Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549011CC241D11F091D4F88FDAE4EC9C.roa
File: 549011CC241D11F091D4F88FDAE4EC9C.roa (raw, json)
Hash identifier: YMJ0Mz/qmNCHezBn13NTqo2O9j3kOlykmtD2HkKz4kM=
Subject key identifier: 63:B2:FF:67:65:85:CA:B4:B3:AF:59:92:B5:DD:30:F9:28:20:6F:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549011CC241D11F091D4F88FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:41:24 +0000
ROA not before: Mon 28 Apr 2025 10:41:20 +0000
ROA not after: Mon 13 Mar 2028 10:41:20 +0000
asID: 17561
IP address blocks: 154.92.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97122 (0x17b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:41:20 2025 GMT
Not After : Mar 13 10:41:20 2028 GMT
Subject: CN=680f5b54-180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:80:3c:82:0e:3e:1c:9d:ab:31:00:fc:cb:
63:1a:78:f7:8d:41:b0:a1:79:1d:ab:25:02:58:36:
34:39:ad:25:fc:9d:e0:5b:62:7c:c3:7d:7b:26:85:
9a:fb:1d:bd:3a:ef:8c:ee:c8:74:e5:81:f2:b6:31:
2d:09:bb:51:da:df:91:dd:f1:7d:de:59:f9:3d:92:
bb:14:73:f3:84:39:ce:99:93:13:ca:a5:03:ce:da:
d7:77:c9:45:7c:e3:94:ff:f5:ef:ef:54:77:32:bf:
ac:3e:7c:76:87:23:1b:3e:b9:24:8b:6b:5a:3f:d6:
fe:d0:13:a9:b8:f8:47:60:c9:2d:48:4c:f4:31:17:
63:5b:02:2f:88:e1:bb:30:44:b3:9f:8e:65:dd:1a:
62:a1:5a:40:09:82:d0:59:e3:05:ee:00:9d:a8:6d:
5d:b3:e0:9a:c1:8a:e7:47:07:f3:31:f8:9e:c8:69:
6f:97:96:64:a1:38:1f:e7:b4:75:be:47:a8:20:08:
b7:7c:cc:6c:4c:6e:69:22:68:50:3a:a3:e1:c2:35:
6d:d9:5f:e4:9a:e3:40:39:9a:9a:87:62:f5:e9:62:
1a:55:22:6a:ac:4a:f6:65:ff:98:a7:fa:d7:5a:c9:
3e:b4:b6:9d:ae:9c:8f:87:5d:21:a4:6d:16:c2:74:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:FF:67:65:85:CA:B4:B3:AF:59:92:B5:DD:30:F9:28:20:6F:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/549011CC241D11F091D4F88FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8b:0f:a8:28:e7:ac:b0:d3:f5:16:80:c3:65:31:b8:94:e1:
46:bd:8f:54:4a:c8:85:74:59:b3:f2:6c:2c:6f:67:79:56:3c:
86:00:95:77:d5:8a:03:2c:04:72:df:3a:93:dd:5b:0e:3b:b8:
1d:d3:69:e0:eb:01:aa:86:55:d8:70:35:30:3e:3c:27:ac:58:
dd:81:1e:f7:67:5b:e2:f5:6e:30:0e:43:64:40:f2:a6:93:19:
ec:55:9f:59:61:a2:40:a8:e9:89:67:85:20:bd:19:97:4a:ba:
9f:79:79:e0:68:73:8c:df:1c:e5:1a:ca:38:76:1c:63:ad:39:
e3:19:70:ca:1f:a1:ff:d0:4a:d4:17:a7:24:3a:99:64:d4:b5:
97:01:82:c2:96:14:49:7e:a1:c7:8b:3a:36:77:bd:e4:fd:fe:
b4:de:bb:e1:de:98:03:2f:06:84:3d:ee:14:dc:a6:ae:8b:87:
04:8c:b8:b6:3f:fb:f7:bc:fb:f8:a7:42:95:aa:68:0e:3a:da:
f6:30:0d:6a:e8:bc:2b:25:4c:49:91:b2:3f:2d:36:2a:17:03:
38:a7:f5:f6:71:3e:4b:17:c4:01:09:7b:6b:a3:4b:e0:84:80:
c8:e3:b5:bc:f4:91:7f:de:29:60:40:30:4c:4d:fc:16:36:4a:
ec:f8:9a:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXtiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTA0MTIwWhcNMjgwMzEzMTA0MTIwWjAYMRYw
FAYDVQQDEw02ODBmNWI1NC0xODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuUaAPIIOPhydqzEA/MtjGnj3jUGwoXkdqyUCWDY0Oa0l/J3gW2J8w317
JoWa+x29Ou+M7sh05YHytjEtCbtR2t+R3fF93ln5PZK7FHPzhDnOmZMTyqUDztrX
d8lFfOOU//Xv71R3Mr+sPnx2hyMbPrkki2taP9b+0BOpuPhHYMktSEz0MRdjWwIv
iOG7MESzn45l3RpioVpACYLQWeMF7gCdqG1ds+CawYrnRwfzMfieyGlvl5ZkoTgf
57R1vkeoIAi3fMxsTG5pImhQOqPhwjVt2V/kmuNAOZqah2L16WIaVSJqrEr2Zf+Y
p/rXWsk+tLadrpyPh10hpG0WwnStrwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGOy
/2dlhcq0s69ZkrXdMPkoIG/IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDkwMTFDQzI0MUQxMUYwOTFENEY4OEZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlycMA0GCSqGSIb3DQEB
CwUAA4IBAQCjiw+oKOessNP1FoDDZTG4lOFGvY9USsiFdFmz8mwsb2d5VjyGAJV3
1YoDLARy3zqT3VsOO7gd02ng6wGqhlXYcDUwPjwnrFjdgR73Z1vi9W4wDkNkQPKm
kxnsVZ9ZYaJAqOmJZ4UgvRmXSrqfeXngaHOM3xzlGso4dhxjrTnjGXDKH6H/0ErU
F6ckOplk1LWXAYLClhRJfqHHizo2d73k/f603rvh3pgDLwaEPe4U3Kaui4cEjLi2
P/v3vPv4p0KVqmgOOtr2MA1q6LwrJUxJkbI/LTYqFwM4p/X2cT5LF8QBCXtro0vg
hIDI47W89JF/3ilgQDBMTfwWNkrs+Jph
-----END CERTIFICATE-----
Generated at Sat May 10 10:20:23 2025 by rpki-client