Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789D6C3034B311F09AF3CE8CDAE4EC9C.roa
File: 789D6C3034B311F09AF3CE8CDAE4EC9C.roa (raw, json)
Hash identifier: ac7nOq3U+GxxO7yrF82f5qmBbY9b3XzkQpLajYUJk9M=
Subject key identifier: 6E:B3:99:A8:30:95:6A:02:E3:2A:6E:2C:53:A1:71:98:82:39:70:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018152
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789D6C3034B311F09AF3CE8CDAE4EC9C.roa
Signing time: Mon 19 May 2025 13:16:28 +0000
ROA not before: Mon 19 May 2025 13:16:22 +0000
ROA not after: Wed 18 Jun 2025 13:16:22 +0000
asID: 54801
IP address blocks: 154.200.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98642 (0x18152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 13:16:22 2025 GMT
Not After : Jun 18 13:16:22 2025 GMT
Subject: CN=682b2f2c-232b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:c0:98:f5:82:bd:41:8a:aa:ae:e3:34:bb:
7e:c7:dd:2d:e0:96:a1:2b:8c:ce:c3:a1:14:2a:cf:
11:c9:66:b0:9f:cc:26:bb:fe:f7:a8:98:61:bf:fa:
37:63:d3:5f:44:fd:56:ea:6e:a0:45:32:0f:00:e4:
f8:7e:c2:73:e6:89:b0:a9:10:d9:20:cd:5c:dc:6f:
a2:3f:18:45:7d:54:f9:51:a0:fb:b7:64:1c:dd:58:
4d:12:28:7f:ca:aa:ed:b8:1c:b1:77:23:0b:30:9c:
ea:4b:a1:d0:4b:98:18:55:d0:67:d3:42:5b:79:11:
96:66:37:68:41:25:d7:fc:e5:1a:8a:ea:60:a4:80:
8c:a1:bf:a5:a4:bd:92:60:00:7b:4e:b6:00:53:cb:
fa:72:e3:0c:4b:f4:8e:84:29:cb:c2:7c:97:77:6b:
43:25:6c:62:1d:a1:99:6e:48:63:b8:66:88:7c:0d:
f1:7b:03:41:79:b8:ab:92:84:c3:11:be:3a:fa:89:
1b:09:7d:35:34:bb:1d:d3:53:80:31:80:3c:86:39:
bc:dd:b5:1d:a6:14:6c:80:d3:53:19:1d:e4:18:3c:
36:78:6e:be:70:87:6c:68:51:88:e8:7a:16:56:7e:
5d:2b:72:44:f8:58:9d:01:39:68:71:04:6c:b6:d6:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:99:A8:30:95:6A:02:E3:2A:6E:2C:53:A1:71:98:82:39:70:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789D6C3034B311F09AF3CE8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0b:a4:80:50:ed:18:01:35:1b:71:35:3b:b9:a3:78:92:86:
cc:c8:fd:6f:56:97:54:ac:51:00:31:e6:fb:df:d0:d1:aa:ce:
f3:c4:6f:a9:60:d3:2f:4f:c4:8e:58:ec:3c:92:6e:5c:fd:8a:
97:f6:78:3b:b8:d0:24:0d:8b:e0:1d:45:13:eb:ed:d7:f2:52:
33:99:12:98:ac:0b:a9:cd:d4:05:36:98:51:0b:b3:b0:20:f6:
0e:ff:0e:6f:f3:0d:4a:ab:6d:24:fa:af:ad:56:ea:f4:61:ac:
cf:72:d8:9f:81:e0:83:71:7d:5e:b4:36:b2:ad:cf:11:02:50:
b4:b2:7c:62:0b:ce:20:2c:7f:f4:1a:0d:e5:23:db:4f:7c:0a:
36:d6:8d:1c:13:94:35:e4:7a:96:39:16:54:f4:ca:ac:e2:d8:
48:95:17:84:2c:08:63:6b:96:b8:95:da:4f:88:1d:82:a0:33:
eb:8a:ff:ff:29:2c:b5:8f:48:2c:99:47:b0:67:f4:51:71:49:
15:57:03:4f:1a:c2:2c:4b:91:6a:74:97:bd:60:62:1a:fb:d7:
19:1d:ee:db:33:41:02:65:ae:d1:6b:5a:5d:a7:d0:df:b1:0c:
bf:f1:00:ad:f8:d7:41:e2:08:3c:72:48:7d:d1:52:fd:7f:96:
5e:c9:c9:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYFSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE5MTMxNjIyWhcNMjUwNjE4MTMxNjIyWjAYMRYw
FAYDVQQDEw02ODJiMmYyYy0yMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxS7AmPWCvUGKqq7jNLt+x90t4JahK4zOw6EUKs8RyWawn8wmu/73qJhh
v/o3Y9NfRP1W6m6gRTIPAOT4fsJz5omwqRDZIM1c3G+iPxhFfVT5UaD7t2Qc3VhN
Eih/yqrtuByxdyMLMJzqS6HQS5gYVdBn00JbeRGWZjdoQSXX/OUaiupgpICMob+l
pL2SYAB7TrYAU8v6cuMMS/SOhCnLwnyXd2tDJWxiHaGZbkhjuGaIfA3xewNBebir
koTDEb46+okbCX01NLsd01OAMYA8hjm83bUdphRsgNNTGR3kGDw2eG6+cIdsaFGI
6HoWVn5dK3JE+FidATlocQRsttYmTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG6z
magwlWoC4ypuLFOhcZiCOXCBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83ODlENkMzMDM0QjMxMUYwOUFGM0NFOENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsj4MA0GCSqGSIb3DQEB
CwUAA4IBAQAUC6SAUO0YATUbcTU7uaN4kobMyP1vVpdUrFEAMeb739DRqs7zxG+p
YNMvT8SOWOw8km5c/YqX9ng7uNAkDYvgHUUT6+3X8lIzmRKYrAupzdQFNphRC7Ow
IPYO/w5v8w1Kq20k+q+tVur0YazPctifgeCDcX1etDayrc8RAlC0snxiC84gLH/0
Gg3lI9tPfAo21o0cE5Q15HqWORZU9Mqs4thIlReELAhja5a4ldpPiB2CoDPriv//
KSy1j0gsmUewZ/RRcUkVVwNPGsIsS5FqdJe9YGIa+9cZHe7bM0ECZa7Ra1pdp9Df
sQy/8QCt+NdB4gg8ckh90VL9f5Zeycl5
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:28 2025 by rpki-client