Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/04AB017A977D11F0A97D3391DAE4EC9C.roa
File: 04AB017A977D11F0A97D3391DAE4EC9C.roa (raw, json)
Hash identifier: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=
Subject key identifier: 4E:88:B9:19:49:3E:92:37:A3:42:C2:F6:3C:B1:10:2D:D9:F5:1E:EE
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0644
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/04AB017A977D11F0A97D3391DAE4EC9C.roa
Signing time: Mon 22 Sep 2025 06:26:06 +0000
ROA not before: Mon 22 Sep 2025 06:26:01 +0000
ROA not after: Wed 30 Sep 2026 06:26:01 +0000
asID: 328327
IP address blocks: 102.140.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 22 06:26:01 2025 GMT
Not After : Sep 30 06:26:01 2026 GMT
Subject: CN=68d0ebfe-ec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:3f:3e:b0:b0:92:78:af:68:04:9c:1f:53:
34:05:0c:b4:be:27:c1:32:e4:43:f0:73:98:0b:f5:
ca:23:a5:47:d0:c8:dd:18:e3:14:dd:73:45:cb:27:
e5:37:95:f0:2a:97:07:b0:3e:2e:49:ae:85:65:22:
64:60:60:ac:12:45:53:91:ad:ce:4a:d3:f7:a1:c0:
3f:32:45:83:82:88:88:3d:c3:0b:0d:d8:c9:40:2e:
d2:8c:7d:25:fa:b8:b8:33:47:fd:5b:f1:3f:24:ea:
5e:ac:76:ec:f8:f4:64:a6:33:f6:f9:b3:53:e7:4d:
71:fd:8e:f2:bd:31:ef:86:cb:08:b4:73:b5:00:68:
a5:b6:d6:4e:20:0f:f8:a9:e9:cd:f1:92:f2:46:35:
f2:f4:21:9d:c1:fb:cd:80:c6:dc:fc:d9:4b:91:6c:
b2:25:0c:9e:72:a3:93:e7:f2:29:fd:9c:c3:15:de:
10:51:8c:b4:4d:f3:40:d1:0a:16:dd:85:cd:d5:f7:
19:10:3d:0a:2b:a6:d4:b6:28:82:ee:11:83:83:10:
87:01:d5:a2:66:eb:11:2e:af:71:aa:7d:92:86:f2:
03:89:32:bb:8c:f2:17:3f:36:e9:78:3d:6d:43:c9:
a5:fd:71:dd:89:13:71:cb:6c:d7:02:d0:cf:d3:42:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:B9:19:49:3E:92:37:A3:42:C2:F6:3C:B1:10:2D:D9:F5:1E:EE
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/04AB017A977D11F0A97D3391DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:66:0e:78:e6:50:a6:53:46:ce:ba:e6:c4:cb:8a:d6:a8:27:
4d:5f:0d:a3:b5:cf:ce:0f:4d:03:31:88:d9:1b:6c:86:30:b9:
01:1a:1a:c3:69:52:6c:56:85:78:03:33:37:db:eb:4c:a8:94:
34:13:50:82:ea:ad:3d:5a:7b:c2:3a:2b:c4:00:80:e3:97:36:
94:4f:a6:6d:1c:fe:8f:28:53:76:31:1f:6a:3f:c6:7c:87:82:
bf:cd:2d:fd:50:ba:fb:9e:4a:8c:05:36:c1:e3:af:28:ab:cc:
75:64:6e:5d:fe:8e:09:fe:2f:93:1c:06:b6:78:20:10:75:13:
19:b9:15:3d:e8:7b:7c:70:82:81:d4:b7:2e:ab:c9:e8:d5:ac:
f4:bb:9c:ef:b5:15:62:3b:68:de:0c:1d:92:cd:a4:2e:c0:ad:
bb:06:59:8f:cb:a5:be:ee:7a:4c:52:0a:14:37:d5:c7:43:47:
a1:04:5e:24:92:c5:0c:55:f8:b1:f9:66:09:07:f5:8b:df:41:
d3:c6:01:f4:3f:01:ad:5c:96:7b:18:fb:a9:b1:c6:7f:1d:2c:
d4:70:df:d8:59:c6:8b:65:87:2c:dc:71:46:fa:1c:32:f0:ce:
e2:d9:b0:73:40:43:6f:16:02:59:25:29:6b:c6:25:5a:c8:ee:
b5:24:1d:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNTA5MjIwNjI2MDFaFw0yNjA5MzAwNjI2MDFaMBgxFjAU
BgNVBAMTDTY4ZDBlYmZlLWVjODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSkj8+sLCSeK9oBJwfUzQFDLS+J8Ey5EPwc5gL9cojpUfQyN0Y4xTdc0XL
J+U3lfAqlwewPi5JroVlImRgYKwSRVORrc5K0/ehwD8yRYOCiIg9wwsN2MlALtKM
fSX6uLgzR/1b8T8k6l6sduz49GSmM/b5s1PnTXH9jvK9Me+Gywi0c7UAaKW21k4g
D/ip6c3xkvJGNfL0IZ3B+82Axtz82UuRbLIlDJ5yo5Pn8in9nMMV3hBRjLRN80DR
Chbdhc3V9xkQPQorptS2KILuEYODEIcB1aJm6xEur3GqfZKG8gOJMruM8hc/Nul4
PW1DyaX9cd2JE3HLbNcC0M/TQsghAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUToi5
GUk+kjejQsL2PLEQLdn1Hu4wHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFLzA0QUIwMTdBOTc3RDExRjBBOTdEMzM5MURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmjE0wDQYJKoZIhvcNAQEL
BQADggEBAC5mDnjmUKZTRs665sTLitaoJ01fDaO1z84PTQMxiNkbbIYwuQEaGsNp
UmxWhXgDMzfb60yolDQTUILqrT1ae8I6K8QAgOOXNpRPpm0c/o8oU3YxH2o/xnyH
gr/NLf1QuvueSowFNsHjryirzHVkbl3+jgn+L5McBrZ4IBB1Exm5FT3oe3xwgoHU
ty6ryejVrPS7nO+1FWI7aN4MHZLNpC7ArbsGWY/Lpb7uekxSChQ31cdDR6EEXiSS
xQxV+LH5ZgkH9YvfQdPGAfQ/Aa1clnsY+6mxxn8dLNRw39hZxotlhyzccUb6HDLw
zuLZsHNAQ28WAlklKWvGJVrI7rUkHTU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:35 2025 by rpki-client