Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2AC075F0A01211F0B72F98A6DAE4EC9C.roa
File: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (raw, json)
Hash identifier: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=
Subject key identifier: 46:ED:D0:02:02:34:E4:14:A1:46:2C:3E:E5:0F:5E:44:DE:CC:CD:EC
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0653
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2AC075F0A01211F0B72F98A6DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:33:54 +0000
ROA not before: Fri 03 Oct 2025 04:33:48 +0000
ROA not after: Sun 31 Dec 2045 04:33:48 +0000
asID: 328327
IP address blocks: 102.140.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:33:48 2025 GMT
Not After : Dec 31 04:33:48 2045 GMT
Subject: CN=68df5232-49de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:46:13:9c:b1:48:42:c4:62:93:44:8e:70:
56:08:88:91:4e:4f:0a:a8:b6:5d:52:74:04:75:78:
a8:f3:e2:a5:f3:ac:63:8c:86:9f:d5:92:21:d1:2e:
3f:d4:70:8d:2f:b5:d8:f7:ac:7e:50:a8:f7:64:53:
b8:07:52:c5:89:42:62:25:39:ef:df:e3:4d:30:dd:
f7:cb:3b:38:dd:e4:b7:2d:9c:c2:63:0c:58:04:8a:
c6:45:00:ea:6e:fa:ac:d8:e7:70:36:2a:3f:dc:ca:
e3:06:8a:2a:f2:b4:df:56:63:d3:59:1d:54:6a:a6:
43:a2:8d:3d:96:f1:7c:96:5e:b0:29:ab:40:c6:e6:
7b:37:a5:0e:e3:8d:ec:76:1a:de:13:da:cf:62:c5:
e3:51:c1:68:38:45:c4:5e:1e:e7:7d:0b:47:e9:2b:
71:f5:dd:51:2b:8b:63:4a:08:73:57:fd:e1:36:d8:
98:68:e5:25:a8:73:dd:e4:25:0f:77:56:fa:a1:af:
30:62:59:37:17:1d:d8:d6:0a:02:27:b4:e1:e4:f0:
1a:24:0e:a0:f6:23:21:b5:af:24:4c:93:41:67:7c:
e8:0f:04:fd:8e:1b:99:37:57:b4:42:c3:37:0b:64:
c8:22:5f:dd:ed:84:3a:0b:f9:6b:ab:3f:4e:19:03:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:D0:02:02:34:E4:14:A1:46:2C:3E:E5:0F:5E:44:DE:CC:CD:EC
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2AC075F0A01211F0B72F98A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.64.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:97:e9:7d:f5:06:73:52:f5:0b:75:20:3e:b4:a0:d7:a3:cb:
7e:25:e4:49:88:68:3b:e2:38:d7:e9:de:a7:7f:e2:01:39:0c:
d1:d7:3e:65:e1:8b:24:95:5a:0d:5a:85:bd:f0:a0:ba:6a:35:
7a:9d:8e:cb:9f:f0:50:e8:e9:8f:c4:61:06:4f:4b:aa:fb:62:
eb:ce:fa:37:f9:83:ca:d8:39:74:e0:9a:1a:c1:f2:8c:91:72:
7f:1a:1f:12:aa:94:44:d0:0e:67:1c:14:81:51:76:ea:64:b5:
db:c9:74:2c:a6:90:09:0b:86:34:4c:a9:d6:e1:99:e2:77:11:
06:7e:d6:7d:d5:27:65:41:f1:7c:44:9a:fe:0f:e8:76:48:19:
ca:73:bf:4f:98:b2:ce:19:1c:c2:b1:b0:40:ab:e6:2c:af:9c:
f8:82:76:b4:b9:ff:21:e3:91:b4:b6:6d:9b:7b:b4:72:d5:a3:
a3:15:28:46:89:86:b3:c0:87:6a:bc:96:b5:e3:76:98:dd:a1:
0f:1a:5a:1b:71:4a:fb:44:bb:88:1a:88:e4:0e:a7:ef:fb:aa:
20:74:88:d9:5f:b3:17:01:56:ed:25:6a:79:9e:cd:6b:42:66:
95:a9:df:6b:9a:66:5f:8d:fa:23:49:e0:26:73:0d:35:09:61:
7b:b4:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:42 2025 by rpki-client