Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/531C82CEF8B911EF8D8D9568762E951A.roa
File: 531C82CEF8B911EF8D8D9568762E951A.roa (raw, json)
Hash identifier: lfmQl0pWtg2SmZ6zuWmJ/pqFIRhvVKTS0P5DJbPPFlk=
Subject key identifier: F2:E0:60:61:BF:09:9F:72:D4:DF:72:34:52:4F:6F:D3:AE:14:76:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017166
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/531C82CEF8B911EF8D8D9568762E951A.roa
Signing time: Tue 04 Mar 2025 05:27:12 +0000
ROA not before: Tue 04 Mar 2025 05:27:08 +0000
ROA not after: Tue 03 Mar 2026 05:27:08 +0000
asID: 328608
IP address blocks: 154.83.39.0/24 maxlen: 24
154.84.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94566 (0x17166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 05:27:08 2025 GMT
Not After : Mar 3 05:27:08 2026 GMT
Subject: CN=67c68f30-e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:52:10:56:54:2b:bf:35:de:e5:d9:83:1e:
6e:6d:e2:f3:60:9f:a8:bb:2d:23:09:3c:13:ca:a9:
79:fc:b8:89:11:5a:74:e6:a7:51:16:ba:1a:45:3d:
ca:e1:13:3f:19:7f:5c:14:b9:d4:d8:99:44:a3:60:
69:7e:8f:a7:ff:cb:0d:9c:28:68:8d:63:e9:99:cc:
f9:6b:4b:02:c6:7e:0a:88:74:26:67:8a:80:2b:02:
7a:b9:17:52:fa:0e:76:3d:8d:ef:22:64:f7:a3:4f:
49:6a:39:7e:d5:c6:e1:f8:66:9d:6a:6f:3b:27:7c:
6f:ad:79:e8:f7:e5:dd:69:42:f7:96:e3:6a:02:28:
b4:c8:94:0a:52:5a:a7:9c:ea:0c:4b:62:44:e0:e1:
8e:7b:e0:9c:1a:73:56:d8:81:99:6f:04:85:26:ad:
de:af:6b:4e:8f:cf:c7:f3:4a:19:f7:0a:0f:1c:fd:
54:7c:ed:36:ab:9b:03:74:6d:0e:ec:fc:32:e8:0e:
55:10:44:88:f6:42:5f:8f:a4:4c:c7:ac:48:24:ea:
46:2d:e7:e7:b3:23:e1:66:70:64:13:86:aa:a4:8f:
6a:6b:f4:2a:42:8a:1a:17:88:0e:74:81:18:41:45:
9c:dc:93:c5:c9:7a:46:58:30:07:67:60:4a:40:00:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:60:61:BF:09:9F:72:D4:DF:72:34:52:4F:6F:D3:AE:14:76:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/531C82CEF8B911EF8D8D9568762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.39.0/24
154.84.141.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a8:ed:ac:71:fa:bd:17:98:71:50:70:a1:99:56:68:2c:f0:
9f:97:ec:f3:43:8a:42:dc:35:bb:1e:c2:7e:25:7c:11:96:f5:
dc:61:b3:f6:f2:d1:78:34:bf:dd:d9:91:30:18:cf:24:25:b1:
d3:43:56:84:04:08:27:40:df:37:c4:63:a6:f8:f9:26:c5:49:
96:57:51:77:78:ea:d4:29:f5:d7:dd:2e:d0:bf:20:b4:d4:cd:
c8:12:b6:57:a3:b5:a1:2e:87:f3:91:4d:d3:44:35:cf:c5:dc:
f9:89:fd:c0:de:e5:88:60:fc:8a:5d:dc:c8:4b:b4:b3:fd:e3:
96:c5:e3:d0:a1:38:c9:98:fb:08:e6:ee:ed:f6:79:d6:44:bf:
26:88:0f:24:60:2f:ea:21:6d:7b:1e:01:a5:90:84:55:18:c2:
a5:1a:fe:c2:e0:2e:36:c8:09:ba:6f:f6:ed:1f:08:33:8b:6b:
a4:68:68:bd:c5:f9:c4:8e:d7:dc:4a:16:c5:ef:c7:e5:5d:94:
4b:31:1d:6c:0f:46:20:da:4b:31:a9:7d:e7:e1:9a:8e:c5:4b:
90:cd:a5:2b:cd:ec:61:6c:b9:af:21:58:2a:ad:d2:81:ed:d6:
85:f2:92:bb:aa:2e:24:05:86:4e:08:0f:5c:67:7b:a2:a1:de:
70:59:45:8a
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXFmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA0MDUyNzA4WhcNMjYwMzAzMDUyNzA4WjAYMRYw
FAYDVQQDEw02N2M2OGYzMC1lMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAkodSEFZUK7813uXZgx5ubeLzYJ+ouy0jCTwTyql5/LiJEVp05qdRFroa
RT3K4RM/GX9cFLnU2JlEo2Bpfo+n/8sNnChojWPpmcz5a0sCxn4KiHQmZ4qAKwJ6
uRdS+g52PY3vImT3o09Jajl+1cbh+Gadam87J3xvrXno9+XdaUL3luNqAii0yJQK
UlqnnOoMS2JE4OGOe+CcGnNW2IGZbwSFJq3er2tOj8/H80oZ9woPHP1UfO02q5sD
dG0O7Pwy6A5VEESI9kJfj6RMx6xIJOpGLefnsyPhZnBkE4aqpI9qa/QqQooaF4gO
dIEYQUWc3JPFyXpGWDAHZ2BKQAB1gwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPLg
YGG/CZ9y1N9yNFJPb9OuFHYtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MzFDODJDRUY4QjkxMUVGOEQ4RDk1Njg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlMnAwQAmlSNMA0GCSqG
SIb3DQEBCwUAA4IBAQCQqO2scfq9F5hxUHChmVZoLPCfl+zzQ4pC3DW7HsJ+JXwR
lvXcYbP28tF4NL/d2ZEwGM8kJbHTQ1aEBAgnQN83xGOm+PkmxUmWV1F3eOrUKfXX
3S7QvyC01M3IErZXo7WhLofzkU3TRDXPxdz5if3A3uWIYPyKXdzIS7Sz/eOWxePQ
oTjJmPsI5u7t9nnWRL8miA8kYC/qIW17HgGlkIRVGMKlGv7C4C42yAm6b/btHwgz
i2ukaGi9xfnEjtfcShbF78flXZRLMR1sD0Yg2ksxqX3n4ZqOxUuQzaUrzexhbLmv
IVgqrdKB7daF8pK7qi4kBYZOCA9cZ3uiod5wWUWK
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:50:03 2025 by rpki-client