Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/31CCB514B30111F0BE4D37D7DAE4EC9C.roa
File: 31CCB514B30111F0BE4D37D7DAE4EC9C.roa (raw, json)
Hash identifier: +zXIMuNZrgv4NiPKJoLSwx2jLpnfLke7Bop4SYHhDOM=
Subject key identifier: 89:B3:9B:3F:9D:64:27:57:D6:00:EE:79:08:FA:74:7B:5D:6E:F8:97
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09C0
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/31CCB514B30111F0BE4D37D7DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 06:50:16 +0000
ROA not before: Mon 27 Oct 2025 06:50:12 +0000
ROA not after: Mon 31 Dec 2035 06:50:12 +0000
asID: 9304
IP address blocks: 165.49.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496 (0x9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Oct 27 06:50:12 2025 GMT
Not After : Dec 31 06:50:12 2035 GMT
Subject: CN=68ff1628-79d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:36:2f:f5:2d:2a:13:0b:47:bb:e4:7f:29:
5a:ad:6d:2c:ed:5d:8c:b2:20:73:14:8c:70:30:a4:
7f:de:3f:dd:7f:c9:b8:c8:e5:34:e8:bc:1c:91:96:
b2:78:fe:2e:98:9a:9e:82:5b:fa:56:03:82:41:5b:
3d:95:54:01:8b:5a:ca:6b:73:0f:93:ed:72:6b:67:
22:da:59:dc:7f:1f:6c:ef:08:fc:08:2c:0f:b4:84:
43:11:b1:48:69:03:e0:2d:dc:71:28:91:40:b9:4a:
dc:82:45:8f:aa:47:5c:11:25:06:03:77:c6:a8:86:
83:02:89:89:9c:e9:3f:28:64:47:5a:05:43:ad:4d:
97:a5:a7:9d:9b:f8:5e:38:12:74:60:68:2a:8d:dc:
20:d1:80:23:47:18:26:99:16:b2:50:55:3b:0d:be:
df:18:b1:85:1d:52:8e:7c:1b:ae:0f:6c:3b:db:e4:
79:95:7f:99:89:df:bd:6a:1d:c1:f4:c0:d2:07:33:
3c:28:8b:ca:ea:9f:4f:bb:d4:5a:f9:1a:94:a6:82:
f6:61:9c:02:65:9f:c1:12:83:9c:82:6e:e0:12:b0:
4a:ed:d9:43:2b:69:81:5e:df:8d:d2:01:73:8a:ca:
66:b5:ce:76:f3:c8:d3:28:eb:5d:e8:66:7a:3f:ba:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:9B:3F:9D:64:27:57:D6:00:EE:79:08:FA:74:7B:5D:6E:F8:97
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/31CCB514B30111F0BE4D37D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.224.0/24
Signature Algorithm: sha256WithRSAEncryption
45:92:56:3a:05:7c:bd:f4:40:ad:f4:32:3e:70:a1:7c:d5:2d:
1a:ca:b8:8d:00:db:fa:7e:a7:86:ae:36:25:88:d5:3c:29:d1:
f9:89:9c:66:fe:0d:c6:55:3c:17:a7:96:0e:70:bb:7d:fd:e9:
15:f3:68:3d:84:45:54:4f:27:ae:37:6a:73:18:ef:1b:7a:5d:
9e:45:c2:18:91:ab:07:45:99:39:fc:6f:95:17:ae:19:30:b2:
14:b3:cc:85:65:47:1a:05:9c:1f:c4:fa:69:48:b4:d2:ae:db:
23:fb:2b:2f:39:fa:20:98:59:18:22:a2:7b:4e:c9:c4:80:93:
2b:8d:38:0b:48:1a:71:9c:73:03:e5:2f:1c:69:b2:25:18:ed:
4b:73:c4:47:4c:11:c9:a9:fb:e9:9f:56:f0:0d:2d:79:8d:8c:
6e:c9:01:64:e9:77:27:79:20:81:72:33:e1:e1:77:4d:35:37:
54:c1:51:46:b3:05:31:15:99:fa:98:f2:62:8c:f7:93:f2:5c:
67:0b:e3:7b:5a:4c:35:90:9a:af:b5:1e:4d:8f:0a:30:cf:91:
1e:8d:80:83:68:52:ba:d9:3c:81:61:c5:86:80:b3:6c:d0:71:
bb:19:b4:45:f8:d0:42:1d:7f:23:fc:f5:dd:6b:73:a1:50:87:
99:ed:c4:d0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTEwMjcwNjUwMTJaFw0zNTEyMzEwNjUwMTJaMBgxFjAU
BgNVBAMTDTY4ZmYxNjI4LTc5ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDZDYv9S0qEwtHu+R/KVqtbSztXYyyIHMUjHAwpH/eP91/ybjI5TTovByR
lrJ4/i6Ymp6CW/pWA4JBWz2VVAGLWsprcw+T7XJrZyLaWdx/H2zvCPwILA+0hEMR
sUhpA+At3HEokUC5StyCRY+qR1wRJQYDd8aohoMCiYmc6T8oZEdaBUOtTZelp52b
+F44EnRgaCqN3CDRgCNHGCaZFrJQVTsNvt8YsYUdUo58G64PbDvb5HmVf5mJ371q
HcH0wNIHMzwoi8rqn0+71Fr5GpSmgvZhnAJln8ESg5yCbuASsErt2UMraYFe343S
AXOKyma1znbzyNMo613oZno/ujCHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUibOb
P51kJ1fWAO55CPp0e11u+JcwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzMxQ0NCNTE0QjMwMTExRjBCRTREMzdEN0RBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMeAwDQYJKoZIhvcNAQELBQAD
ggEBAEWSVjoFfL30QK30Mj5woXzVLRrKuI0A2/p+p4auNiWI1Twp0fmJnGb+DcZV
PBenlg5wu3396RXzaD2ERVRPJ643anMY7xt6XZ5FwhiRqwdFmTn8b5UXrhkwshSz
zIVlRxoFnB/E+mlItNKu2yP7Ky85+iCYWRgiontOycSAkyuNOAtIGnGccwPlLxxp
siUY7UtzxEdMEcmp++mfVvANLXmNjG7JAWTpdyd5IIFyM+Hhd001N1TBUUazBTEV
mfqY8mKM95PyXGcL43taTDWQmq+1Hk2PCjDPkR6NgINoUrrZPIFhxYaAs2zQcbsZ
tEX40EIdfyP89d1rc6FQh5ntxNA=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:48 2025 by rpki-client