Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/7D59CC5CB2B011F09C79E0CBDAE4EC9C.roa
File: 7D59CC5CB2B011F09C79E0CBDAE4EC9C.roa (raw, json)
Hash identifier: ciMAnSRFb1RAh00SyY2+AZRm5zIar3kt01Ckcd7m8rU=
Subject key identifier: 08:A5:E5:66:F0:F8:E5:8B:0F:29:0C:E5:75:06:8E:BA:A3:FA:51:CB
Certificate issuer: /CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Certificate serial: 0BC4
Authority key identifier: AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
Authority info access: rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/7D59CC5CB2B011F09C79E0CBDAE4EC9C.roa
Signing time: Sun 26 Oct 2025 21:12:34 +0000
ROA not before: Sun 26 Oct 2025 21:12:26 +0000
ROA not after: Mon 01 Mar 2027 21:12:26 +0000
asID: 37314
IP address blocks: 165.16.128.0/19 maxlen: 19
165.16.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl
rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.mft
rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368B07FAR, serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Validity
Not Before: Oct 26 21:12:26 2025 GMT
Not After : Mar 1 21:12:26 2027 GMT
Subject: CN=68fe8ec2-6977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:2c:67:b0:d7:dd:b5:83:29:67:b7:f8:8d:
bd:a5:61:3e:77:67:a0:cf:4b:5f:78:e2:89:f5:9f:
29:bd:40:5c:0b:44:68:47:42:11:46:ba:ab:2f:01:
cb:20:ef:29:32:95:27:22:86:c6:d1:40:bd:1b:fc:
5f:9c:b9:36:8b:22:96:47:3c:11:d2:21:76:23:0f:
5d:ac:8c:c6:f5:b8:f3:1d:09:30:e4:b6:f9:87:16:
de:76:6b:02:fa:71:9b:0b:3e:c9:f1:53:e5:72:51:
30:eb:3e:5f:0e:1d:cd:c9:f2:5a:54:f9:8b:0c:45:
8d:42:d9:ad:2e:e6:50:14:e5:cc:2f:65:47:e7:0d:
e6:33:25:3e:2e:bf:9a:df:99:41:00:88:bf:5e:e0:
21:8c:6a:7a:d9:c9:96:48:71:57:0a:ac:80:a3:bc:
a4:66:c4:00:bf:aa:78:c8:f4:d6:e1:93:25:ed:98:
e5:ce:32:0f:df:18:e9:13:93:8c:f5:d6:01:d3:a6:
c6:d5:59:ce:d6:b3:ff:5b:3c:df:37:73:11:92:80:
6a:3f:ab:4f:d3:36:fc:8d:98:c4:bb:25:f1:dd:81:
16:a1:bd:51:38:58:0f:20:3b:b9:a9:6e:96:d1:47:
a4:0d:1d:0b:0c:81:b0:78:92:1a:e5:7d:97:81:90:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:E5:66:F0:F8:E5:8B:0F:29:0C:E5:75:06:8E:BA:A3:FA:51:CB
X509v3 Authority Key Identifier:
keyid:AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/7D59CC5CB2B011F09C79E0CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:2b:c6:3f:b9:99:0b:34:07:99:65:59:4e:77:77:09:71:a8:
2b:5a:fd:3d:ce:6c:fa:2e:c7:8a:7c:c0:e4:92:af:6a:ad:b9:
3e:8c:da:ee:2f:6c:93:d1:db:09:db:37:8b:e1:d3:06:da:a5:
aa:17:4b:e8:e2:a2:3a:44:58:31:20:91:45:9d:f4:72:75:23:
98:d1:41:05:2e:81:d2:dd:73:be:b7:60:33:c9:01:0e:ef:ef:
29:5e:f8:93:42:99:47:5e:31:95:06:70:9e:d1:f8:e0:70:e5:
2e:d3:90:70:71:4b:91:9f:90:12:54:f3:a2:25:ad:c0:e3:7f:
6f:e2:16:a8:40:43:83:65:0d:58:70:e9:c1:d3:74:16:c6:ac:
ea:59:d9:4f:9a:07:aa:97:54:0d:04:e4:b2:4b:e7:c9:11:68:
31:21:6c:78:51:08:91:ba:9a:08:ec:0a:96:bd:f4:0c:10:23:
fe:d1:d7:f4:c7:48:16:f1:fa:d3:6b:7e:9a:4f:b2:e5:eb:a2:
d4:56:2e:39:ba:1b:d7:d2:66:45:6c:52:5f:af:a6:bc:7b:64:
ff:23:df:3d:fd:f9:5b:78:4b:0f:29:a2:38:c8:77:bb:18:7f:
26:5c:15:01:e9:0c:41:cc:e4:ea:a5:84:77:dc:6f:a7:86:69:
f9:c8:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:19:49 2025 by rpki-client