Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/46A7485EA01A11F08EC941DFDAE4EC9C.roa
File: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (raw, json)
Hash identifier: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=
Subject key identifier: C6:A1:5A:3E:1D:E7:4E:6A:DF:AC:5C:96:E1:75:9B:C7:BC:C7:EE:4F
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 068F
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/46A7485EA01A11F08EC941DFDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:31:57 +0000
ROA not before: Fri 03 Oct 2025 05:31:52 +0000
ROA not after: Sun 31 Dec 2045 05:31:52 +0000
asID: 328327
IP address blocks: 102.140.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:31:52 2025 GMT
Not After : Dec 31 05:31:52 2045 GMT
Subject: CN=68df5fcd-f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:b1:92:9e:1b:4f:7c:4d:86:7f:c0:6d:1d:
19:e6:b3:66:5a:22:f2:bc:b1:12:e3:f7:15:8a:2a:
01:b7:8d:93:4e:8f:62:1a:93:39:4b:8b:40:58:13:
40:0e:43:33:b2:7f:4c:16:13:b5:80:e5:c3:79:8b:
58:12:5d:ff:c7:ec:90:7c:fe:73:20:c6:7f:04:49:
99:dc:c4:e4:3d:29:0c:c3:f9:db:40:cb:b4:61:48:
d6:46:e0:ea:c2:4f:6d:e8:74:06:4b:6d:37:9b:51:
87:6e:e1:cd:6b:75:ca:17:bf:fe:90:2c:91:36:60:
f9:bf:28:23:7f:f0:80:07:e0:82:31:37:55:dc:8d:
4d:74:68:64:ba:e4:28:bc:32:92:6a:56:b0:bf:c0:
19:48:f1:d3:af:22:0a:92:af:c8:a2:9a:7f:61:4e:
12:7b:67:11:04:d9:ef:cd:a9:e3:9a:03:9f:4d:09:
a3:85:5a:35:fb:e6:1f:b8:5f:54:05:ed:eb:47:b8:
ab:a1:ab:d1:59:51:fb:db:eb:6b:2b:02:b0:c4:0f:
23:56:b9:db:c8:2d:15:19:98:2f:a1:1b:49:57:fd:
b9:b2:dd:60:21:06:23:42:d2:e5:b9:a7:4d:c8:c9:
e1:4b:d2:ab:49:04:bc:56:d9:cc:42:03:c4:13:57:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A1:5A:3E:1D:E7:4E:6A:DF:AC:5C:96:E1:75:9B:C7:BC:C7:EE:4F
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/46A7485EA01A11F08EC941DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.72.0/21
Signature Algorithm: sha256WithRSAEncryption
82:27:83:ec:50:6e:cd:96:5c:33:b6:a0:d9:06:4a:1e:2b:4b:
c9:49:dd:d5:65:bc:31:0b:db:23:1e:d8:c2:89:c6:25:cb:30:
99:b2:09:d9:b4:1d:0c:b4:28:c1:04:bc:61:61:75:66:24:eb:
f6:fc:a1:73:3a:96:90:fc:2d:f3:84:6b:1f:d4:2e:04:0f:12:
6d:83:48:35:ec:39:7a:a9:d8:50:62:15:f3:84:bc:b1:9a:54:
df:e6:72:96:53:20:4e:79:0d:f8:8f:f7:96:62:3c:5e:1a:df:
f6:53:7d:e8:67:f9:38:9a:74:2a:ad:26:79:ff:77:6a:fd:a8:
7f:69:d8:e4:61:bf:7c:5a:50:c9:bd:f5:da:91:b6:ab:1b:82:
c8:3a:95:34:9a:45:fe:6b:c7:7a:5e:e6:29:26:c4:51:d1:da:
03:e7:ba:73:c7:64:37:46:2f:39:f0:75:4a:0a:d3:0b:1d:c9:
63:b6:01:b1:a7:86:78:e1:42:df:49:c8:12:ea:fa:7c:67:13:
e2:22:0a:bc:24:48:fc:21:2c:b1:48:c4:3a:af:74:6a:36:de:
9c:4e:92:57:71:40:d3:43:25:7e:13:d4:42:8b:fd:f7:34:8b:
fc:03:19:2f:87:c6:c9:da:ec:9b:4e:f9:2f:6e:8d:e6:1b:e0:
39:41:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:42 2025 by rpki-client