Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DB5ECCF8B30011F0B4C492D6DAE4EC9C.roa
File: DB5ECCF8B30011F0B4C492D6DAE4EC9C.roa (raw, json)
Hash identifier: Gw1NuO9J1Um+XLFMZjRWD0b4R9PnQ3r5qJ+ZUsiLeBg=
Subject key identifier: 30:34:35:2B:3A:4F:8D:49:83:A8:03:0C:66:4B:91:83:C8:0D:2A:C1
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09BE
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DB5ECCF8B30011F0B4C492D6DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 06:47:53 +0000
ROA not before: Mon 27 Oct 2025 06:47:45 +0000
ROA not after: Mon 31 Dec 2035 06:47:45 +0000
asID: 2711
IP address blocks: 165.49.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Nov 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2494 (0x9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 27 06:47:45 2025 GMT
Not After : Dec 31 06:47:45 2035 GMT
Subject: CN=68ff1599-f8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:db:af:40:ef:b3:b4:0f:d5:82:3d:b4:9a:
4a:b3:e4:5e:dd:1f:eb:da:ed:98:0d:80:03:92:a6:
a4:07:c1:8b:e1:a6:74:ae:a7:ca:f8:b6:28:e1:d1:
69:d2:91:d8:17:5e:c3:10:94:42:6d:55:75:ff:ff:
64:f6:27:bb:50:e6:e6:d1:79:3c:d8:a4:4d:7f:54:
cb:8c:21:54:b3:50:3c:f1:3e:11:ba:5d:e3:c5:56:
ff:e6:89:16:20:6f:48:e3:e8:88:38:53:c4:86:d5:
69:37:89:33:ad:48:94:7a:6a:ba:7b:bb:92:7c:98:
59:d9:4d:46:5b:87:6c:79:f1:05:ed:4c:08:cc:6d:
3b:09:77:11:2e:ab:c7:fd:ba:64:96:c1:4b:52:a2:
4a:3e:c0:b9:87:93:47:b5:77:69:4d:31:c9:d3:db:
00:38:c8:64:21:1d:53:7b:37:4e:9d:02:ac:52:81:
28:e1:2c:42:e5:55:07:c4:f0:3e:57:70:56:fb:c6:
4a:5f:15:37:46:fd:3d:9a:25:86:24:47:2a:cb:9d:
16:b9:b4:1f:21:b2:97:9c:8c:8b:92:3c:65:2a:46:
25:d8:c1:b7:8f:fa:ad:11:d3:ba:a3:8b:d8:59:48:
18:61:bc:df:7e:f3:28:c9:39:8b:fd:e1:b0:4d:ba:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:35:2B:3A:4F:8D:49:83:A8:03:0C:66:4B:91:83:C8:0D:2A:C1
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DB5ECCF8B30011F0B4C492D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0e:ca:de:de:24:91:bf:64:cd:83:1b:7c:f4:35:ed:45:cf:
80:b9:6c:f5:c7:b0:94:95:50:47:cd:79:d0:39:8b:94:c8:88:
0b:5b:6a:3f:c7:68:da:2f:48:27:da:15:29:b5:cb:5c:6f:6f:
f5:18:4c:d2:fc:f0:72:49:63:79:40:6c:a7:45:d0:45:57:fc:
22:b3:f9:65:5d:29:7e:79:37:9d:ce:e0:e0:0e:a0:16:3b:7c:
aa:8d:ac:21:b7:f9:c9:4b:e6:37:7c:74:31:b1:c0:3b:3b:62:
c5:d4:c7:b9:5c:2b:30:e4:57:e0:ad:d8:da:69:c9:81:1f:0e:
80:70:81:f9:b8:ae:64:cc:3f:3b:8f:fa:c6:c4:5e:27:9d:1c:
27:db:a6:e3:a9:dc:85:27:d5:cb:67:48:0d:57:5a:ff:15:34:
65:6a:31:68:62:17:e4:bf:f8:4e:a7:ee:63:9e:9a:20:0e:7f:
a8:30:ae:b1:d6:14:a7:ff:7b:d1:03:10:02:48:9a:4f:36:02:
62:01:49:33:99:c9:90:fe:d1:23:80:8b:9e:25:ed:7e:ad:30:
a2:e4:23:79:58:50:97:0a:3a:14:28:5d:b2:6c:a7:e2:21:6c:
48:74:e9:2d:c9:4a:c9:51:05:c8:43:de:55:a3:5b:47:fc:b5:
37:4f:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 18:41:21 2025 by rpki-client