Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/69351E4CA01411F0BCA38EB5DAE4EC9C.roa
File: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (raw, json)
Hash identifier: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=
Subject key identifier: 6E:AD:75:88:F5:DF:A7:ED:72:F9:3A:44:B9:7A:D5:89:82:8A:55:6A
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0667
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/69351E4CA01411F0BCA38EB5DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:49:58 +0000
ROA not before: Fri 03 Oct 2025 04:49:53 +0000
ROA not after: Sun 31 Dec 2045 04:49:53 +0000
asID: 328327
IP address blocks: 102.140.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:49:53 2025 GMT
Not After : Dec 31 04:49:53 2045 GMT
Subject: CN=68df55f6-d93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:6f:9c:ef:b2:8f:de:37:6e:8d:f8:23:e7:
a9:a1:03:89:7c:58:89:15:2f:e6:0d:7e:31:64:3d:
99:a6:c8:62:93:6b:71:e2:8b:fc:99:9e:45:8f:fb:
57:a1:bf:a7:cb:6d:bb:75:31:02:05:fb:60:a4:6d:
b6:69:4f:2b:ce:56:75:04:dd:e6:9b:7a:db:3a:0d:
cf:13:33:0c:8b:ec:dd:48:8a:f4:8e:9b:64:a3:bd:
5f:30:8b:fe:ff:ca:a1:96:de:e4:17:e1:d3:81:ec:
6a:67:cc:7b:2d:4d:e4:a7:7e:2f:5c:b9:cd:06:24:
0e:cf:d1:18:96:ff:ba:4f:99:52:5f:e7:f4:ca:2c:
76:8f:6a:43:1c:a2:9f:a1:b2:8a:6b:24:ef:ca:dc:
2d:23:5e:1d:da:31:86:bd:6b:29:c9:10:8a:c9:6e:
f1:fd:49:c1:b4:81:18:29:3f:fc:22:da:c3:1a:ed:
0f:a7:0a:0b:cd:04:61:00:28:42:f4:4d:82:eb:90:
87:ce:56:cc:ee:9e:d2:0d:e6:ee:28:7a:5f:a9:6b:
ce:19:7f:25:86:d0:bb:02:d4:05:88:63:dd:48:91:
6c:69:a8:e4:3d:30:81:b2:bf:47:24:86:9c:a4:c0:
00:09:c1:fc:f8:4a:09:a5:e5:81:e0:60:9b:2d:94:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AD:75:88:F5:DF:A7:ED:72:F9:3A:44:B9:7A:D5:89:82:8A:55:6A
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/69351E4CA01411F0BCA38EB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.72.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:af:32:16:95:d0:36:a7:f5:ee:27:dd:9b:f9:69:8a:bf:09:
bc:72:9b:da:a5:b6:f8:94:a1:0d:30:4c:bc:d4:55:2d:07:95:
76:97:a5:66:41:f4:b2:a7:83:2d:bc:e5:57:18:ca:87:91:a3:
71:d8:38:6c:f9:0d:79:c2:8d:c5:01:3b:4a:18:9a:a4:32:2b:
a2:5e:b8:8a:a5:d4:a5:61:96:dd:f0:ac:7d:22:ba:aa:80:19:
73:10:96:ac:e9:be:26:e4:dc:63:42:07:7d:16:29:5e:b3:45:
f8:9f:1e:2a:d6:05:6b:ea:30:b0:27:b5:b4:f8:03:0d:3c:da:
0b:60:49:75:22:0c:66:cb:d7:ff:93:ce:95:4e:fb:3c:36:ab:
34:b6:d0:71:56:ed:27:fd:ae:a0:d1:aa:b0:28:ab:21:3f:cc:
47:c6:f2:f1:cb:3b:83:35:ec:16:90:c8:2f:20:d8:54:78:2a:
73:14:ef:65:27:84:c8:36:af:c0:9b:1e:73:a7:d0:d0:06:49:
85:8e:20:51:05:d2:be:fc:b1:06:34:2a:9d:07:14:51:9b:9f:
18:4c:e8:8a:06:4f:89:24:c4:1b:b1:75:54:46:b8:65:53:de:
c3:8d:2f:cb:53:83:9a:7b:61:62:e5:80:84:2f:34:31:0d:bd:
d1:24:58:79
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNTEwMDMwNDQ5NTNaFw00NTEyMzEwNDQ5NTNaMBgxFjAU
BgNVBAMTDTY4ZGY1NWY2LWQ5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+EW+c77KP3jdujfgj56mhA4l8WIkVL+YNfjFkPZmmyGKTa3Hii/yZnkWP
+1ehv6fLbbt1MQIF+2CkbbZpTyvOVnUE3eabets6Dc8TMwyL7N1IivSOm2SjvV8w
i/7/yqGW3uQX4dOB7GpnzHstTeSnfi9cuc0GJA7P0RiW/7pPmVJf5/TKLHaPakMc
op+hsoprJO/K3C0jXh3aMYa9aynJEIrJbvH9ScG0gRgpP/wi2sMa7Q+nCgvNBGEA
KEL0TYLrkIfOVszuntIN5u4oel+pa84ZfyWG0LsC1AWIY91IkWxpqOQ9MIGyv0ck
hpykwAAJwfz4Sgml5YHgYJstlMZTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbq11
iPXfp+1y+TpEuXrViYKKVWowHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFLzY5MzUxRTRDQTAxNDExRjBCQ0EzOEVCNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmjEgwDQYJKoZIhvcNAQEL
BQADggEBAD2vMhaV0Dan9e4n3Zv5aYq/Cbxym9qltviUoQ0wTLzUVS0HlXaXpWZB
9LKngy285VcYyoeRo3HYOGz5DXnCjcUBO0oYmqQyK6JeuIql1KVhlt3wrH0iuqqA
GXMQlqzpvibk3GNCB30WKV6zRfifHirWBWvqMLAntbT4Aw082gtgSXUiDGbL1/+T
zpVO+zw2qzS20HFW7Sf9rqDRqrAoqyE/zEfG8vHLO4M17BaQyC8g2FR4KnMU72Un
hMg2r8CbHnOn0NAGSYWOIFEF0r78sQY0Kp0HFFGbnxhM6IoGT4kkxBuxdVRGuGVT
3sONL8tTg5p7YWLlgIQvNDENvdEkWHk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:41 2025 by rpki-client