Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/17B754446C3F11F08688B2F4DAE4EC9C.roa
File: 17B754446C3F11F08688B2F4DAE4EC9C.roa (raw, json)
Hash identifier: qm3hCXVI7tk39VcX2QW9+dL27TwaBswJ1QwTfoLlR04=
Subject key identifier: 22:F6:B2:04:FB:29:FB:BC:C0:9A:BF:57:00:9D:5A:30:3B:12:86:5A
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0910
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/17B754446C3F11F08688B2F4DAE4EC9C.roa
Signing time: Tue 29 Jul 2025 05:44:29 +0000
ROA not before: Tue 29 Jul 2025 05:44:24 +0000
ROA not after: Mon 31 Dec 2035 05:44:24 +0000
asID: 13347
IP address blocks: 165.49.84.0/24 maxlen: 24
165.49.85.0/24 maxlen: 24
165.49.86.0/24 maxlen: 24
165.49.87.0/24 maxlen: 24
165.49.111.0/24 maxlen: 24
165.49.112.0/24 maxlen: 24
165.49.113.0/24 maxlen: 24
165.49.114.0/24 maxlen: 24
165.49.115.0/24 maxlen: 24
165.49.117.0/24 maxlen: 24
165.49.118.0/24 maxlen: 24
165.49.121.0/24 maxlen: 24
165.49.122.0/24 maxlen: 24
165.49.123.0/24 maxlen: 24
165.49.124.0/24 maxlen: 24
165.49.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 29 05:44:24 2025 GMT
Not After : Dec 31 05:44:24 2035 GMT
Subject: CN=68885fbd-68e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:a2:94:87:53:15:26:25:f3:4c:54:22:aa:
c4:26:3e:9d:0f:38:89:0a:39:0a:9d:c5:a0:19:77:
b8:fb:a8:d0:6f:2c:ab:43:3c:19:0d:d8:2a:0e:c3:
2a:f5:99:3d:97:64:4b:30:13:dd:7d:ba:a6:04:39:
b2:ce:1e:ba:e7:6c:f1:0c:41:4d:f6:e5:65:18:24:
c5:0c:0c:94:ea:26:3b:8b:43:fa:63:ed:b3:58:00:
0b:88:f9:6f:3e:99:ec:9e:4b:e7:45:ca:26:94:60:
d5:ae:01:6f:55:58:dd:7e:a1:af:42:f9:aa:e3:a5:
5b:06:d5:db:32:8f:0e:b4:e8:ae:2b:a5:51:9d:4e:
74:93:08:a9:4b:4d:2d:81:f5:d1:79:74:45:3c:e9:
1c:15:74:c6:3e:8e:90:89:6f:7c:57:39:09:04:b1:
e2:a0:de:1e:4b:ee:17:4a:f3:d0:52:dd:92:97:ba:
16:10:5d:ea:53:0c:fa:d7:df:00:2c:e2:a7:72:15:
8b:8b:64:bf:ac:af:51:a8:30:06:80:51:07:b3:5d:
eb:2f:e6:2f:57:fa:78:9e:e1:c6:2b:37:75:02:e4:
e6:e3:51:cc:9a:53:b9:36:f0:4a:63:f5:08:b6:51:
3c:da:62:b2:94:11:71:1f:8b:fe:c6:3c:03:59:f6:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F6:B2:04:FB:29:FB:BC:C0:9A:BF:57:00:9D:5A:30:3B:12:86:5A
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/17B754446C3F11F08688B2F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.84.0/22
165.49.111.0-165.49.115.255
165.49.117.0-165.49.118.255
165.49.121.0-165.49.125.255
Signature Algorithm: sha256WithRSAEncryption
7a:02:d7:8e:b4:26:97:80:00:8b:01:2f:96:df:98:62:60:bf:
dc:d4:e0:fe:1f:66:4f:b8:0b:76:c2:91:8f:e2:c6:7b:2d:70:
77:2f:c8:df:85:ad:13:35:63:12:70:cc:9a:7d:76:6b:e8:20:
d2:73:87:47:7a:05:8a:1f:61:7c:0c:20:ec:2d:ea:08:9d:fa:
5c:c9:18:8d:6e:49:43:95:09:92:67:32:87:54:df:3f:61:fb:
68:f3:61:29:6a:02:fb:a1:d9:c4:52:62:f8:7e:cc:37:90:e2:
fd:04:40:83:e5:3b:0e:93:25:e4:89:28:ea:59:ec:f6:7b:59:
f5:ba:82:c6:d7:93:b4:de:a1:4f:5b:0f:ee:fc:42:5b:1b:26:
e5:a0:c7:9b:ec:ac:7b:9d:cb:80:a9:c0:af:08:18:5e:7b:58:
4e:cd:81:e3:ce:df:f7:6a:b7:95:43:0c:c5:e1:8b:46:89:0a:
71:d4:3d:3c:35:a1:ff:8f:60:93:32:05:30:c8:42:ee:b1:40:
d7:13:a0:80:4e:2b:76:3e:1a:99:2b:3e:eb:e9:9a:7d:ed:2a:
6c:b9:25:39:54:9c:a3:f6:7d:00:38:4f:92:66:a5:52:43:38:
22:8d:19:62:4a:33:4c:2f:a6:c3:4a:90:bf:12:7f:37:66:15:
a4:b1:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:53 2025 by rpki-client