Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B700910F44911EF8C31B986762E951A.roa
File: 0B700910F44911EF8C31B986762E951A.roa (raw, json)
Hash identifier: yX5eyksy5BmxzEpovLB1ijQsNJNseClJy8NV7sfMk4c=
Subject key identifier: 37:34:C5:9E:EB:38:F6:52:69:98:22:4A:52:AF:E3:48:7C:C3:48:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B700910F44911EF8C31B986762E951A.roa
Signing time: Wed 26 Feb 2025 13:53:23 +0000
ROA not before: Wed 26 Feb 2025 13:53:20 +0000
ROA not after: Thu 19 Feb 2026 13:53:20 +0000
asID: 984
IP address blocks: 154.210.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91133 (0x163fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:53:20 2025 GMT
Not After : Feb 19 13:53:20 2026 GMT
Subject: CN=67bf1cd3-7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:32:84:16:00:a9:cf:34:d3:f6:d2:98:a7:
1a:04:12:1f:50:3f:15:46:e9:82:9f:7b:f2:a3:b4:
27:57:f3:4a:82:07:c0:ef:06:3b:2f:be:b6:e1:ca:
c6:74:15:83:44:7d:b4:ff:90:aa:e3:c6:51:9e:34:
25:77:f9:97:3b:d9:99:5f:c6:6f:c6:e5:4d:7f:77:
5b:5e:eb:79:5e:96:16:89:fc:f1:ed:f4:9f:2d:4f:
e4:72:c6:c4:36:33:9f:78:02:a6:80:24:02:b0:63:
10:4a:51:c4:7e:0c:6d:d5:e8:6a:2e:f1:8d:66:9a:
23:39:43:cf:de:96:b2:2b:9d:ab:1e:f3:20:96:22:
2f:2f:8e:9d:b8:fd:95:ac:f8:ff:d0:77:42:e3:4e:
0d:f5:03:94:0f:c7:e6:28:2f:fe:c1:e1:5f:59:2c:
d0:82:cc:d0:b1:8d:37:bb:ff:92:f1:db:47:a0:7b:
68:59:75:49:ad:6a:6c:fd:f5:b9:a7:1f:62:cd:e6:
b5:31:12:61:30:31:58:be:ff:ca:42:30:79:8f:4f:
ce:d5:44:e8:c9:09:2e:66:99:5e:5b:72:0b:70:61:
e3:00:f9:43:8b:81:95:97:39:d8:a2:e2:c8:c6:9a:
a0:40:97:1a:2f:03:19:12:46:62:14:d2:ca:6f:e0:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:C5:9E:EB:38:F6:52:69:98:22:4A:52:AF:E3:48:7C:C3:48:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B700910F44911EF8C31B986762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.39.0/24
Signature Algorithm: sha256WithRSAEncryption
27:96:2e:a2:f1:cc:0d:74:35:e2:e1:4d:12:c7:2f:d8:be:3b:
0c:e4:b3:5a:75:10:59:ea:ff:3b:ab:e3:50:82:b8:1e:29:0e:
07:3d:92:a8:e3:b7:e6:5f:92:f5:ad:6d:da:8b:f4:75:f7:9f:
c6:aa:50:b2:b1:91:f4:a5:a2:87:67:b6:f9:8e:45:c6:dc:c0:
02:56:23:50:70:c3:ab:6d:08:5b:5c:af:0f:55:d9:d4:38:7a:
54:26:be:0f:6f:0c:30:1b:cb:6c:7c:af:29:9f:84:de:c7:07:
3a:b8:a7:c1:8b:df:d9:b2:bd:93:d8:0e:14:18:cb:71:27:be:
57:6d:2b:9a:5d:b8:5e:ef:9c:a1:3f:d5:33:76:d1:4b:46:44:
cf:d6:d6:d9:3f:d8:d8:ec:f0:e0:c3:8f:52:c1:8f:cc:4a:72:
5f:21:a8:f9:fc:0b:32:ed:7b:31:b4:c3:10:6f:40:47:d8:e3:
42:7c:17:dc:0f:15:c9:1d:45:f6:f4:98:f4:b0:31:06:9e:3d:
82:e3:b3:68:fd:e8:1d:81:8c:4b:a8:cf:8b:4c:fd:ab:0c:bc:
ca:60:bf:af:64:67:ce:28:37:a1:3b:b5:5e:ed:9c:1b:ed:86:
12:e8:d7:1f:e0:b1:ec:a6:09:00:73:36:6c:c1:71:42:6b:94:
f5:a7:bc:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWP9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTM1MzIwWhcNMjYwMjE5MTM1MzIwWjAYMRYw
FAYDVQQDEw02N2JmMWNkMy03Mzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw+gyhBYAqc800/bSmKcaBBIfUD8VRumCn3vyo7QnV/NKggfA7wY7L762
4crGdBWDRH20/5Cq48ZRnjQld/mXO9mZX8ZvxuVNf3dbXut5XpYWifzx7fSfLU/k
csbENjOfeAKmgCQCsGMQSlHEfgxt1ehqLvGNZpojOUPP3payK52rHvMgliIvL46d
uP2VrPj/0HdC404N9QOUD8fmKC/+weFfWSzQgszQsY03u/+S8dtHoHtoWXVJrWps
/fW5px9izea1MRJhMDFYvv/KQjB5j0/O1UToyQkuZpleW3ILcGHjAPlDi4GVlznY
ouLIxpqgQJcaLwMZEkZiFNLKb+DVgwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDc0
xZ7rOPZSaZgiSlKv40h8w0hPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjcwMDkxMEY0NDkxMUVGOEMzMUI5ODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtInMA0GCSqGSIb3DQEB
CwUAA4IBAQAnli6i8cwNdDXi4U0Sxy/YvjsM5LNadRBZ6v87q+NQgrgeKQ4HPZKo
47fmX5L1rW3ai/R195/GqlCysZH0paKHZ7b5jkXG3MACViNQcMOrbQhbXK8PVdnU
OHpUJr4PbwwwG8tsfK8pn4Texwc6uKfBi9/Zsr2T2A4UGMtxJ75XbSuaXbhe75yh
P9UzdtFLRkTP1tbZP9jY7PDgw49SwY/MSnJfIaj5/Asy7XsxtMMQb0BH2ONCfBfc
DxXJHUX29Jj0sDEGnj2C47No/egdgYxLqM+LTP2rDLzKYL+vZGfOKDehO7Ve7Zwb
7YYS6Ncf4LHspgkAczZswXFCa5T1p7y0
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:46 2025 by rpki-client