Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E10D52BA82C611F09E6334D0DAE4EC9C.roa
File: E10D52BA82C611F09E6334D0DAE4EC9C.roa (raw, json)
Hash identifier: M6XEIvWhgNzUJ7APSJjbAd3tx3UkQyG1ty9g9hR1qOA=
Subject key identifier: C4:8B:FC:18:F6:87:70:23:8D:75:73:1E:A4:E6:69:CE:A6:41:5A:AB
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0956
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E10D52BA82C611F09E6334D0DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 21:51:54 +0000
ROA not before: Tue 26 Aug 2025 21:51:49 +0000
ROA not after: Mon 31 Dec 2035 21:51:49 +0000
asID: 37564
IP address blocks: 165.49.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Aug 26 21:51:49 2025 GMT
Not After : Dec 31 21:51:49 2035 GMT
Subject: CN=68ae2c7a-71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:d3:fa:17:67:33:f1:aa:80:bc:83:f5:9a:
bf:f9:d9:07:5f:c3:1d:9d:a3:3b:de:f5:59:4d:6f:
ab:25:6a:21:cc:73:fe:ae:06:45:51:3c:ef:e1:f0:
b5:48:a9:2d:59:16:39:0a:b2:97:8f:09:c6:92:ab:
44:3a:43:02:6c:ce:f7:2f:f1:3f:bb:19:a1:79:c5:
4a:fe:ef:9c:a3:7b:e8:47:4a:48:4d:5b:45:e9:ea:
04:a4:4a:41:83:ce:66:42:ed:bf:44:08:79:da:a5:
4d:93:5d:cd:93:d6:1d:dc:ec:36:87:41:3a:fc:ce:
29:11:bb:9c:2a:27:3a:87:7c:ab:83:ce:56:c4:bf:
91:55:b3:c5:e9:f7:a4:cf:80:77:7f:22:7f:31:ec:
ae:d6:02:9a:0f:36:ae:5d:56:2f:5b:86:c1:b8:31:
72:88:11:85:a4:fd:ed:f9:ba:53:4c:6a:14:1e:12:
67:b7:92:d1:16:06:3a:b8:0c:60:84:50:ef:e8:f6:
83:88:14:93:9d:ca:76:19:4c:9a:39:69:9c:a9:71:
65:ab:dc:7b:0c:43:a0:d2:f3:0a:62:8b:72:42:0c:
f2:e4:e4:08:da:d9:3e:99:e5:15:51:7b:3c:f8:45:
8a:30:b4:16:6f:8e:37:99:b0:4c:69:8d:42:c3:61:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8B:FC:18:F6:87:70:23:8D:75:73:1E:A4:E6:69:CE:A6:41:5A:AB
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E10D52BA82C611F09E6334D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.160.0/19
Signature Algorithm: sha256WithRSAEncryption
05:fc:7f:1d:d9:bd:16:07:d9:50:30:45:f9:0d:2d:12:f3:db:
41:6f:97:5d:31:d9:ee:c9:41:aa:28:c8:7a:99:45:48:2d:ee:
42:39:87:bb:2f:be:45:b0:5e:8a:e5:64:14:45:1a:d9:8e:0e:
b1:9b:8a:59:97:5a:49:23:ee:4b:8b:76:92:dd:df:e0:cc:b0:
1d:f3:bc:b5:45:4f:73:fd:13:d2:0f:c7:5a:59:c7:51:48:79:
d2:d6:15:a4:ef:15:7c:67:c6:8e:ba:68:a4:2c:26:35:38:7b:
01:02:60:bc:8a:d3:61:ce:02:50:2a:b2:9e:68:90:e8:11:41:
23:3b:c5:6b:9b:8e:09:95:e9:1a:4a:df:72:8f:94:ee:26:ef:
f9:3b:f9:2b:22:3b:52:07:b8:8f:c1:d3:f7:6a:16:6d:89:66:
bd:df:3a:58:ec:41:77:ab:16:29:32:80:4d:41:b6:96:36:42:
b2:17:1c:a9:cf:9f:b2:16:ad:0e:e9:31:5d:f2:93:15:7d:98:
3a:07:fa:d9:5a:aa:4a:59:b2:39:6e:99:98:a9:4c:8d:83:d3:
45:66:69:08:a0:77:c8:f6:45:6f:23:5d:b0:0c:5e:93:19:20:
82:e5:e2:ea:21:bc:79:fa:3d:c4:d8:49:9c:ec:35:31:cc:cf:
6c:11:a0:37
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTA4MjYyMTUxNDlaFw0zNTEyMzEyMTUxNDlaMBgxFjAU
BgNVBAMTDTY4YWUyYzdhLTcxYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqK9P6F2cz8aqAvIP1mr/52Qdfwx2dozve9VlNb6slaiHMc/6uBkVRPO/h
8LVIqS1ZFjkKspePCcaSq0Q6QwJszvcv8T+7GaF5xUr+75yje+hHSkhNW0Xp6gSk
SkGDzmZC7b9ECHnapU2TXc2T1h3c7DaHQTr8zikRu5wqJzqHfKuDzlbEv5FVs8Xp
96TPgHd/In8x7K7WApoPNq5dVi9bhsG4MXKIEYWk/e35ulNMahQeEme3ktEWBjq4
DGCEUO/o9oOIFJOdynYZTJo5aZypcWWr3HsMQ6DS8wpii3JCDPLk5Aja2T6Z5RVR
ezz4RYowtBZvjjeZsExpjULDYTd9AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUxIv8
GPaHcCONdXMepOZpzqZBWqswHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0UxMEQ1MkJBODJDNjExRjA5RTYzMzREMERBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWlMaAwDQYJKoZIhvcNAQELBQAD
ggEBAAX8fx3ZvRYH2VAwRfkNLRLz20Fvl10x2e7JQaooyHqZRUgt7kI5h7svvkWw
XorlZBRFGtmODrGbilmXWkkj7kuLdpLd3+DMsB3zvLVFT3P9E9IPx1pZx1FIedLW
FaTvFXxnxo66aKQsJjU4ewECYLyK02HOAlAqsp5okOgRQSM7xWubjgmV6RpK33KP
lO4m7/k7+SsiO1IHuI/B0/dqFm2JZr3fOljsQXerFikygE1BtpY2QrIXHKnPn7IW
rQ7pMV3ykxV9mDoH+tlaqkpZsjlumZipTI2D00VmaQigd8j2RW8jXbAMXpMZIILl
4uohvHn6PcTYSZzsNTHMz2wRoDc=
-----END CERTIFICATE-----
Generated at Tue Sep 16 04:50:21 2025 by rpki-client