Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9CD0A126219911F0A411C5C3DAE4EC9C.roa
File: 9CD0A126219911F0A411C5C3DAE4EC9C.roa (raw, json)
Hash identifier: PQSqbBwzvCFX3edFML0ucO2FZj4nuBqz2eR+xpMmSuI=
Subject key identifier: 4A:39:0E:2A:69:F1:0E:20:6C:D8:03:D7:C5:99:89:C0:03:C6:50:C4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A97
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9CD0A126219911F0A411C5C3DAE4EC9C.roa
Signing time: Fri 25 Apr 2025 05:53:30 +0000
ROA not before: Fri 25 Apr 2025 05:53:25 +0000
ROA not after: Sun 25 Apr 2027 05:53:25 +0000
asID: 834
IP address blocks: 154.16.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 01:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6807 (0x1a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 25 05:53:25 2025 GMT
Not After : Apr 25 05:53:25 2027 GMT
Subject: CN=680b235a-4d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:27:7b:88:e0:c6:72:1f:7f:cc:2f:4b:86:
98:43:a7:99:52:4c:12:5a:a0:ec:a6:fb:03:c6:70:
80:23:b3:f4:2a:01:b5:b9:66:02:ce:33:41:c5:a8:
a3:33:81:ff:93:3c:95:64:c9:60:da:fe:c4:ac:73:
7c:b2:3b:5a:8f:55:45:36:1d:e5:6e:a1:38:92:58:
94:17:10:b4:d5:61:53:c6:f8:19:b6:cf:cc:4f:a6:
89:fa:d2:2c:0a:57:e0:5a:ef:d0:2a:50:65:cb:9e:
ba:f8:1e:26:6e:94:0b:54:66:c8:b0:5c:d7:e6:bb:
2a:9f:31:9c:28:4c:c9:eb:cf:81:45:5b:b9:7e:74:
65:44:17:23:5a:75:85:7f:47:4d:09:81:92:31:8c:
f2:8b:22:b2:3d:d5:e9:2c:43:bb:de:49:4d:12:89:
b3:9a:d5:1d:ca:a6:a6:cb:e1:a3:38:b1:21:20:a8:
e3:a9:a2:4e:5f:a6:0b:fd:9b:54:d9:31:c1:bd:81:
a4:7a:63:db:c6:20:9c:42:4f:db:09:47:71:10:c3:
6a:8c:47:d8:b3:51:4c:30:10:ee:bc:c2:c9:0e:4a:
28:e8:cd:c3:c6:fd:4a:b6:4d:3b:4b:43:2f:12:b2:
13:f6:e9:25:fc:ab:ca:90:9d:ab:53:9e:78:0a:21:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:39:0E:2A:69:F1:0E:20:6C:D8:03:D7:C5:99:89:C0:03:C6:50:C4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9CD0A126219911F0A411C5C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.2.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d9:65:4b:fd:bd:19:fd:e8:82:ae:93:a1:60:9e:36:94:5a:
94:8d:20:23:67:74:f9:7a:92:75:9e:89:ad:1e:22:43:67:1d:
de:31:1e:9c:9c:ae:08:2f:75:30:f8:6d:8f:d6:5f:d2:f3:fa:
88:b4:7e:79:0b:50:f1:7b:78:7c:03:4f:38:51:83:28:b0:3c:
a8:ed:c2:0b:84:ef:b9:b2:2e:5d:db:2d:a1:e1:39:c9:a0:56:
8f:16:69:db:3a:ca:d6:0b:cc:2a:79:88:72:42:53:a8:5b:03:
13:bb:91:c0:c8:35:5c:70:52:36:4e:d4:3c:c7:72:19:dd:30:
34:d5:d4:24:7e:10:76:b1:bd:bf:79:89:75:a3:6e:05:41:a0:
6f:cd:bc:20:45:d6:07:48:f8:57:06:a6:bd:a0:d7:7c:b5:d4:
91:1e:6d:b4:1b:fe:5d:cb:0c:de:ed:cb:6b:fd:fb:9d:57:c3:
81:b5:2c:3b:5a:68:3f:52:6c:1b:43:83:80:6e:6f:ed:ce:00:
42:85:a5:e3:12:74:3f:f4:fc:d6:ad:df:a4:63:5e:aa:23:0d:
71:91:06:fc:1c:7a:68:4a:63:86:d3:49:c8:37:1e:6c:22:e5:
9f:0e:6b:6d:69:5b:d5:8d:07:b1:17:15:cd:ab:c0:93:ba:a3:
db:7e:6f:11
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA0MjUwNTUzMjVaFw0yNzA0MjUwNTUzMjVaMBgxFjAU
BgNVBAMTDTY4MGIyMzVhLTRkMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFfid7iODGch9/zC9LhphDp5lSTBJaoOym+wPGcIAjs/QqAbW5ZgLOM0HF
qKMzgf+TPJVkyWDa/sSsc3yyO1qPVUU2HeVuoTiSWJQXELTVYVPG+Bm2z8xPpon6
0iwKV+Ba79AqUGXLnrr4HiZulAtUZsiwXNfmuyqfMZwoTMnrz4FFW7l+dGVEFyNa
dYV/R00JgZIxjPKLIrI91eksQ7veSU0SibOa1R3KpqbL4aM4sSEgqOOpok5fpgv9
m1TZMcG9gaR6Y9vGIJxCT9sJR3EQw2qMR9izUUwwEO68wskOSijozcPG/Uq2TTtL
Qy8SshP26SX8q8qQnatTnngKIcFpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSjkO
KmnxDiBs2APXxZmJwAPGUMQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlDRDBBMTI2MjE5OTExRjBBNDExQzVDM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAIwDQYJKoZIhvcNAQEL
BQADggEBAGLZZUv9vRn96IKuk6FgnjaUWpSNICNndPl6knWeia0eIkNnHd4xHpyc
rggvdTD4bY/WX9Lz+oi0fnkLUPF7eHwDTzhRgyiwPKjtwguE77myLl3bLaHhOcmg
Vo8Wads6ytYLzCp5iHJCU6hbAxO7kcDINVxwUjZO1DzHchndMDTV1CR+EHaxvb95
iXWjbgVBoG/NvCBF1gdI+FcGpr2g13y11JEebbQb/l3LDN7ty2v9+51Xw4G1LDta
aD9SbBtDg4Bub+3OAEKFpeMSdD/0/Nat36RjXqojDXGRBvwcemhKY4bTScg3Hmwi
5Z8Oa21pW9WNB7EXFc2rwJO6o9t+bxE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:05:44 2025 by rpki-client