Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28D3170CA22911F0B00EFDAEDAE4EC9C.roa
File: 28D3170CA22911F0B00EFDAEDAE4EC9C.roa (raw, json)
Hash identifier: jLw4H4VTp9qlXOiOVUm4XqjJyS796ZNmIejKDCk/Z04=
Subject key identifier: 1B:28:D2:8B:3F:A8:EC:87:07:A1:1F:AA:70:67:55:6F:4E:AA:12:3F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0FE5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28D3170CA22911F0B00EFDAEDAE4EC9C.roa
Signing time: Sun 05 Oct 2025 20:23:31 +0000
ROA not before: Sun 05 Oct 2025 20:23:24 +0000
ROA not after: Wed 05 Oct 2033 20:23:24 +0000
asID: 61290
IP address blocks: 161.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 27 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4069 (0xfe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 5 20:23:24 2025 GMT
Not After : Oct 5 20:23:24 2033 GMT
Subject: CN=68e2d3c3-5718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:01:2d:01:e4:d7:e7:09:7b:b7:45:e4:f2:
be:f0:92:13:ae:39:fd:e5:37:fd:d7:ca:f2:ff:e1:
55:e0:9d:b7:6d:5a:8b:75:ef:f6:8c:44:a0:70:49:
a2:4e:db:4d:b1:c4:cd:fe:3f:d1:4f:8b:b5:b1:25:
d2:c3:b3:a4:0b:29:0c:37:5f:3e:9b:1c:62:de:c4:
cf:0e:86:dd:70:e4:3f:ea:95:7a:b7:08:f2:99:6e:
7b:ae:ec:53:77:21:cd:33:3e:f5:23:3a:0b:a0:e3:
6a:3a:d9:2d:26:76:26:6c:f8:90:88:44:97:60:ea:
bb:c5:d3:d0:14:16:ed:df:45:b1:db:25:9f:d6:68:
d7:54:75:4c:4a:b1:c2:4a:72:38:79:8f:f5:3d:e9:
29:c7:eb:2e:c5:fd:59:bc:1c:bb:15:2a:5f:6c:ff:
a0:8f:8e:9e:96:30:f9:f5:64:d4:41:d0:4a:60:a5:
84:4b:14:af:a7:0d:b3:63:8f:0a:86:8b:69:c6:4d:
a8:e1:6f:77:eb:01:08:b6:5b:9a:5e:bf:8f:45:49:
a1:34:90:a3:85:ac:0b:71:93:16:7f:f6:ff:e7:07:
2d:64:d0:fd:b6:27:d8:b0:d1:4f:63:82:30:00:7f:
c3:55:26:1a:c0:dc:fb:d7:ef:35:c8:03:89:23:92:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:D2:8B:3F:A8:EC:87:07:A1:1F:AA:70:67:55:6F:4E:AA:12:3F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28D3170CA22911F0B00EFDAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:af:6a:f3:56:55:6e:ef:d0:ad:e7:6b:67:3d:cd:f7:68:e2:
5d:57:84:39:9e:b8:f0:3b:09:d1:26:11:a2:f8:c8:fa:8c:99:
77:d7:30:d6:e5:ad:23:41:fb:8b:c4:3c:c9:41:87:f1:19:5e:
37:67:77:ee:be:1b:50:56:b9:f2:3c:06:bc:3e:bb:e4:77:60:
b6:5f:08:4e:ba:8f:9a:da:27:2d:80:3a:72:ef:44:b1:bc:0a:
53:ef:e8:da:e5:03:9c:dd:5c:92:e7:40:91:db:c7:56:69:7e:
75:ea:57:81:c2:33:fb:68:a0:1f:06:4b:f3:6f:e1:9f:28:39:
c9:53:3e:f6:09:7b:4a:35:18:74:f8:60:53:8d:20:86:ec:62:
77:f3:81:6e:c9:38:21:ba:29:4b:c9:27:db:88:e4:07:f4:2b:
96:fd:bf:6a:68:fc:e0:12:28:25:d8:5a:34:9f:82:18:e8:d2:
3d:41:e4:77:92:f6:54:7a:72:a6:4f:cb:aa:fb:27:9d:86:d2:
ad:39:fa:a0:af:e6:12:47:11:46:d4:63:7c:b2:23:1b:09:d0:
cf:06:4f:91:70:67:4d:17:36:51:9d:fc:e3:2f:dc:26:80:4e:
7f:96:aa:27:b9:aa:35:07:fd:ec:5c:58:8a:ff:a6:3a:c1:56:
38:59:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:55:53 2025 by rpki-client