Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3743D4742E4E11F0A957FFC3DAE4EC9C.roa
File: 3743D4742E4E11F0A957FFC3DAE4EC9C.roa (raw, json)
Hash identifier: 6XHiFR9Yl73IjjFpwo2WlgtCcyGd/5FzrQQouPpbqBg=
Subject key identifier: 42:1F:26:7F:37:D9:6E:6E:63:44:0B:97:BE:4D:1B:C3:9E:77:95:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1AB1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3743D4742E4E11F0A957FFC3DAE4EC9C.roa
Signing time: Sun 11 May 2025 09:56:32 +0000
ROA not before: Sun 11 May 2025 09:56:27 +0000
ROA not after: Tue 11 May 2027 09:56:27 +0000
asID: 834
IP address blocks: 154.16.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6833 (0x1ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 11 09:56:27 2025 GMT
Not After : May 11 09:56:27 2027 GMT
Subject: CN=68207450-1fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:8b:21:36:37:35:df:d9:38:69:b1:07:c9:
27:9b:8c:07:06:ff:92:e8:ad:bb:c3:77:f6:1b:f1:
28:22:b8:46:f3:05:5d:b8:1d:bb:68:6a:bb:cf:3f:
bb:12:b8:4e:59:dd:21:ad:3c:b2:52:ed:4b:0c:19:
a7:f2:3a:a0:af:b8:43:22:4c:82:52:9b:14:78:b8:
3f:05:d2:cc:69:fc:f8:59:f3:8a:0e:be:da:18:01:
e1:21:87:1d:0d:c8:b5:70:ad:31:b1:e8:f0:48:22:
b4:00:cf:8f:3d:4e:29:98:78:58:e2:5f:0c:a3:d7:
8c:1d:ae:a7:03:a6:8e:e3:df:6d:68:86:ea:1b:00:
a1:68:dc:7a:ab:51:cb:01:b2:03:0c:01:4b:85:02:
90:c2:0b:df:19:1e:76:67:2c:0a:d4:06:4e:73:1c:
99:32:38:f3:0a:0a:71:fe:53:d4:f9:e7:5b:2b:e3:
e1:fe:eb:fd:11:6e:47:07:8a:57:3f:4f:a4:4b:c6:
e2:50:39:2b:7e:40:28:a6:1b:78:fa:60:a7:a2:9e:
2f:da:b9:21:48:b8:b8:91:7c:23:a3:d9:dd:f8:e7:
4e:46:a6:ee:6a:78:db:b8:78:bb:0d:ac:6e:d5:e0:
49:34:f3:b3:f3:bb:33:8b:53:c8:38:30:fe:cd:03:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:26:7F:37:D9:6E:6E:63:44:0B:97:BE:4D:1B:C3:9E:77:95:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3743D4742E4E11F0A957FFC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.246.0/24
Signature Algorithm: sha256WithRSAEncryption
71:07:46:75:8f:cc:b1:97:32:e2:54:20:15:73:52:32:4e:9d:
00:f9:65:73:b3:e2:5c:39:ec:13:36:4d:32:b2:ab:e9:ee:9c:
76:1a:fa:91:08:54:2f:8c:34:9d:1f:c6:d7:6a:3d:e1:2b:37:
f5:d4:0a:08:81:ca:69:c5:61:6a:b6:16:12:8d:e0:3d:d6:a1:
f6:f0:53:e4:4d:10:2a:29:cd:74:72:5b:9d:91:9d:2c:f7:21:
f1:fd:d7:46:76:4f:cd:e7:51:84:5e:7c:5f:d7:38:eb:49:f9:
fc:f8:7c:b4:e9:ee:ad:a7:9d:0b:5d:8b:f1:1d:53:f2:11:39:
d7:34:50:7b:ee:31:06:0b:56:7c:46:32:dd:c7:3b:db:29:57:
89:5c:cb:f2:72:71:ed:6f:2e:25:47:52:53:77:57:24:f6:e1:
50:e6:ae:de:87:49:2d:37:5f:ca:e8:ff:77:00:fa:ad:11:d2:
2f:79:d4:2e:7b:84:e2:33:f1:b7:a2:df:8a:a0:9a:24:85:0e:
dc:73:b2:18:34:15:1b:39:25:ce:02:66:08:f3:03:77:36:02:
30:c6:0c:9a:44:0a:da:28:54:c9:ce:6e:d7:cc:8e:17:f7:f7:
89:10:4b:07:a3:a0:a5:25:53:72:e8:ac:95:08:34:5d:84:c8:
f9:8a:68:54
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGrEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA1MTEwOTU2MjdaFw0yNzA1MTEwOTU2MjdaMBgxFjAU
BgNVBAMTDTY4MjA3NDUwLTFmY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcIYshNjc139k4abEHySebjAcG/5LorbvDd/Yb8SgiuEbzBV24HbtoarvP
P7sSuE5Z3SGtPLJS7UsMGafyOqCvuEMiTIJSmxR4uD8F0sxp/PhZ84oOvtoYAeEh
hx0NyLVwrTGx6PBIIrQAz489TimYeFjiXwyj14wdrqcDpo7j321ohuobAKFo3Hqr
UcsBsgMMAUuFApDCC98ZHnZnLArUBk5zHJkyOPMKCnH+U9T551sr4+H+6/0RbkcH
ilc/T6RLxuJQOSt+QCimG3j6YKeini/auSFIuLiRfCOj2d34505Gpu5qeNu4eLsN
rG7V4Ek087PzuzOLU8g4MP7NA7ghAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQh8m
fzfZbm5jRAuXvk0bw553lQEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM3NDNENDc0MkU0RTExRjBBOTU3RkZDM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPYwDQYJKoZIhvcNAQEL
BQADggEBAHEHRnWPzLGXMuJUIBVzUjJOnQD5ZXOz4lw57BM2TTKyq+nunHYa+pEI
VC+MNJ0fxtdqPeErN/XUCgiBymnFYWq2FhKN4D3WofbwU+RNECopzXRyW52RnSz3
IfH910Z2T83nUYRefF/XOOtJ+fz4fLTp7q2nnQtdi/EdU/IROdc0UHvuMQYLVnxG
Mt3HO9spV4lcy/Jyce1vLiVHUlN3VyT24VDmrt6HSS03X8ro/3cA+q0R0i951C57
hOIz8bei34qgmiSFDtxzshg0FRs5Jc4CZgjzA3c2AjDGDJpECtooVMnObtfMjhf3
94kQSwejoKUlU3LorJUINF2EyPmKaFQ=
-----END CERTIFICATE-----
Generated at Wed May 14 15:18:32 2025 by rpki-client