Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/33EB252EA01411F08F17EEB4DAE4EC9C.roa
File: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (raw, json)
Hash identifier: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=
Subject key identifier: 17:1B:AF:D8:73:1D:5C:65:ED:84:4A:36:30:B1:E1:E5:E4:56:C7:87
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0665
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/33EB252EA01411F08F17EEB4DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:48:28 +0000
ROA not before: Fri 03 Oct 2025 04:48:23 +0000
ROA not after: Sun 31 Dec 2045 04:48:23 +0000
asID: 328327
IP address blocks: 102.140.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:48:23 2025 GMT
Not After : Dec 31 04:48:23 2045 GMT
Subject: CN=68df559c-4bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:76:bf:0c:a8:05:88:56:94:24:c6:62:5e:
a7:ed:d2:06:ba:9d:ed:b1:a8:a4:91:19:7e:71:04:
7d:da:b4:29:be:08:ea:f3:aa:a2:6a:ab:33:4a:16:
fb:25:4d:47:09:b9:ce:a2:e4:c3:3b:d5:3a:d0:8e:
ab:91:2f:81:59:5f:39:37:08:10:a5:db:d2:59:8d:
6b:88:33:1c:28:5e:2c:0e:55:d4:b0:5f:38:11:60:
9c:36:14:48:06:a2:eb:d3:6a:2b:c9:ce:b5:9e:5e:
71:0a:c2:0a:e6:28:74:c7:27:de:17:d2:4c:28:51:
a7:91:08:98:e3:91:23:a2:3a:fc:0b:2a:eb:1a:a1:
2c:46:7f:07:b2:08:9b:4a:81:61:bf:47:94:ae:46:
0c:c8:ee:55:01:48:59:67:d7:9d:e6:1b:ef:92:4a:
e9:da:45:5d:a2:21:a1:6b:b1:19:00:8a:6e:9e:e7:
0f:ca:40:18:eb:a7:1d:e3:77:99:c1:a9:02:c2:9c:
88:04:29:c9:1b:39:5d:de:ba:ea:21:42:98:16:3b:
12:66:43:ae:6f:40:b5:06:27:bb:0a:29:3e:e2:a8:
e5:a4:c5:08:48:e1:7a:e8:ad:ec:59:09:9e:27:7a:
ee:c3:6d:5c:84:03:88:5e:5e:d8:d6:bf:1a:6c:be:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:AF:D8:73:1D:5C:65:ED:84:4A:36:30:B1:E1:E5:E4:56:C7:87
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/33EB252EA01411F08F17EEB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.73.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d2:d8:cf:40:29:65:04:20:41:94:b8:4e:ee:bb:3d:30:1c:
79:0d:16:55:73:13:3c:b8:17:06:b9:9c:26:69:8e:7d:b1:d8:
df:5c:e9:34:87:0b:34:b0:93:c3:28:7a:ca:a7:37:f1:10:f4:
7d:94:74:a6:ba:7f:9f:45:a3:fe:5a:e6:e9:92:49:40:19:87:
ba:7a:2d:62:0a:b3:5a:cd:fc:15:94:3b:6d:61:50:a5:17:ae:
26:55:2a:be:fe:bf:0c:a9:c1:8e:40:4d:d8:4d:c2:30:c8:9e:
ff:76:a0:33:d3:b9:93:8f:a4:5b:cf:80:91:24:8b:79:93:f5:
38:2a:a9:ab:f0:2e:56:53:ed:63:36:54:53:97:85:19:b4:25:
7e:99:f1:7c:a2:74:cf:bd:eb:69:ab:c5:db:89:2c:26:f2:ee:
41:b0:6b:3a:fa:3c:02:d9:79:9b:b0:0c:12:26:60:45:5f:66:
6b:d1:f8:55:65:ae:50:15:3f:c2:15:d7:e9:38:69:35:1b:b6:
48:d7:0c:77:8a:72:39:25:17:5f:08:3c:b1:ea:01:c0:92:9c:
8b:a3:37:2e:8b:8b:19:1d:e4:2a:ea:67:f0:22:24:cf:f8:9c:
6f:80:80:db:1e:4e:e0:4e:7e:6a:a8:eb:72:ff:3d:42:33:d6:
b0:2f:39:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNTEwMDMwNDQ4MjNaFw00NTEyMzEwNDQ4MjNaMBgxFjAU
BgNVBAMTDTY4ZGY1NTljLTRiZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN53a/DKgFiFaUJMZiXqft0ga6ne2xqKSRGX5xBH3atCm+COrzqqJqqzNK
FvslTUcJuc6i5MM71TrQjquRL4FZXzk3CBCl29JZjWuIMxwoXiwOVdSwXzgRYJw2
FEgGouvTaivJzrWeXnEKwgrmKHTHJ94X0kwoUaeRCJjjkSOiOvwLKusaoSxGfwey
CJtKgWG/R5SuRgzI7lUBSFln153mG++SSunaRV2iIaFrsRkAim6e5w/KQBjrpx3j
d5nBqQLCnIgEKckbOV3euuohQpgWOxJmQ65vQLUGJ7sKKT7iqOWkxQhI4XrorexZ
CZ4neu7DbVyEA4heXtjWvxpsvu7RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFxuv
2HMdXGXthEo2MLHh5eRWx4cwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFLzMzRUIyNTJFQTAxNDExRjA4RjE3RUVCNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmjEkwDQYJKoZIhvcNAQEL
BQADggEBAAPS2M9AKWUEIEGUuE7uuz0wHHkNFlVzEzy4Fwa5nCZpjn2x2N9c6TSH
CzSwk8MoesqnN/EQ9H2UdKa6f59Fo/5a5umSSUAZh7p6LWIKs1rN/BWUO21hUKUX
riZVKr7+vwypwY5ATdhNwjDInv92oDPTuZOPpFvPgJEki3mT9TgqqavwLlZT7WM2
VFOXhRm0JX6Z8XyidM+962mrxduJLCby7kGwazr6PALZeZuwDBImYEVfZmvR+FVl
rlAVP8IV1+k4aTUbtkjXDHeKcjklF18IPLHqAcCSnIujNy6Lixkd5CrqZ/AiJM/4
nG+AgNseTuBOfmqo63L/PUIz1rAvOaE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:40 2025 by rpki-client