Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B28992B4A28D11F09B9A3FC8DAE4EC9C.roa
File: B28992B4A28D11F09B9A3FC8DAE4EC9C.roa (raw, json)
Hash identifier: hNdwwiuylT4zaIbpn5vgEG4DS+w5erMY9WPdAcExK2U=
Subject key identifier: 18:07:22:65:1E:D8:B0:C0:2F:2F:AE:C7:5E:00:9F:11:59:86:E4:55
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0FE8
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B28992B4A28D11F09B9A3FC8DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:23:12 +0000
ROA not before: Mon 06 Oct 2025 08:23:07 +0000
ROA not after: Thu 06 Oct 2033 08:23:07 +0000
asID: 327790
IP address blocks: 161.123.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4072 (0xfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 6 08:23:07 2025 GMT
Not After : Oct 6 08:23:07 2033 GMT
Subject: CN=68e37c70-5df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:ac:68:25:b7:c0:ea:95:ef:a0:5b:17:65:
d2:91:92:dc:66:37:31:f9:ac:17:b4:ab:cd:b5:95:
ac:4a:fc:c5:27:9c:57:50:d7:48:31:06:58:4c:d0:
a9:78:92:1b:6e:9b:7f:33:e8:20:b7:df:e8:a9:92:
11:10:45:4d:c5:06:a6:a8:a6:89:ac:17:b0:07:9d:
86:64:65:14:d7:76:eb:71:e4:b2:27:f3:82:33:69:
76:c8:da:cc:9b:97:ea:65:04:f7:c5:33:ab:aa:75:
c9:0f:46:80:51:42:67:65:fa:aa:f9:63:e2:be:44:
cd:d6:ff:cb:d4:f0:99:87:a9:1c:03:2b:e1:49:05:
fc:94:68:33:8e:86:38:94:74:38:af:10:36:31:ca:
9f:13:7e:2e:aa:08:b5:d2:8a:0c:e1:c2:3c:43:77:
19:3c:20:dc:44:73:1f:9e:e0:03:2d:78:5d:f3:0c:
67:b1:dd:02:92:d5:fc:31:07:a2:6e:3f:ef:70:67:
ae:19:6d:5b:df:6e:2b:9c:f0:dc:8f:50:8a:62:25:
99:4c:2e:dd:a2:48:41:c5:76:44:fa:7a:25:2b:83:
62:b1:db:08:b4:73:2b:66:76:e5:91:85:49:c0:a1:
02:ef:10:fa:cf:eb:00:2e:74:9f:76:d5:0c:ba:33:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:07:22:65:1E:D8:B0:C0:2F:2F:AE:C7:5E:00:9F:11:59:86:E4:55
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B28992B4A28D11F09B9A3FC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.66.0/24
Signature Algorithm: sha256WithRSAEncryption
18:76:ba:fb:cf:1c:e3:b2:60:25:29:1f:87:27:dd:4a:06:8c:
5f:ea:d0:f6:1e:37:e9:89:0b:32:57:b2:88:2c:83:45:0d:09:
c2:2c:85:ef:db:19:70:65:ed:ef:7a:45:32:a1:9c:11:0a:05:
43:92:e1:c5:b1:84:29:6f:8a:95:43:b9:9f:a5:1d:82:f0:71:
01:ed:79:48:c3:f7:35:03:e2:d5:f4:8d:fe:c0:56:21:be:0d:
53:1b:ed:eb:7c:ca:7d:6e:ea:6e:fb:66:24:4f:d8:b2:10:84:
0d:ae:e0:b7:b9:8b:78:03:87:2c:e0:e4:ec:ec:df:ba:a1:7c:
d0:61:11:47:75:dd:cd:f1:50:d7:94:5c:52:46:e5:f2:1f:39:
ae:99:b3:1e:7e:b9:a3:d1:a0:97:56:b3:a3:89:3d:56:35:6a:
b4:a7:07:84:4a:1c:56:d7:d7:4e:a6:1b:0b:0b:e2:be:3f:af:
71:88:99:6e:66:63:f5:66:53:b4:f7:ca:8b:36:29:e0:f7:de:
79:b0:78:4a:3a:bf:1f:e3:47:a0:72:74:ba:ee:c6:d8:51:28:
51:43:ec:cb:7d:73:b6:c1:45:4d:89:08:e0:a4:6d:03:76:df:
f3:78:8e:96:ae:ad:2c:02:b9:5f:8e:61:2d:6d:0d:bb:fb:71:
b3:69:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:06 2025 by rpki-client