Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD544DAA242711F0BDF10FD5DAE4EC9C.roa
File: AD544DAA242711F0BDF10FD5DAE4EC9C.roa (raw, json)
Hash identifier: +rZjx7ZtivY3OP/Z4nJLtjgHdYIU2xtkxB/mzqtkeW0=
Subject key identifier: B2:46:74:E7:33:8E:F6:FE:C2:FB:AF:D7:59:DD:F5:2A:82:17:3D:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD544DAA242711F0BDF10FD5DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:55:28 +0000
ROA not before: Mon 28 Apr 2025 11:55:24 +0000
ROA not after: Fri 17 Mar 2028 11:55:24 +0000
asID: 17561
IP address blocks: 45.202.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85780 (0x14f14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:55:24 2025 GMT
Not After : Mar 17 11:55:24 2028 GMT
Subject: CN=680f6cb0-26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:d9:98:68:c3:f6:0e:c9:ab:70:52:2b:16:
d0:c6:c7:0f:fe:d8:a7:9f:44:8a:80:0f:7f:aa:68:
d4:9a:89:86:4e:07:a7:91:21:5b:30:cc:db:70:47:
50:19:07:a5:80:39:b8:4f:d9:a5:51:47:2d:f0:15:
34:90:a0:b4:b4:ae:4d:65:41:21:45:61:f8:40:5d:
36:79:d2:c6:24:f5:e7:43:70:ec:52:56:61:67:e6:
0f:52:0e:30:24:3f:52:b5:b2:8d:d2:36:69:70:2f:
10:9c:4b:0c:d8:82:87:11:d8:aa:83:2f:54:a1:d4:
e1:93:3a:2b:2f:7a:0d:35:65:ba:2f:da:d2:41:b4:
bc:d4:73:98:60:89:ad:d9:53:a7:cd:6b:12:e0:62:
ad:47:5f:ca:91:6c:e7:a2:3a:85:7e:9c:ca:13:c5:
94:5b:de:16:7e:9f:8c:e5:86:f8:d3:26:a6:03:7f:
4b:69:05:45:15:76:68:77:60:02:8b:c9:0a:b4:2a:
1f:49:c8:dd:96:e6:4b:70:6b:4e:4c:55:74:56:24:
19:0d:24:e2:b5:a5:f4:9c:ff:d3:59:b1:5b:e6:49:
d0:65:5c:ad:1b:70:1f:05:6a:c3:7e:5c:c0:50:4f:
36:2c:95:17:e7:67:1a:46:33:63:d9:c4:2b:c3:9d:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:74:E7:33:8E:F6:FE:C2:FB:AF:D7:59:DD:F5:2A:82:17:3D:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD544DAA242711F0BDF10FD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7d:a2:fc:e7:f3:a5:fc:4c:0a:00:49:09:db:57:49:9c:4f:
38:97:6a:5f:50:b3:78:11:45:45:ef:a1:6b:90:73:f9:bb:6d:
7b:83:3f:13:de:12:f1:b3:8f:0d:4d:c5:99:00:06:7e:c1:f1:
1e:59:2a:1f:b2:38:1f:23:30:52:db:80:2c:f4:86:90:22:51:
e4:c0:1f:30:76:b6:3d:a9:aa:3c:c0:9b:26:69:ce:77:54:5e:
b4:2d:a5:8b:a9:ac:52:61:f0:dd:55:f3:77:bc:28:d4:54:81:
f3:eb:02:61:62:df:a1:be:d1:c2:35:bf:f6:23:e2:a3:0f:0e:
7b:d8:3f:e5:55:3f:b0:6f:ac:ba:5c:5c:1a:24:f2:f1:d6:f1:
ed:26:c8:bb:25:c4:99:f7:8f:3d:28:0d:3c:26:8e:97:12:f3:
e1:35:91:4f:35:f3:8f:0f:54:0b:5f:0d:8d:cb:14:c8:1a:7b:
6f:56:45:7d:19:df:9a:c5:79:5a:b8:71:14:a0:ec:2c:98:38:
c7:a7:22:8a:6e:78:bb:76:e6:b5:e5:e7:25:06:85:5e:e8:d0:
89:50:fa:05:e9:0d:af:33:95:a0:6f:37:75:c2:59:49:01:f5:
80:a0:d5:56:bd:8b:a7:02:7f:f8:60:8a:c9:a7:8d:90:47:85:
ee:9b:70:09
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU8UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTE1NTI0WhcNMjgwMzE3MTE1NTI0WjAYMRYw
FAYDVQQDEw02ODBmNmNiMC0yNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzIDZmGjD9g7Jq3BSKxbQxscP/tinn0SKgA9/qmjUmomGTgenkSFbMMzb
cEdQGQelgDm4T9mlUUct8BU0kKC0tK5NZUEhRWH4QF02edLGJPXnQ3DsUlZhZ+YP
Ug4wJD9StbKN0jZpcC8QnEsM2IKHEdiqgy9UodThkzorL3oNNWW6L9rSQbS81HOY
YImt2VOnzWsS4GKtR1/KkWznojqFfpzKE8WUW94Wfp+M5Yb40yamA39LaQVFFXZo
d2ACi8kKtCofScjdluZLcGtOTFV0ViQZDSTitaX0nP/TWbFb5knQZVytG3AfBWrD
flzAUE82LJUX52caRjNj2cQrw53RawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLJG
dOczjvb+wvuv11nd9SqCFz2tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDU0NERBQTI0MjcxMUYwQkRGMTBGRDVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcp4MA0GCSqGSIb3DQEBCwUA
A4IBAQCBfaL85/Ol/EwKAEkJ21dJnE84l2pfULN4EUVF76FrkHP5u217gz8T3hLx
s48NTcWZAAZ+wfEeWSofsjgfIzBS24As9IaQIlHkwB8wdrY9qao8wJsmac53VF60
LaWLqaxSYfDdVfN3vCjUVIHz6wJhYt+hvtHCNb/2I+KjDw572D/lVT+wb6y6XFwa
JPLx1vHtJsi7JcSZ9489KA08Jo6XEvPhNZFPNfOPD1QLXw2NyxTIGntvVkV9Gd+a
xXlauHEUoOwsmDjHpyKKbni7dua15eclBoVe6NCJUPoF6Q2vM5Wgbzd1wllJAfWA
oNVWvYunAn/4YIrJp42QR4Xum3AJ
-----END CERTIFICATE-----
Generated at Sat May 10 19:30:39 2025 by rpki-client