Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773ABADE243F11F0945792F2DAE4EC9C.roa
File: 773ABADE243F11F0945792F2DAE4EC9C.roa (raw, json)
Hash identifier: G9ilFOOC0Uzy89Ct1l8Bd1jpT4YW50O7LR8bn1meBRY=
Subject key identifier: 78:06:86:23:C8:74:6F:A3:2A:96:DD:BC:AE:A9:D7:C4:9A:F0:85:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773ABADE243F11F0945792F2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:45:45 +0000
ROA not before: Mon 28 Apr 2025 14:45:41 +0000
ROA not after: Fri 27 Mar 2026 14:45:41 +0000
asID: 984
IP address blocks: 154.220.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97306 (0x17c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 14:45:41 2025 GMT
Not After : Mar 27 14:45:41 2026 GMT
Subject: CN=680f9499-2cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e7:01:e0:17:3d:18:ec:35:56:36:ca:6b:f2:
a6:13:37:c5:4e:33:47:e8:2c:36:5e:a7:13:93:86:
68:8d:fd:95:9e:04:ff:23:7b:90:98:90:f1:7a:1b:
54:92:57:49:4f:37:90:09:69:38:2f:1f:19:14:be:
00:21:6c:7f:64:ad:9c:a1:5f:d7:14:ef:2b:23:5e:
61:6f:0b:f1:99:23:3d:a2:77:1f:2e:5e:c2:2c:d3:
2d:96:4b:fa:60:28:e0:3e:30:82:b0:e3:9c:f7:49:
57:2b:2e:fc:48:7c:6e:96:6c:dd:98:ad:6a:df:5c:
ba:2e:fc:23:da:9c:46:eb:f5:7d:36:46:ff:bd:43:
34:f1:9f:64:ca:e1:29:65:63:54:ed:89:f4:1a:8d:
0f:43:90:d8:9b:b9:66:35:dd:65:f7:8e:30:96:c2:
24:9b:ae:88:8d:0f:ed:af:77:79:e1:42:10:1c:1b:
8c:5e:5f:4a:72:ae:39:dc:2b:98:8d:72:c4:0d:39:
77:e8:14:65:0d:c0:a8:e6:70:5e:9f:51:5f:15:b9:
39:12:b6:19:06:20:f6:06:da:2b:0e:91:c4:0d:36:
c3:e3:b0:49:74:f6:9b:ac:d4:1c:9f:05:75:56:4f:
d3:a3:39:56:c6:b2:96:29:70:62:47:24:6a:8e:e6:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:06:86:23:C8:74:6F:A3:2A:96:DD:BC:AE:A9:D7:C4:9A:F0:85:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773ABADE243F11F0945792F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.224.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:7b:2d:d8:dc:9a:17:a3:4a:35:21:35:0c:24:8d:45:40:eb:
a3:9e:e6:01:c3:1b:4b:75:4e:fe:5a:7c:ea:41:8f:52:b1:5d:
59:5f:ef:53:13:90:2a:14:4a:ee:fd:83:d0:29:05:44:7f:43:
31:f9:f1:91:63:7f:43:63:b4:fc:02:78:0c:de:64:dc:82:28:
ec:78:88:66:32:9b:82:5a:bf:65:27:ec:9f:ca:fb:f1:7b:64:
ea:ac:ba:79:d3:72:d1:b2:1d:cf:22:9e:24:fd:d0:04:03:fd:
50:a5:be:fb:8c:4c:63:ef:5b:2c:61:70:3d:84:c9:b6:c7:04:
d1:a5:a0:c4:d5:47:46:86:0d:e5:da:cf:33:b3:00:4c:25:ba:
b0:c0:ae:24:97:c5:18:fd:0e:b9:a5:78:f0:10:a6:19:e3:29:
7d:73:01:34:23:49:57:62:74:7e:ec:61:64:1f:16:a0:ad:73:
83:a5:33:e2:d3:15:bd:a2:c3:4e:c5:7a:62:3c:cc:3d:80:3c:
a6:5b:be:c8:33:aa:e0:84:9b:b6:41:26:7b:a3:b8:00:55:68:
05:79:27:ad:8b:99:15:56:59:03:36:62:bf:cd:65:96:d1:63:
a7:d1:24:c7:bb:25:ed:1c:d2:c3:88:f8:48:ef:f8:e2:4f:21:
25:f4:b4:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXwaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTQ0NTQxWhcNMjYwMzI3MTQ0NTQxWjAYMRYw
FAYDVQQDEw02ODBmOTQ5OS0yY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8ucB4Bc9GOw1VjbKa/KmEzfFTjNH6Cw2XqcTk4Zojf2VngT/I3uQmJDx
ehtUkldJTzeQCWk4Lx8ZFL4AIWx/ZK2coV/XFO8rI15hbwvxmSM9oncfLl7CLNMt
lkv6YCjgPjCCsOOc90lXKy78SHxulmzdmK1q31y6Lvwj2pxG6/V9Nkb/vUM08Z9k
yuEpZWNU7Yn0Go0PQ5DYm7lmNd1l944wlsIkm66IjQ/tr3d54UIQHBuMXl9Kcq45
3CuYjXLEDTl36BRlDcCo5nBen1FfFbk5ErYZBiD2BtorDpHEDTbD47BJdPabrNQc
nwV1Vk/TozlWxrKWKXBiRyRqjubDgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHgG
hiPIdG+jKpbdvK6p18Sa8IVcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NzNBQkFERTI0M0YxMUYwOTQ1NzkyRjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtzgMA0GCSqGSIb3DQEB
CwUAA4IBAQDUey3Y3JoXo0o1ITUMJI1FQOujnuYBwxtLdU7+WnzqQY9SsV1ZX+9T
E5AqFEru/YPQKQVEf0Mx+fGRY39DY7T8AngM3mTcgijseIhmMpuCWr9lJ+yfyvvx
e2TqrLp503LRsh3PIp4k/dAEA/1Qpb77jExj71ssYXA9hMm2xwTRpaDE1UdGhg3l
2s8zswBMJbqwwK4kl8UY/Q65pXjwEKYZ4yl9cwE0I0lXYnR+7GFkHxagrXODpTPi
0xW9osNOxXpiPMw9gDymW77IM6rghJu2QSZ7o7gAVWgFeSeti5kVVlkDNmK/zWWW
0WOn0STHuyXtHNLDiPhI7/jiTyEl9LR1
-----END CERTIFICATE-----
Generated at Thu May 8 06:27:22 2025 by rpki-client