0b:1c:15:f2:c4:26:
0d:f1:32:60:7d:e0:e0:4a:a6:8c:54:2a:da:4e:80:
28:e1:e6:ee:0f:bf:a6:2b:35:ad:73:af:c4:51:f2:
28:97:65:7c:d4:be:30:2c:06:07:c2:cc:a9:68:d3:
dc:80:f0:4e:e5:39:67:dc:89:8c:75:07:0b:a2:9c:
e8:c0:5c:32:eb:91:3f:e7:03:41:a2:d9:aa:c5:7c:
69:61:81:f1:8d:e0:17:da:97:93:a0:13:77:77:c7:
de:63:2b:71:85:ce:90:8f:38:ed:60:32:aa:f1:12:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:9D:29:79:5D:E8:54:67:76:EC:E3:A8:58:D8:1B:F3:F8:1E:8A
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/69E39DAAA68111F0BE881FE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.248.0/22
165.49.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:71:be:25:3d:9a:1c:10:11:9c:ba:f0:bc:ec:dd:b2:00:55:
e5:87:00:e1:72:7a:71:89:ea:80:f7:d7:91:2f:d7:19:73:54:
fb:1b:f2:52:38:1d:79:7f:9f:0b:5a:2b:5e:3e:2c:24:8c:fa:
df:7c:e2:b8:c8:0c:7b:71:69:b3:b8:74:49:dc:fc:2a:a5:4a:
49:85:6d:01:da:bb:fb:06:85:0a:ef:b4:7e:b7:5d:13:4a:26:
16:62:49:21:13:e0:44:83:11:24:80:18:5b:dc:ab:59:20:5a:
ad:96:72:06:86:f2:ce:cb:11:93:59:06:0f:29:33:a4:d9:79:
f1:7b:7f:61:b2:13:32:30:2c:4b:bd:02:91:5b:96:18:c2:70:
d7:69:67:95:28:2a:a4:53:79:3a:37:79:2c:bd:d7:b1:b0:4c:
28:9a:6f:6e:20:6f:11:31:be:73:9a:f2:38:77:e0:3d:2f:16:
63:9f:2a:8b:af:1d:d6:d7:8d:67:16:0d:b8:d1:40:7e:c3:ef:
1a:69:15:ff:a0:b8:fe:0d:a5:0f:c4:bb:a7:a8:ff:80:49:81:
50:27:fa:52:bc:a5:fb:46:8e:44:35:19:6f:17:5e:f8:f4:6d:
11:b4:98:1e:96:aa:a9:40:c2:df:e4:b9:98:73:64:c7:32:27:
ab:cb:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:25 2025 by rpki-client