Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/77AA62BAA01511F0949C90BEDAE4EC9C.roa
File: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (raw, json)
Hash identifier: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=
Subject key identifier: A6:7B:7D:03:D1:64:6F:63:24:15:67:FF:3A:42:D9:69:7C:75:90:A3
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0675
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/77AA62BAA01511F0949C90BEDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:57:32 +0000
ROA not before: Fri 03 Oct 2025 04:57:25 +0000
ROA not after: Sun 31 Dec 2045 04:57:25 +0000
asID: 328327
IP address blocks: 102.140.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:57:25 2025 GMT
Not After : Dec 31 04:57:25 2045 GMT
Subject: CN=68df57bb-541c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:cd:14:9f:9e:0c:96:ca:bb:ee:61:fb:6c:
3d:ad:3c:79:d1:6e:c9:d5:35:33:cc:c5:30:f9:f7:
4c:77:d0:fc:b2:13:4b:c0:5d:68:62:22:3c:79:14:
81:25:7e:03:2f:67:ad:f5:a1:b7:ae:5f:28:b1:f4:
cb:48:9f:93:31:44:b2:a2:57:d8:80:07:32:b9:9d:
0f:0c:f8:fc:54:c8:fa:7c:93:dc:4a:ee:69:00:97:
96:de:ee:a1:87:79:71:13:17:ab:c8:f8:43:05:f1:
e5:49:15:4f:b7:0e:5e:6a:db:4a:e7:0d:04:66:49:
05:70:d1:4a:7b:71:ae:6b:a4:57:b2:7e:34:a8:b3:
06:8b:61:f8:b7:9d:0f:0f:f5:f0:ea:13:5e:b6:c0:
fe:39:77:64:da:c7:59:95:a9:37:01:27:97:84:fa:
8e:1d:75:4b:8d:93:ef:5e:d9:cc:fc:12:cf:b6:b0:
0f:c6:c7:42:8a:13:0f:bb:03:87:15:a3:4e:33:54:
4b:09:f6:81:77:cc:c5:6a:7b:be:44:26:e5:ff:e7:
d3:d4:25:a9:94:68:62:07:00:2f:b9:19:e2:f7:28:
14:5e:3e:37:db:d6:83:c0:99:66:d7:4f:26:41:ff:
68:5e:08:25:72:73:b8:f5:4d:3e:f9:6d:55:25:99:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:7D:03:D1:64:6F:63:24:15:67:FF:3A:42:D9:69:7C:75:90:A3
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/77AA62BAA01511F0949C90BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:41:8f:70:b8:55:40:8c:43:3f:16:3d:28:ba:9c:72:e8:0b:
ff:02:04:47:4b:4f:69:a7:df:fa:8b:03:04:c9:7e:62:71:79:
21:2c:a6:3a:a1:11:dc:3a:ea:e2:01:53:cb:d5:49:18:e5:9d:
b4:cd:79:d3:53:45:f0:99:5d:75:9b:14:8a:32:3a:3a:ab:59:
4d:0e:2f:d3:99:bf:33:19:5c:cb:df:46:f7:bb:1a:7e:2b:fe:
80:8a:2d:3f:37:7d:e3:f1:ca:04:09:aa:27:c6:56:dd:da:df:
67:07:81:47:8e:23:f1:c3:5f:d6:7c:40:9d:62:09:b2:c5:9b:
48:e1:23:5b:80:e3:34:82:8a:c5:8f:99:77:d5:fd:29:3c:d5:
d2:c0:0e:6b:53:71:50:a3:2a:8a:1d:e5:72:91:07:3a:06:0c:
5c:ee:4e:19:f2:f9:11:c0:b0:e8:4a:26:7a:4a:57:b7:29:18:
f1:9f:49:2e:af:c4:6d:a9:49:57:4e:5e:c9:4d:cb:10:17:b5:
fa:eb:25:34:6d:1a:4e:2f:77:17:21:ab:23:6a:8b:dd:c4:75:
44:e7:8c:00:7b:1d:74:80:5f:f2:5b:ea:ea:2d:90:ae:05:05:
60:f6:68:99:65:be:e8:df:32:3b:6f:8a:c9:fb:5d:59:c6:c2:
56:06:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:40 2025 by rpki-client