Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E9AED134BA2311F0825306D9DAE4EC9C.roa
File: E9AED134BA2311F0825306D9DAE4EC9C.roa (raw, json)
Hash identifier: tHjs5D3cabMfv3i4decHRmhDPZTOrHQ2DXYIU13UQwM=
Subject key identifier: 33:19:EF:CB:B9:43:32:03:71:AC:A6:46:09:11:16:83:B8:4E:A0:1E
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 09CF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E9AED134BA2311F0825306D9DAE4EC9C.roa
Signing time: Wed 05 Nov 2025 08:46:27 +0000
ROA not before: Wed 05 Nov 2025 08:46:16 +0000
ROA not after: Mon 31 Dec 2035 08:46:16 +0000
asID: 7029
IP address blocks: 165.49.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2511 (0x9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Nov 5 08:46:16 2025 GMT
Not After : Dec 31 08:46:16 2035 GMT
Subject: CN=690b0ee3-f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:53:ee:a6:18:d7:8a:83:61:35:f8:eb:57:
1d:7c:fe:ce:f9:9d:f5:04:bb:eb:04:5a:23:27:ec:
d0:70:89:37:2f:99:a1:df:76:3a:51:f8:fc:26:2d:
21:55:9c:7d:11:82:0e:ff:05:88:e1:12:7d:2e:47:
e1:b9:2d:3f:54:3f:78:9e:75:61:99:db:0f:ac:78:
6c:19:fb:d3:22:46:62:5e:a4:11:a1:51:24:d3:20:
e7:01:4b:e8:e4:2c:c3:55:51:9b:e5:e2:c1:70:27:
34:38:b3:98:41:96:58:37:d7:fb:99:b5:02:c2:65:
ba:09:37:34:0a:1a:0f:74:0d:60:74:5e:7c:60:93:
f9:f9:65:5d:b7:2f:36:84:94:58:8d:a2:50:71:d6:
85:f2:e0:c7:67:6f:37:db:09:a1:83:7f:53:bb:77:
0c:e5:00:2b:32:7b:8e:7e:d7:85:d7:7f:65:f1:4c:
72:c0:64:80:ac:5c:cf:93:6f:01:2d:3c:db:ea:fb:
a1:85:2c:bc:fa:63:bd:d2:4f:d5:3e:4f:34:7e:e6:
3c:20:33:ce:80:c7:9b:18:21:1a:a9:4b:9f:32:f4:
4b:21:b4:a7:36:b8:55:67:dd:77:9c:ef:49:71:54:
00:d4:cf:17:72:a9:b3:37:09:f6:bf:2a:43:0f:28:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:19:EF:CB:B9:43:32:03:71:AC:A6:46:09:11:16:83:B8:4E:A0:1E
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E9AED134BA2311F0825306D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b0:d1:39:30:a9:05:2c:50:d4:b9:2e:6c:10:60:08:4a:14:
2a:af:07:7b:5c:e3:b6:73:0d:5b:cf:48:16:2c:02:b6:ee:e4:
7c:f6:35:16:4e:f7:79:8f:35:cc:c5:f4:f7:65:f8:c4:b6:2f:
17:57:6d:87:ac:36:2a:ac:aa:a0:c8:92:4d:dd:bd:55:d3:1a:
8f:fe:b5:30:62:1b:76:4d:5b:49:fc:ef:e6:e9:13:36:a5:9e:
8c:e8:55:5b:0d:ef:f4:8e:63:8d:ae:e3:a6:cd:19:83:b1:c7:
54:48:e7:fc:c6:4b:1e:26:35:6c:36:16:d0:a5:08:0c:6f:16:
ad:16:f5:b2:9b:40:17:39:3b:06:1e:b3:2f:00:42:e4:49:51:
c2:5a:9d:b7:3a:6f:d7:41:53:07:a9:5d:2c:f4:68:f9:d9:49:
43:67:08:3e:91:95:dc:70:76:04:2f:54:ac:a3:dd:ea:d0:6e:
34:c5:c9:8b:c7:f9:e5:be:65:e9:8e:44:9e:cc:d9:8c:da:1d:
4c:48:f3:98:76:96:62:4a:2c:54:b9:c6:3a:6e:45:0d:de:d8:
f5:75:e9:76:89:b2:81:81:31:50:bc:39:54:9b:65:74:e7:ec:
29:43:ea:7b:a6:9e:3c:40:91:6b:f7:c1:89:cf:62:95:14:32:
b0:47:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:00 2025 by rpki-client