Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5C652C32A22811F0BF8FA0AADAE4EC9C.roa
File: 5C652C32A22811F0BF8FA0AADAE4EC9C.roa (raw, json)
Hash identifier: gN8zAi+SJHL0R7CpEV8NnECr0LaWEs4VDVDWtWkc2ac=
Subject key identifier: 16:CD:78:23:78:23:A8:EB:93:F4:85:1F:DF:B8:8C:14:2C:58:25:4F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0FE3
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5C652C32A22811F0BF8FA0AADAE4EC9C.roa
Signing time: Sun 05 Oct 2025 20:17:48 +0000
ROA not before: Sun 05 Oct 2025 20:17:44 +0000
ROA not after: Wed 05 Oct 2033 20:17:44 +0000
asID: 61290
IP address blocks: 161.123.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 27 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4067 (0xfe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 5 20:17:44 2025 GMT
Not After : Oct 5 20:17:44 2033 GMT
Subject: CN=68e2d26c-68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:40:eb:e6:1a:33:0d:0e:e4:54:b5:4c:56:
16:5b:68:f5:c7:91:9b:61:0f:ea:cf:94:81:4e:86:
9b:7e:ca:83:eb:aa:15:d8:e4:a9:37:f9:9f:d6:6f:
a7:53:4f:f8:78:e0:ed:fb:ff:e4:82:cd:39:6a:6a:
1d:0d:29:48:e9:62:39:63:ea:08:aa:b4:c3:f5:5b:
f4:a0:46:65:60:11:f5:03:55:36:3e:07:85:fe:64:
bb:57:e6:6a:60:93:58:71:dc:35:2c:59:b1:76:45:
8f:c0:03:7a:93:12:ac:5f:cc:0c:90:30:e3:77:46:
66:f1:c4:f3:0b:2d:aa:fc:c8:33:38:a2:a4:cc:65:
be:78:d9:f6:91:8e:99:7a:7a:fa:93:96:d5:b8:5a:
70:6e:7b:cf:2a:80:1b:dc:99:e7:40:18:e2:13:f3:
46:5c:21:69:19:51:63:95:42:f2:91:18:25:e5:2c:
cb:15:62:61:18:d2:74:0b:88:f1:91:1d:4c:11:34:
b9:a5:43:8a:d2:57:e9:33:52:4f:aa:ab:0e:d9:f6:
58:ea:6c:6c:a9:b0:d7:32:a7:c9:ea:f7:f2:09:d3:
46:7a:61:5f:ef:29:af:0a:12:09:57:86:3e:ab:25:
da:6f:91:bc:77:56:df:8f:86:0b:1e:d6:a4:84:58:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CD:78:23:78:23:A8:EB:93:F4:85:1F:DF:B8:8C:14:2C:58:25:4F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5C652C32A22811F0BF8FA0AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:96:1b:62:1b:ba:26:3a:8b:4e:b8:c9:d0:70:7b:3c:93:f0:
9e:ba:7a:9e:b9:4e:9d:46:70:cf:35:e0:f5:63:36:54:03:8f:
56:50:d3:0f:59:7e:d5:06:cd:6d:a4:b5:6f:5f:37:22:e7:b7:
01:8e:75:0c:9d:e4:4e:23:ff:f0:15:ac:fb:b5:f7:91:e9:fe:
d3:92:3a:db:b8:a3:d3:ec:86:bd:85:65:57:7a:0d:2e:e3:b2:
af:4f:77:19:ed:07:99:e1:c9:85:71:60:57:17:01:56:bc:15:
4a:cd:bf:8b:89:1d:c9:87:1d:6e:60:41:80:d5:15:03:21:9f:
73:37:31:e0:6b:ff:32:03:1b:09:bc:b0:53:e5:cf:dc:09:92:
95:1c:70:f1:06:bf:19:e9:52:99:40:57:42:75:a6:b1:e6:2e:
48:91:58:9d:37:38:ff:07:a2:10:7e:c0:4b:34:8b:91:a1:f0:
94:55:49:00:6f:09:72:c3:4a:9c:c8:9b:82:5c:dd:f1:1e:c2:
e5:c5:72:52:91:48:a9:9c:c9:77:7c:ee:64:76:1d:a1:43:5f:
09:44:9d:19:a0:ff:40:2a:b1:41:8b:69:ed:16:a1:a1:09:58:
f8:13:7d:27:2f:29:8f:d5:fa:d9:11:64:9f:07:45:bf:c5:ca:
9c:cd:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:55:53 2025 by rpki-client