
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/357089666C3E11F0BC71ACECDAE4EC9C.roa
File: 357089666C3E11F0BC71ACECDAE4EC9C.roa (raw, json)
Hash identifier: qggZFmzZXXAr4a086aPRdvIxxVtSdfqR/bbhmNmdsu8=
Subject key identifier: 82:34:FB:11:8A:95:CD:3C:9A:AA:86:E7:08:96:BE:E5:FF:63:5F:1F
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 090D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/357089666C3E11F0BC71ACECDAE4EC9C.roa
Signing time: Tue 29 Jul 2025 05:38:09 +0000
ROA not before: Tue 29 Jul 2025 05:38:04 +0000
ROA not after: Mon 31 Dec 2035 05:38:04 +0000
asID: 5650
IP address blocks: 165.49.84.0/24 maxlen: 24
165.49.85.0/24 maxlen: 24
165.49.86.0/24 maxlen: 24
165.49.87.0/24 maxlen: 24
165.49.111.0/24 maxlen: 24
165.49.112.0/24 maxlen: 24
165.49.113.0/24 maxlen: 24
165.49.114.0/24 maxlen: 24
165.49.115.0/24 maxlen: 24
165.49.117.0/24 maxlen: 24
165.49.118.0/24 maxlen: 24
165.49.121.0/24 maxlen: 24
165.49.122.0/24 maxlen: 24
165.49.123.0/24 maxlen: 24
165.49.124.0/24 maxlen: 24
165.49.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 29 05:38:04 2025 GMT
Not After : Dec 31 05:38:04 2035 GMT
Subject: CN=68885e41-9f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:5f:09:74:d3:29:2a:8e:85:ae:1f:62:cb:
7e:3c:5a:28:c9:32:93:9f:92:2f:ba:9f:66:9e:3e:
6f:a5:9f:75:9c:8b:92:4c:e3:52:a5:69:a9:53:95:
a3:9e:79:7b:e9:53:0e:04:06:9b:36:69:3a:a3:90:
ec:03:1e:0c:2e:00:e2:84:dd:37:52:aa:39:f5:a8:
66:b8:a1:e8:b5:21:11:b6:5d:a6:04:7f:d1:4e:10:
11:c7:a9:ca:1a:dd:46:d7:0f:f7:10:29:de:ae:73:
9c:21:46:7a:ab:9d:a6:92:82:7a:77:20:a4:94:9a:
00:6f:26:46:e4:62:29:60:96:7d:e3:98:42:15:25:
d9:1a:f4:5d:08:72:04:23:78:56:2f:31:71:4a:a6:
cd:79:ae:0c:f6:ca:87:b5:12:79:b4:c9:5d:f9:a2:
8a:7e:a5:70:f9:bd:57:e7:1a:44:1d:3d:f7:02:0f:
17:78:bd:0e:58:e2:3a:09:4f:94:e0:03:0f:ad:42:
3b:bc:25:93:15:d5:75:ff:9b:e1:3c:8c:53:55:5b:
f5:5a:55:8d:14:18:86:df:64:f0:03:33:d8:8f:d7:
74:90:4a:7c:e2:79:f5:76:b5:09:f6:75:cd:07:8e:
07:5b:c5:56:d8:50:1f:ee:6c:ea:be:10:3c:f5:8c:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:34:FB:11:8A:95:CD:3C:9A:AA:86:E7:08:96:BE:E5:FF:63:5F:1F
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/357089666C3E11F0BC71ACECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.84.0/22
165.49.111.0-165.49.115.255
165.49.117.0-165.49.118.255
165.49.121.0-165.49.125.255
Signature Algorithm: sha256WithRSAEncryption
59:44:d2:92:9c:a6:5a:56:b4:ce:ea:d0:a5:fa:74:13:95:fc:
d7:fe:51:71:a8:0a:e5:c0:d8:ed:68:6c:a3:41:4b:95:36:fe:
f0:71:24:06:3f:cd:32:b7:06:cc:b0:0e:d6:c4:96:07:30:5f:
de:22:2d:ae:ad:fd:68:6a:a5:6f:26:f8:85:e4:d6:d8:5a:89:
d2:cc:72:6a:e5:8c:e1:85:bb:9d:64:84:3f:13:56:01:c6:29:
9e:b6:f0:10:21:82:3c:04:f1:d1:40:22:01:d7:ef:30:86:77:
3d:0f:1b:21:05:ec:a3:46:9b:d1:48:e6:c2:2e:de:fd:3d:2c:
7c:36:9c:02:4b:a4:e6:d8:fc:5d:33:c9:70:c8:ff:13:87:cd:
90:5c:00:18:5e:98:ae:41:52:97:61:96:e0:ec:f4:3f:10:12:
59:33:a3:be:f0:c8:ce:ee:37:f7:83:df:b7:21:ee:e4:b7:82:
f3:ce:c6:36:fd:ab:6f:ce:b0:f1:f8:6b:f9:55:42:3c:54:09:
72:11:dd:22:91:c1:6e:f9:90:47:a0:74:1c:0c:79:a6:69:f7:
06:6c:af:35:bb:04:0e:fc:86:4f:92:4f:87:e3:30:be:79:48:
59:c4:44:88:19:8f:df:63:53:ed:96:f2:22:7e:4e:51:d8:ce:
31:ea:9d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:06 2025 by rpki-client