Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/515DF6C86C3D11F09C1192E7DAE4EC9C.roa
File: 515DF6C86C3D11F09C1192E7DAE4EC9C.roa (raw, json)
Hash identifier: pUqI1KDe7mu2yRj+pkelAGMyKHZWhQFmz4ZiKxjviGQ=
Subject key identifier: 0D:3B:9D:91:E6:3B:66:FD:1F:11:0F:70:45:16:6F:C9:38:0F:61:F9
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 090B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/515DF6C86C3D11F09C1192E7DAE4EC9C.roa
Signing time: Tue 29 Jul 2025 05:31:46 +0000
ROA not before: Tue 29 Jul 2025 05:31:42 +0000
ROA not after: Mon 31 Dec 2035 05:31:42 +0000
asID: 7029
IP address blocks: 165.49.84.0/24 maxlen: 24
165.49.85.0/24 maxlen: 24
165.49.86.0/24 maxlen: 24
165.49.87.0/24 maxlen: 24
165.49.111.0/24 maxlen: 24
165.49.112.0/24 maxlen: 24
165.49.113.0/24 maxlen: 24
165.49.114.0/24 maxlen: 24
165.49.115.0/24 maxlen: 24
165.49.117.0/24 maxlen: 24
165.49.118.0/24 maxlen: 24
165.49.121.0/24 maxlen: 24
165.49.122.0/24 maxlen: 24
165.49.123.0/24 maxlen: 24
165.49.124.0/24 maxlen: 24
165.49.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jul 29 05:31:42 2025 GMT
Not After : Dec 31 05:31:42 2035 GMT
Subject: CN=68885cc2-a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:0c:c4:66:45:3d:7e:f3:d1:99:a5:4d:9a:
ec:04:0f:d7:41:94:ea:82:49:3d:b8:84:89:84:71:
99:67:9e:43:f6:32:c9:9c:44:b4:f3:e5:a0:f0:c6:
72:3c:41:9f:ca:4c:82:31:5f:82:1d:c1:34:5c:ca:
2f:40:e2:9e:7b:a5:7e:b1:a1:4a:d9:9e:d0:f8:49:
7d:d3:10:57:c9:ac:00:fd:75:30:83:13:8e:91:7c:
94:8b:bb:c3:24:97:7b:87:6c:18:2b:4f:96:d0:3a:
7a:38:05:f9:ec:74:82:2e:55:3d:6c:c8:ce:18:65:
87:1b:e1:d5:c7:33:76:3d:80:9e:69:74:17:81:7d:
11:83:56:92:72:0c:8f:8d:bf:5a:bc:12:4f:2a:ac:
4f:42:ae:0e:47:24:19:7c:b7:6f:66:1c:b0:d6:a0:
0b:52:a5:7d:1b:90:ed:14:fe:64:52:89:65:9a:e9:
5a:7d:55:6d:b1:a2:ad:5c:b1:b2:74:81:72:25:bb:
9c:3b:a8:bf:23:8b:8d:c3:a3:96:66:e4:f5:7c:9f:
b2:20:e5:66:f9:d9:bf:c0:81:80:7c:be:bb:60:3b:
e1:6d:3a:bf:b2:03:b0:0a:7f:37:e3:52:ea:bd:01:
29:51:18:69:61:9c:be:13:6e:f0:0d:76:5c:9d:6c:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3B:9D:91:E6:3B:66:FD:1F:11:0F:70:45:16:6F:C9:38:0F:61:F9
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/515DF6C86C3D11F09C1192E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.84.0/22
165.49.111.0-165.49.115.255
165.49.117.0-165.49.118.255
165.49.121.0-165.49.125.255
Signature Algorithm: sha256WithRSAEncryption
19:9f:e2:fb:d3:04:fc:0f:35:f8:77:7f:b9:38:52:a4:2f:f2:
1b:64:f0:26:50:3d:c5:e5:6a:f3:15:e7:7f:91:e7:89:89:56:
ac:01:b0:c0:62:99:d7:50:bc:83:a8:3e:76:82:7b:6e:65:6e:
1c:c6:78:a5:1e:0d:23:e5:93:a8:88:e5:2a:f8:23:2a:e1:3c:
3a:74:7f:63:ac:11:09:67:34:e3:70:2f:c8:a5:29:2f:26:b0:
b2:3f:fc:0e:d1:dc:85:b3:63:1f:e7:52:b4:5f:d9:f3:ed:4f:
ce:ef:b5:44:be:f4:d6:fd:9a:cb:d7:b9:55:e9:a8:39:fc:cf:
77:e0:77:07:ea:aa:d6:be:a1:1d:c8:2f:02:c4:de:ad:ad:ff:
a8:dc:e5:18:43:41:b1:d3:10:48:92:cd:04:d0:b3:93:5c:4e:
1c:f0:21:84:dd:14:d7:9e:1a:9b:2c:4b:9c:ed:d2:22:57:99:
1b:3d:12:47:e3:bf:ed:47:55:60:a9:0a:c8:e6:61:8d:40:60:
09:16:4d:dd:d4:72:c8:0c:74:8d:9b:ed:42:19:ee:eb:94:fe:
26:d7:ae:a2:c5:56:c8:46:2a:e2:83:de:e4:e7:fb:29:07:8b:
60:b3:1f:9b:e8:17:9e:31:b8:be:8b:08:b5:8d:30:8c:b4:06:
88:ab:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:14 2025 by rpki-client