Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FF5ECF38693911F08B7063C6DAE4EC9C.roa
File: FF5ECF38693911F08B7063C6DAE4EC9C.roa (raw, json)
Hash identifier: q/DHBdL8m0/qjlrYugFVmbdO7kz4K527n1ht6SY8+uo=
Subject key identifier: F6:67:A6:83:C6:D7:B6:46:42:AE:7D:E9:7B:95:3E:07:7F:45:92:27
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0901
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FF5ECF38693911F08B7063C6DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 09:30:27 +0000
ROA not before: Fri 25 Jul 2025 09:30:22 +0000
ROA not after: Mon 31 Dec 2035 09:30:22 +0000
asID: 6079
IP address blocks: 165.49.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 25 09:30:22 2025 GMT
Not After : Dec 31 09:30:22 2035 GMT
Subject: CN=68834eb3-82cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:15:6c:d0:04:5e:28:e5:24:4f:74:d3:c9:
a9:59:fa:f9:28:50:bc:fd:07:75:8a:cf:b0:93:ff:
23:9b:19:4a:ce:af:8f:3e:11:92:2c:a0:81:af:66:
a8:fa:02:19:de:ea:94:29:8e:ad:c4:15:03:d0:43:
b8:7c:6f:91:d0:51:10:e7:fb:e4:51:43:e2:e8:ef:
92:10:c5:ca:16:16:72:46:7d:7d:96:c1:ff:c6:a0:
76:a9:b8:4e:91:5e:eb:51:7f:c8:c8:7c:d3:f5:5c:
c0:0a:c4:8a:b5:e8:46:a3:96:c5:63:95:d0:d9:27:
27:41:eb:8a:4d:cf:bf:d9:43:b9:51:60:71:4d:81:
a4:9e:e6:d2:70:b2:80:34:6f:6d:17:fc:e8:73:8b:
19:1e:33:16:d0:67:9b:f9:c4:80:fa:e6:59:2f:8d:
90:47:76:6b:d4:16:22:fb:6b:bc:71:e8:a5:03:91:
7d:4c:e7:5c:70:9c:96:30:14:3a:8e:b8:30:c6:78:
22:75:d1:5f:47:7c:de:3f:de:07:4a:94:c7:bb:e7:
10:d1:8d:2a:81:40:7e:c7:13:7c:80:bc:91:07:8d:
46:9d:cc:71:be:49:8d:b9:8c:1d:bb:a9:b6:a9:96:
4f:fc:59:a2:0c:d8:6c:0a:b3:17:e5:5f:96:16:33:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:A6:83:C6:D7:B6:46:42:AE:7D:E9:7B:95:3E:07:7F:45:92:27
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FF5ECF38693911F08B7063C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.65.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2b:da:47:40:a5:21:aa:82:a6:a6:44:f2:b7:95:0d:af:53:
42:f8:85:75:a0:24:d4:b4:32:d1:a1:65:38:87:fb:70:01:c2:
ee:d7:75:c9:8c:0f:da:74:5d:92:ca:72:aa:75:60:80:f3:b4:
92:ca:52:f5:ad:5c:3e:cc:1e:53:ef:94:5f:ca:27:aa:54:e5:
f9:95:d7:63:87:8a:8b:ba:aa:56:89:1a:65:1b:8f:48:40:47:
e0:ff:1b:74:62:96:65:98:30:63:dd:b4:83:d9:d4:c1:5a:16:
3d:d3:a0:9f:61:dc:13:2d:7b:ca:1e:29:bd:1f:f3:b7:59:a0:
66:e2:b0:9f:4a:7c:95:12:77:4c:6f:95:cb:09:be:63:61:c4:
1a:54:ea:54:f2:a8:28:38:15:b2:4c:ac:ab:e7:19:67:75:01:
39:80:95:ea:78:52:22:d8:a2:72:a2:08:0e:83:69:a7:89:29:
10:df:37:e4:1c:b1:00:c6:83:b6:7f:9f:bd:a1:2e:11:ad:91:
4e:94:c7:00:d0:02:95:31:1a:c5:fc:2d:75:62:a6:45:33:55:
98:5f:d1:05:0e:65:e3:e9:91:75:b1:6e:e5:e9:88:29:8f:25:
06:1d:6c:97:27:b7:10:72:eb:98:65:9e:be:81:5b:6f:4d:42:
5b:9f:68:36
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTA3MjUwOTMwMjJaFw0zNTEyMzEwOTMwMjJaMBgxFjAU
BgNVBAMTDTY4ODM0ZWIzLTgyY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2/BVs0AReKOUkT3TTyalZ+vkoULz9B3WKz7CT/yObGUrOr48+EZIsoIGv
Zqj6Ahne6pQpjq3EFQPQQ7h8b5HQURDn++RRQ+Lo75IQxcoWFnJGfX2Wwf/GoHap
uE6RXutRf8jIfNP1XMAKxIq16EajlsVjldDZJydB64pNz7/ZQ7lRYHFNgaSe5tJw
soA0b20X/OhzixkeMxbQZ5v5xID65lkvjZBHdmvUFiL7a7xx6KUDkX1M51xwnJYw
FDqOuDDGeCJ10V9HfN4/3gdKlMe75xDRjSqBQH7HE3yAvJEHjUadzHG+SY25jB27
qbaplk/8WaIM2GwKsxflX5YWMxrLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9mem
g8bXtkZCrn3pe5U+B39FkicwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0ZGNUVDRjM4NjkzOTExRjA4QjcwNjNDNkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMUEwDQYJKoZIhvcNAQELBQAD
ggEBAJMr2kdApSGqgqamRPK3lQ2vU0L4hXWgJNS0MtGhZTiH+3ABwu7XdcmMD9p0
XZLKcqp1YIDztJLKUvWtXD7MHlPvlF/KJ6pU5fmV12OHiou6qlaJGmUbj0hAR+D/
G3RilmWYMGPdtIPZ1MFaFj3ToJ9h3BMte8oeKb0f87dZoGbisJ9KfJUSd0xvlcsJ
vmNhxBpU6lTyqCg4FbJMrKvnGWd1ATmAlep4UiLYonKiCA6DaaeJKRDfN+QcsQDG
g7Z/n72hLhGtkU6UxwDQApUxGsX8LXVipkUzVZhf0QUOZePpkXWxbuXpiCmPJQYd
bJcntxBy65hlnr6BW29NQlufaDY=
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:07 2025 by rpki-client