Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BE7DCBCA8D6711F0951D2F93DAE4EC9C.roa
File: BE7DCBCA8D6711F0951D2F93DAE4EC9C.roa (raw, json)
Hash identifier: GG0euiN31COtoTIA1x9Y8K9XE0ixO3zUiTsqhY1Hqm8=
Subject key identifier: 71:26:1E:6F:EC:FC:4E:54:4A:5F:83:00:02:EF:E4:11:29:7B:1B:8D
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 096F
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BE7DCBCA8D6711F0951D2F93DAE4EC9C.roa
Signing time: Tue 09 Sep 2025 10:28:37 +0000
ROA not before: Tue 09 Sep 2025 10:28:32 +0000
ROA not after: Mon 31 Dec 2035 10:28:32 +0000
asID: 834
IP address blocks: 165.49.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415 (0x96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Sep 9 10:28:32 2025 GMT
Not After : Dec 31 10:28:32 2035 GMT
Subject: CN=68c00155-be86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:e0:60:2b:2e:ec:47:2f:aa:37:21:6a:73:
62:7a:76:ac:80:6b:8d:c2:53:48:19:2b:f5:c3:a2:
97:96:87:36:7e:01:46:3a:6d:ee:8b:7f:8e:31:57:
2a:93:2b:18:ee:1c:2e:b7:a7:b1:f5:2d:75:20:c1:
48:37:3b:ab:a6:4d:00:fa:db:92:f7:6a:59:a4:39:
72:c8:bb:65:ec:5e:ce:f5:6c:23:f4:54:b9:8e:0b:
c6:01:55:99:e4:04:74:be:75:89:d2:e9:7e:6e:a5:
41:84:52:ee:dd:c1:7a:1d:72:d2:f5:1a:85:7f:dc:
4f:16:e3:5d:f6:4c:af:c1:9c:43:27:d8:47:38:f3:
16:8d:5f:36:e5:b2:75:55:45:fe:5a:ec:75:6c:50:
ae:17:37:50:01:5a:77:d8:9d:93:2a:b9:c2:d9:81:
ed:09:1c:a1:57:4f:55:05:cf:94:19:d1:d7:a9:f3:
de:cb:3d:3e:d5:9c:16:83:0c:9a:50:a9:91:2d:a5:
88:b0:17:9a:da:c9:4d:7e:fd:81:18:67:48:10:e1:
f0:b8:0e:4c:ac:fa:f7:a9:d4:91:f1:37:2e:06:aa:
cf:9e:a1:c5:16:11:9f:49:5c:86:1c:c6:27:96:bc:
da:0e:af:5e:ee:84:ac:ab:05:92:ff:6b:8c:83:35:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:26:1E:6F:EC:FC:4E:54:4A:5F:83:00:02:EF:E4:11:29:7B:1B:8D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BE7DCBCA8D6711F0951D2F93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.116.0/24
Signature Algorithm: sha256WithRSAEncryption
11:45:b0:fb:3d:35:57:0e:1f:4b:61:12:84:c6:58:72:5e:2b:
ad:00:dc:fb:fc:99:83:40:30:d5:bb:34:a2:0b:47:ff:f5:73:
6a:c7:ab:41:49:d8:34:ae:36:b9:65:26:ba:6c:46:00:49:8b:
eb:3a:ad:ed:bc:23:14:5b:93:59:8f:af:b8:70:df:92:e7:67:
93:ae:21:94:06:0b:48:91:ee:fa:e1:9d:ef:73:f4:1c:49:79:
ea:93:da:74:e9:6f:93:a5:33:ac:ae:21:0f:7e:54:68:d7:0a:
b2:d7:b5:97:61:b2:89:03:93:65:9d:0e:54:71:1e:ba:ed:64:
f6:b1:07:7f:7a:25:93:34:30:57:38:0b:79:f3:e7:4c:5b:70:
10:f7:a4:bd:d6:6d:eb:a7:7f:8e:67:a7:aa:e2:93:5a:3a:72:
7f:5c:1a:84:38:39:72:f7:a5:04:51:74:7e:c5:17:8d:67:c4:
ad:80:5f:94:1f:b5:73:03:19:b9:27:2e:80:7b:27:3a:90:c6:
fa:c9:8a:bb:c5:d3:c6:4e:e3:45:c6:d4:17:04:62:cf:30:a9:
db:37:df:5e:7e:ad:fe:49:48:13:0c:5b:1d:26:36:f2:5f:ae:
ed:79:05:75:09:8a:bf:c2:d4:e5:84:f8:d9:d2:ae:e2:4a:26:
8a:67:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:55:47 2025 by rpki-client