Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/9D22754482C611F09B02F3CCDAE4EC9C.roa
File: 9D22754482C611F09B02F3CCDAE4EC9C.roa (raw, json)
Hash identifier: 28wzQ2i+FnSExhI97gWmIlGtazzQPqALWQbtdRK6W3A=
Subject key identifier: 54:6C:BD:33:1A:68:FC:3F:F7:5D:7B:C2:15:ED:4F:CD:5C:BB:48:FD
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0954
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/9D22754482C611F09B02F3CCDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 21:50:00 +0000
ROA not before: Tue 26 Aug 2025 21:49:55 +0000
ROA not after: Mon 31 Dec 2035 21:49:55 +0000
asID: 37564
IP address blocks: 165.49.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 26 21:49:55 2025 GMT
Not After : Dec 31 21:49:55 2035 GMT
Subject: CN=68ae2c08-4555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:a6:48:b1:f0:47:4c:0e:b7:31:b8:37:7a:
fb:4f:a8:c4:20:a9:3a:a4:6d:01:f4:0a:21:38:4a:
d3:a7:11:27:4e:e9:28:96:2f:df:79:bc:02:69:f8:
e7:41:8d:eb:8d:50:28:c3:7a:92:f2:5e:24:0d:3b:
09:93:da:b7:1d:2d:a5:f2:0c:c0:b6:81:d0:76:83:
be:43:59:e7:94:bc:d4:06:c3:e8:66:dd:2b:4c:12:
6e:b4:2e:95:1d:9b:78:ce:8c:97:09:7d:33:69:56:
8d:51:9d:44:d1:49:50:1a:ca:c0:cb:fd:9a:8c:ee:
95:bc:39:b4:6e:d9:c8:ef:f3:ef:b6:28:1f:ed:d2:
2c:93:65:43:fa:59:00:83:f7:8d:fc:6f:fa:77:80:
8d:85:21:ff:ed:81:5f:89:a0:7b:02:15:96:f0:41:
3d:21:9b:5c:f1:a4:3b:20:7e:b5:4e:99:b6:49:1c:
21:df:ca:6f:58:ba:54:93:b8:40:d8:ed:ff:65:f3:
e9:69:f6:c4:fd:07:b4:1d:44:be:12:7f:51:fe:2a:
e3:17:6e:1a:75:df:89:87:dc:65:84:2e:bb:a2:9a:
e2:4d:a1:57:bc:a3:b5:1b:20:5e:15:05:23:13:0c:
8b:4e:17:3b:45:cb:a4:48:7e:c7:dc:bd:06:b4:10:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:BD:33:1A:68:FC:3F:F7:5D:7B:C2:15:ED:4F:CD:5C:BB:48:FD
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/9D22754482C611F09B02F3CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.128.0/19
Signature Algorithm: sha256WithRSAEncryption
53:54:b9:65:76:de:f5:90:e2:63:cf:e1:54:97:11:7f:a3:10:
e2:93:2f:50:3c:e0:d4:d7:96:62:dc:45:da:1a:45:cf:62:a5:
f6:1f:1d:d4:0f:40:d5:e1:38:12:7c:ed:47:8c:88:a9:d0:fb:
c5:fe:6d:b8:f4:af:98:3b:21:98:93:05:46:91:98:b6:da:5e:
2e:f4:6a:c9:da:bc:95:ce:72:95:a6:98:b3:8f:5a:7f:5e:e0:
99:72:82:f3:ff:48:d6:f0:e5:66:6d:9c:33:3e:55:c8:d5:0b:
80:94:64:5c:87:d5:5e:08:e8:26:7f:c0:68:94:b8:c2:1d:e6:
9d:a2:37:71:3c:60:b7:c3:96:67:79:23:20:76:73:8a:1b:49:
cd:bd:07:e5:12:5d:7b:59:bc:60:9b:06:8d:e6:de:06:90:b0:
a8:ed:6d:27:36:61:7a:8c:38:a4:bb:83:e3:1e:9e:52:df:e4:
9e:d2:93:e9:e4:4d:4d:62:16:18:0c:2f:8d:4c:2b:8a:4c:af:
01:2a:27:d3:9f:5e:ff:af:be:4f:26:f6:27:3d:fb:f8:99:58:
7a:56:24:89:8b:ef:d8:13:d9:88:78:cd:48:b7:67:2d:e4:ba:
c3:5a:5e:6a:b0:a5:0d:d1:0f:31:a9:b3:4f:ad:d5:de:ba:02:
e1:97:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:00:18 2025 by rpki-client