Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D029DDE687C211F0B64D51F1DAE4EC9C.roa
File: D029DDE687C211F0B64D51F1DAE4EC9C.roa (raw, json)
Hash identifier: Ka4fcI+kyD+nuQVaoawnClJtqijPiNdnbRrXBk2KPL0=
Subject key identifier: 0F:CA:44:51:07:5D:6F:16:CC:BF:47:4F:20:B3:AC:59:C4:B0:3E:32
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0963
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D029DDE687C211F0B64D51F1DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 06:05:24 +0000
ROA not before: Tue 02 Sep 2025 06:05:17 +0000
ROA not after: Mon 31 Dec 2035 06:05:17 +0000
asID: 329386
IP address blocks: 165.49.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Sep 2 06:05:17 2025 GMT
Not After : Dec 31 06:05:17 2035 GMT
Subject: CN=68b68924-c495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:61:4c:e8:eb:a0:89:a9:35:5e:24:d7:9d:
1c:b4:e7:70:fb:7f:6d:86:5a:4f:de:68:65:ab:03:
d1:da:07:11:00:f1:2e:64:31:74:ee:c9:25:21:9f:
e0:1e:aa:23:55:be:6e:46:a7:29:f4:bf:a2:df:28:
16:84:94:55:30:96:65:98:1a:af:ec:cd:47:ca:c4:
3f:c5:7c:76:1c:e4:dc:97:4e:62:99:6e:03:09:52:
ec:7c:63:88:52:08:81:75:a3:46:50:5e:39:72:65:
d1:20:da:31:e0:1d:fa:d0:13:47:ea:82:26:e4:1c:
e8:f1:c9:17:0b:9f:89:8f:d7:df:75:0e:0a:07:3f:
b3:b3:a3:e1:07:e2:cf:40:5e:87:56:9b:e3:21:33:
86:00:aa:f1:38:f8:37:96:77:49:4e:43:96:51:cd:
b4:59:71:0e:a2:da:99:50:23:ee:6e:6c:0e:f8:f9:
e3:28:c4:20:46:ce:27:6d:3a:d5:96:a2:3d:91:36:
50:e7:f0:f1:d8:70:f6:68:ae:cc:1b:cf:e9:c4:28:
72:b6:3d:c4:0f:1f:c9:07:52:cf:1e:23:2a:a5:83:
2e:ae:d9:01:64:1a:51:34:ae:fb:0c:b8:ce:d8:49:
ea:4e:ff:4f:56:cf:04:37:26:31:f7:97:14:67:32:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CA:44:51:07:5D:6F:16:CC:BF:47:4F:20:B3:AC:59:C4:B0:3E:32
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D029DDE687C211F0B64D51F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.215.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2a:3e:bf:96:c7:bf:de:c4:ef:98:ca:c1:c0:2b:b6:f2:8b:
62:06:24:1f:64:64:27:b0:f7:ec:1b:3b:73:16:64:80:e2:85:
07:d5:c4:34:a9:78:e5:b7:69:ba:53:e1:01:cd:00:5e:83:67:
93:c8:10:83:f0:f5:0d:d4:a8:cd:d8:00:a5:be:28:ed:e4:8f:
6b:3d:a4:9d:e6:40:1c:08:77:e1:dc:d8:ba:ae:e3:9e:b4:9d:
de:65:ea:5f:85:cd:9a:da:d1:eb:7f:b0:78:58:55:bf:49:b5:
62:6a:af:ab:f3:82:c5:9a:86:32:48:d1:f2:e5:b5:6d:58:d8:
96:d0:6d:d4:94:89:e1:eb:0e:29:9e:27:5a:29:80:e1:60:2f:
83:dc:f7:53:98:b9:44:7a:73:23:20:a3:67:38:94:39:1f:5e:
85:4a:78:5c:75:79:72:19:f7:cc:46:00:ae:ff:27:71:58:75:
a0:9a:fe:1f:05:60:ca:41:54:1f:50:af:04:8b:7d:36:65:9f:
28:13:9f:3c:a7:7f:6b:d8:9b:d8:d7:84:ef:da:e7:50:3c:78:
73:16:95:8c:9c:18:c1:be:b9:ad:f0:9f:25:6f:07:c3:f1:49:
39:33:cc:2f:69:28:6f:51:da:47:7f:08:06:8b:e4:55:fa:75:
51:90:d6:29
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTA5MDIwNjA1MTdaFw0zNTEyMzEwNjA1MTdaMBgxFjAU
BgNVBAMTDTY4YjY4OTI0LWM0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDwHmFM6Ougiak1XiTXnRy053D7f22GWk/eaGWrA9HaBxEA8S5kMXTuySUh
n+AeqiNVvm5Gpyn0v6LfKBaElFUwlmWYGq/szUfKxD/FfHYc5NyXTmKZbgMJUux8
Y4hSCIF1o0ZQXjlyZdEg2jHgHfrQE0fqgibkHOjxyRcLn4mP1991DgoHP7Ozo+EH
4s9AXodWm+MhM4YAqvE4+DeWd0lOQ5ZRzbRZcQ6i2plQI+5ubA74+eMoxCBGzidt
OtWWoj2RNlDn8PHYcPZorswbz+nEKHK2PcQPH8kHUs8eIyqlgy6u2QFkGlE0rvsM
uM7YSepO/09WzwQ3JjH3lxRnMgTRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUD8pE
UQddbxbMv0dPILOsWcSwPjIwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0QwMjlEREU2ODdDMjExRjBCNjRENTFGMURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMdcwDQYJKoZIhvcNAQELBQAD
ggEBAAMqPr+Wx7/exO+YysHAK7byi2IGJB9kZCew9+wbO3MWZIDihQfVxDSpeOW3
abpT4QHNAF6DZ5PIEIPw9Q3UqM3YAKW+KO3kj2s9pJ3mQBwId+Hc2Lqu4560nd5l
6l+FzZra0et/sHhYVb9JtWJqr6vzgsWahjJI0fLltW1Y2JbQbdSUieHrDimeJ1op
gOFgL4Pc91OYuUR6cyMgo2c4lDkfXoVKeFx1eXIZ98xGAK7/J3FYdaCa/h8FYMpB
VB9QrwSLfTZlnygTnzynf2vYm9jXhO/a51A8eHMWlYycGMG+ua3wnyVvB8PxSTkz
zC9pKG9R2kd/CAaL5FX6dVGQ1ik=
-----END CERTIFICATE-----
Generated at Tue Sep 16 03:01:09 2025 by rpki-client