Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD8D706E243C11F087935DE0DAE4EC9C.roa
File: CD8D706E243C11F087935DE0DAE4EC9C.roa (raw, json)
Hash identifier: h9W67o3foh5nZSNf5M/DbO6UmJUfaiGdOsXVhvB55OM=
Subject key identifier: 74:75:AC:B2:32:6A:5E:BF:7B:20:08:D3:F6:D3:0E:5C:F3:16:29:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD8D706E243C11F087935DE0DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:26:42 +0000
ROA not before: Mon 28 Apr 2025 14:26:37 +0000
ROA not after: Mon 27 Mar 2028 14:26:37 +0000
asID: 17561
IP address blocks: 154.81.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97285 (0x17c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 14:26:37 2025 GMT
Not After : Mar 27 14:26:37 2028 GMT
Subject: CN=680f9022-83aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:ff:ea:c1:58:f5:8f:b9:a1:94:0a:c1:4e:
49:84:fc:4b:26:1d:8c:61:b5:d5:8d:2d:39:9d:0f:
55:29:a6:a2:e0:e7:96:a5:1a:bf:37:06:81:63:75:
9b:35:5a:c0:4d:14:7b:20:17:7c:f7:d9:43:cf:ba:
16:07:19:70:6b:dd:ed:2a:a9:a2:c4:53:ce:2e:0c:
ce:0a:36:ef:f9:88:42:b3:53:1b:02:16:1d:99:1e:
d2:c9:c9:89:d7:a8:b1:72:5e:23:59:63:31:c4:36:
1d:f8:71:4a:61:23:0d:29:ee:51:39:1e:fa:4d:d4:
c7:3b:91:6f:1c:bb:91:55:bb:43:50:a0:60:42:71:
5a:0c:5a:20:ba:1b:7b:41:bf:d5:d0:78:f6:14:2d:
7d:4c:10:da:ad:9a:1e:92:d7:68:3c:63:0b:c2:83:
2f:ae:a4:d7:54:0c:c2:a4:69:fa:ee:24:f4:7f:54:
d9:79:57:70:fc:f7:ec:9a:26:44:34:4a:61:d1:96:
5d:47:e1:54:fc:65:91:6f:3d:56:f3:c9:0b:95:bf:
8c:7b:89:d1:cd:92:f8:73:0f:76:7f:a6:ba:cc:58:
05:59:18:7a:4d:58:49:4a:3e:07:e2:45:b1:38:fa:
e9:56:3f:38:f9:38:98:3c:69:35:71:32:69:6f:68:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:75:AC:B2:32:6A:5E:BF:7B:20:08:D3:F6:D3:0E:5C:F3:16:29:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD8D706E243C11F087935DE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:48:52:6d:f9:8c:84:3f:ac:52:9c:59:f4:77:70:18:c1:a7:
a1:6d:59:03:44:75:50:48:57:60:1b:ef:f9:56:07:bf:b8:2e:
a8:81:42:03:d5:19:c8:96:6c:c4:e6:d5:cc:ed:c8:52:3a:8f:
97:db:65:f1:30:73:35:43:7a:8c:18:9f:39:f6:eb:f5:35:e2:
bf:4a:f2:16:37:37:c9:05:eb:7f:f6:5c:67:f3:f6:02:c6:ea:
72:30:b2:33:4f:ae:28:3a:8c:7a:61:3a:34:98:67:b6:de:cc:
52:6d:4f:c7:f1:d6:ac:92:51:de:73:a5:6b:2e:c6:6a:02:6b:
9a:d9:eb:1a:39:d4:27:4c:39:62:c6:56:d7:56:54:9e:ab:64:
ed:f6:d4:7b:e8:f6:61:d9:97:4d:9f:bf:1b:73:4f:5a:80:c4:
67:be:52:0c:11:e0:61:6b:f5:44:3d:ed:a9:ce:f9:d4:c9:46:
c0:ac:8d:cd:4f:f4:e0:da:7d:c5:41:bb:06:bb:3a:8b:e5:a5:
dd:2d:c7:c1:c0:fe:f7:f4:26:1d:a9:3d:9c:1f:05:2e:c5:6e:
4e:71:d5:8f:7e:0e:46:07:bf:66:30:25:62:09:27:7c:6e:cd:
c6:7b:1d:b9:f4:cc:76:23:1a:76:4b:3b:7f:12:ba:57:5c:65:
2e:b4:b7:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXwFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTQyNjM3WhcNMjgwMzI3MTQyNjM3WjAYMRYw
FAYDVQQDEw02ODBmOTAyMi04M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA16//6sFY9Y+5oZQKwU5JhPxLJh2MYbXVjS05nQ9VKaai4OeWpRq/NwaB
Y3WbNVrATRR7IBd899lDz7oWBxlwa93tKqmixFPOLgzOCjbv+YhCs1MbAhYdmR7S
ycmJ16ixcl4jWWMxxDYd+HFKYSMNKe5ROR76TdTHO5FvHLuRVbtDUKBgQnFaDFog
uht7Qb/V0Hj2FC19TBDarZoektdoPGMLwoMvrqTXVAzCpGn67iT0f1TZeVdw/Pfs
miZENEph0ZZdR+FU/GWRbz1W88kLlb+Me4nRzZL4cw92f6a6zFgFWRh6TVhJSj4H
4kWxOPrpVj84+TiYPGk1cTJpb2g/FwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHR1
rLIyal6/eyAI0/bTDlzzFil1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRDhENzA2RTI0M0MxMUYwODc5MzVERTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEOMA0GCSqGSIb3DQEB
CwUAA4IBAQBLSFJt+YyEP6xSnFn0d3AYwaehbVkDRHVQSFdgG+/5Vge/uC6ogUID
1RnIlmzE5tXM7chSOo+X22XxMHM1Q3qMGJ859uv1NeK/SvIWNzfJBet/9lxn8/YC
xupyMLIzT64oOox6YTo0mGe23sxSbU/H8dasklHec6VrLsZqAmua2esaOdQnTDli
xlbXVlSeq2Tt9tR76PZh2ZdNn78bc09agMRnvlIMEeBha/VEPe2pzvnUyUbArI3N
T/Tg2n3FQbsGuzqL5aXdLcfBwP739CYdqT2cHwUuxW5OcdWPfg5GB79mMCViCSd8
bs3Gex259Mx2Ixp2Szt/ErpXXGUutLeP
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:00:31 2025 by rpki-client