Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/4C032782A01511F0999B65BEDAE4EC9C.roa
File: 4C032782A01511F0999B65BEDAE4EC9C.roa (raw, json)
Hash identifier: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=
Subject key identifier: AB:9E:58:1C:6F:A2:3C:AE:24:22:13:79:88:18:42:2C:D7:E8:2A:C8
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0673
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/4C032782A01511F0999B65BEDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:56:18 +0000
ROA not before: Fri 03 Oct 2025 04:56:13 +0000
ROA not after: Sun 31 Dec 2045 04:56:13 +0000
asID: 328327
IP address blocks: 102.140.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:56:13 2025 GMT
Not After : Dec 31 04:56:13 2045 GMT
Subject: CN=68df5772-9101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:15:4c:d0:7f:5b:8e:71:86:97:a5:d1:53:
fe:95:60:3e:7a:85:84:4a:e9:5a:2d:37:a5:0e:78:
fa:fd:bc:6e:19:78:f1:50:ac:48:41:10:84:b2:b7:
eb:3e:f4:9b:dd:de:a8:60:39:2a:0f:3f:ce:f2:55:
12:7f:36:52:8f:41:82:d8:6a:ec:a6:e2:ee:87:be:
1b:90:76:d0:69:00:03:41:04:82:05:d7:6e:fa:d9:
20:f5:16:95:77:2c:c7:fd:5b:3b:aa:a9:6c:80:d5:
10:fd:76:22:69:4d:57:37:d7:ea:b4:53:d8:ea:6d:
0f:92:46:2f:b0:6e:24:3a:9a:e3:1e:35:64:68:ad:
f6:b9:a2:1e:ca:9e:cb:13:6d:12:f7:63:6d:86:d6:
48:58:88:9e:49:7f:c7:c1:db:df:14:e1:48:ea:d9:
de:7e:3d:8e:b6:a6:b1:47:2c:51:df:65:d1:cd:02:
da:61:26:46:e3:fd:ef:10:89:84:14:53:07:49:1f:
77:04:9f:f8:63:64:94:f9:70:d9:2f:2c:db:61:c2:
8a:2a:7c:69:7f:1e:b9:95:2f:f1:f2:01:5a:34:6f:
2d:89:fc:5d:80:eb:ce:3b:84:1b:f3:54:7b:df:f1:
11:08:fc:2a:2a:35:51:3a:ed:63:e2:a8:39:f7:90:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9E:58:1C:6F:A2:3C:AE:24:22:13:79:88:18:42:2C:D7:E8:2A:C8
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/4C032782A01511F0999B65BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1f:96:63:77:5f:18:9b:e9:cf:37:65:17:e0:c9:bd:6d:9a:
cb:f5:df:cd:ff:9a:08:e2:99:04:22:13:c6:dc:da:fe:de:d1:
bb:6e:57:91:34:a5:a2:a5:dc:63:b8:53:17:90:e7:b1:6c:89:
46:77:4c:55:77:32:86:a5:3a:05:7b:e6:b9:e3:51:bb:88:58:
9f:32:17:17:91:93:47:88:05:53:88:de:c2:1a:f8:e7:6e:e8:
e0:53:48:c9:de:e5:a3:48:38:33:8b:61:9c:6f:e0:84:95:06:
a3:e7:b2:98:6e:05:87:b5:03:ea:52:18:de:28:5a:12:a3:2e:
79:5e:a0:09:1a:27:72:bc:19:ff:b2:6d:77:56:24:be:2b:97:
f3:b7:c3:a3:a1:56:72:6a:70:3c:f9:13:ba:fd:77:1c:5b:72:
17:90:d4:bc:fb:7c:dd:51:a7:e4:a6:c5:70:48:f2:2c:b2:af:
b3:5a:fe:85:af:2e:9b:72:9b:50:3c:14:0b:c9:ae:26:4a:3a:
a4:a1:94:c8:f7:6f:cc:75:c3:3b:a8:ca:4c:88:71:44:3b:1a:
7a:a1:77:37:72:8a:23:2a:04:e2:c5:22:d9:24:b5:7d:ea:81:
00:f9:d4:d4:5e:5e:e2:8a:5a:b4:37:f2:be:4e:59:2f:4d:3f:
da:6c:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:30 2025 by rpki-client