Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7409226F3E311EF8AA768BD762E951A.roa
File: A7409226F3E311EF8AA768BD762E951A.roa (raw, json)
Hash identifier: huzpU+2IW9YfAP7BErwx+EO0G3b50hexOd/UAJo99Ys=
Subject key identifier: D3:54:7F:5F:CF:C0:4F:09:4E:3C:1B:AE:5A:BB:E4:33:EF:3A:79:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01606A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7409226F3E311EF8AA768BD762E951A.roa
Signing time: Wed 26 Feb 2025 01:47:36 +0000
ROA not before: Wed 26 Feb 2025 01:47:32 +0000
ROA not after: Thu 19 Feb 2026 01:47:32 +0000
asID: 984
IP address blocks: 154.92.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90218 (0x1606a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:47:32 2025 GMT
Not After : Feb 19 01:47:32 2026 GMT
Subject: CN=67be72b8-9ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:e7:3c:f3:3e:e8:25:27:dd:13:2f:9c:8f:
2d:c4:dd:9d:24:4c:8e:88:b1:b4:7e:ae:de:93:b4:
a8:ff:6c:aa:fd:6d:f2:80:32:e6:00:bd:13:68:4a:
9c:7d:1c:f3:5c:7a:73:fc:b6:97:f8:a2:38:34:e4:
db:66:d2:a2:84:c3:e2:67:56:b4:17:f0:5e:b7:6f:
24:a7:9c:f8:93:5b:b1:51:19:4f:16:79:88:0a:e7:
d8:39:5f:e6:fd:3b:38:1c:c5:49:76:c2:a7:15:fe:
39:6a:e4:77:32:4e:8e:c2:3f:c8:a5:c7:af:bf:30:
08:71:ab:6c:6e:49:dc:4c:60:07:a1:73:97:b9:45:
06:45:0f:67:94:4e:6d:38:94:7d:de:01:fc:e6:a7:
99:5f:64:30:9c:f4:78:5d:3a:4d:92:84:5e:ed:b7:
fc:02:a4:e8:72:a7:fb:4b:99:7c:7f:30:7c:c4:6b:
05:94:93:1b:3d:c0:e1:57:2b:4d:60:fc:8e:6d:3e:
57:8e:d6:c1:40:03:e0:11:f0:0d:f8:d7:31:a4:24:
8a:02:4f:cf:0e:8b:38:57:01:3d:a6:b3:41:bb:bc:
a0:bc:b4:28:84:10:f6:db:77:28:e7:cd:cc:fa:7f:
57:78:8a:06:5b:2a:16:0d:98:64:13:87:92:b7:0e:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:7F:5F:CF:C0:4F:09:4E:3C:1B:AE:5A:BB:E4:33:EF:3A:79:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7409226F3E311EF8AA768BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.242.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:70:88:50:57:f0:1e:23:5b:bc:7c:d1:e4:b5:54:57:71:dc:
93:d4:41:f9:37:36:e9:09:e8:29:fd:e3:3f:7e:d1:40:88:45:
60:05:1b:9d:28:04:9b:0f:f3:4a:5f:65:2e:af:11:6d:74:2c:
d4:d1:a6:70:2a:09:5e:8e:ec:4f:87:62:13:c6:81:cc:be:16:
86:25:56:37:71:95:26:81:0a:f0:1f:34:58:3b:91:0e:c8:63:
34:d1:19:eb:95:bf:cd:fd:47:ef:a5:07:3b:38:dd:a1:52:6d:
79:95:26:d4:7d:c4:ab:4c:07:35:a6:20:77:d7:d0:4b:54:40:
88:42:a7:6f:47:ea:28:5d:2d:cf:70:f2:7c:8d:41:de:5e:71:
92:a4:3d:6a:94:1f:e1:81:18:71:2f:61:87:a0:87:a6:67:34:
d6:8d:fe:f2:91:e0:c8:c4:fe:c2:32:c8:fb:80:67:60:bf:9b:
82:56:17:21:b5:f0:44:76:ce:1e:55:f1:cf:e9:18:49:d6:a6:
43:6f:5e:9a:84:c0:28:dd:6d:5d:cb:fc:46:0c:a6:f2:43:d7:
d9:ac:ed:f7:0f:fe:f5:93:89:ae:a7:d4:aa:ff:70:16:90:5f:
3a:b4:4d:16:52:2a:30:aa:50:5f:e9:fe:37:11:b7:d1:2d:e8:
b8:e5:da:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWBqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDE0NzMyWhcNMjYwMjE5MDE0NzMyWjAYMRYw
FAYDVQQDEw02N2JlNzJiOC05YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvEjnPPM+6CUn3RMvnI8txN2dJEyOiLG0fq7ek7So/2yq/W3ygDLmAL0T
aEqcfRzzXHpz/LaX+KI4NOTbZtKihMPiZ1a0F/Bet28kp5z4k1uxURlPFnmICufY
OV/m/Ts4HMVJdsKnFf45auR3Mk6Owj/IpcevvzAIcatsbkncTGAHoXOXuUUGRQ9n
lE5tOJR93gH85qeZX2QwnPR4XTpNkoRe7bf8AqTocqf7S5l8fzB8xGsFlJMbPcDh
VytNYPyObT5XjtbBQAPgEfAN+NcxpCSKAk/PDos4VwE9prNBu7ygvLQohBD223co
583M+n9XeIoGWyoWDZhkE4eStw7f3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNNU
f1/PwE8JTjwbrlq75DPvOnlcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNzQwOTIyNkYzRTMxMUVGOEFBNzY4QkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlzyMA0GCSqGSIb3DQEB
CwUAA4IBAQC7cIhQV/AeI1u8fNHktVRXcdyT1EH5NzbpCegp/eM/ftFAiEVgBRud
KASbD/NKX2UurxFtdCzU0aZwKglejuxPh2ITxoHMvhaGJVY3cZUmgQrwHzRYO5EO
yGM00Rnrlb/N/UfvpQc7ON2hUm15lSbUfcSrTAc1piB319BLVECIQqdvR+ooXS3P
cPJ8jUHeXnGSpD1qlB/hgRhxL2GHoIemZzTWjf7ykeDIxP7CMsj7gGdgv5uCVhch
tfBEds4eVfHP6RhJ1qZDb16ahMAo3W1dy/xGDKbyQ9fZrO33D/71k4mup9Sq/3AW
kF86tE0WUiowqlBf6f43EbfRLei45drV
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:31 2025 by rpki-client