Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/7D736F44A01911F09753BADADAE4EC9C.roa
File: 7D736F44A01911F09753BADADAE4EC9C.roa (raw, json)
Hash identifier: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=
Subject key identifier: E5:67:9A:69:8E:62:92:76:D2:15:DB:E6:9A:86:A2:AF:60:73:2D:42
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0685
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/7D736F44A01911F09753BADADAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:26:19 +0000
ROA not before: Fri 03 Oct 2025 05:26:15 +0000
ROA not after: Sun 31 Dec 2045 05:26:15 +0000
asID: 328327
IP address blocks: 102.140.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:26:15 2025 GMT
Not After : Dec 31 05:26:15 2045 GMT
Subject: CN=68df5e7b-1508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:26:48:1c:2c:d9:b4:8b:26:6e:07:02:ca:
63:0e:4c:f0:ef:d8:cd:54:42:82:05:6e:13:56:5a:
42:73:67:f8:8f:28:05:57:18:1f:6a:f2:44:dd:36:
17:d7:c8:eb:c5:f7:2a:7e:16:db:81:20:cc:8b:92:
bd:8c:17:6e:08:9d:77:17:8a:ac:b5:99:55:73:ff:
b1:63:f7:7e:9f:6d:62:3d:15:b5:3c:47:31:08:53:
14:72:f1:ca:bc:f9:67:f8:d1:83:79:93:31:01:46:
43:02:42:83:12:d2:39:fa:9d:88:0a:cf:43:74:dd:
01:91:5a:28:03:0d:17:ea:0a:ff:92:4c:66:43:bb:
29:9f:1f:63:84:50:ce:ff:b8:98:56:16:a0:3c:c4:
6c:02:c3:2f:cc:91:28:88:b3:3b:a7:c6:c6:63:e9:
7f:55:24:e7:05:70:4b:10:53:d7:10:43:24:fb:bb:
19:b5:96:32:ee:46:c7:a9:6c:02:63:4e:f4:0c:29:
21:54:3e:c1:aa:96:0b:76:14:3b:0b:ec:2c:2c:42:
21:4c:86:a1:e3:0c:11:f5:a6:77:8d:71:02:a8:64:
63:77:c8:6f:b8:0a:4a:79:da:96:87:23:fa:2f:ae:
89:a9:cc:0d:14:57:a6:f5:48:35:50:31:97:88:51:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:9A:69:8E:62:92:76:D2:15:DB:E6:9A:86:A2:AF:60:73:2D:42
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/7D736F44A01911F09753BADADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.76.0/23
Signature Algorithm: sha256WithRSAEncryption
26:dc:87:3b:f5:d1:8c:f2:05:b3:c3:f0:ea:3f:75:92:e4:5f:
16:df:75:1a:d2:23:be:8f:40:f5:97:12:87:46:76:32:a7:26:
c2:53:6f:80:d1:42:18:7e:f7:84:37:d3:e8:d3:bf:c5:1b:19:
e2:c3:f0:53:4a:eb:81:46:b3:9f:cf:34:4a:3f:26:79:35:2b:
69:05:3c:6b:91:b6:3c:04:c5:e3:1a:91:ef:18:08:f1:76:7e:
c6:23:fe:41:51:7f:05:09:77:32:21:f1:83:a8:b3:44:1e:89:
dc:e0:ee:c1:18:98:01:66:e8:92:25:43:34:56:93:5d:f5:ac:
be:c9:9d:de:33:8a:31:71:82:08:28:20:66:33:cc:96:e0:46:
1e:5e:9c:5a:2b:7c:16:8f:f9:3b:8f:ad:ec:1f:52:24:d3:b0:
1c:ca:74:f4:db:a9:5a:9d:3d:37:bc:89:45:8f:62:12:1c:0d:
1d:57:26:7a:87:39:61:25:32:3b:f1:cb:11:fa:4c:ca:9d:69:
ab:07:b9:26:c4:b0:33:13:73:10:67:8a:29:5e:ba:4c:82:6a:
74:e2:4e:53:23:21:51:13:fb:eb:49:64:90:37:07:50:71:a5:
53:fa:ff:f2:cb:b2:ef:51:18:e6:5e:52:9a:27:2c:56:74:f2:
3a:68:07:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNTEwMDMwNTI2MTVaFw00NTEyMzEwNTI2MTVaMBgxFjAU
BgNVBAMTDTY4ZGY1ZTdiLTE1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG+yZIHCzZtIsmbgcCymMOTPDv2M1UQoIFbhNWWkJzZ/iPKAVXGB9q8kTd
NhfXyOvF9yp+FtuBIMyLkr2MF24InXcXiqy1mVVz/7Fj936fbWI9FbU8RzEIUxRy
8cq8+Wf40YN5kzEBRkMCQoMS0jn6nYgKz0N03QGRWigDDRfqCv+STGZDuymfH2OE
UM7/uJhWFqA8xGwCwy/MkSiIszunxsZj6X9VJOcFcEsQU9cQQyT7uxm1ljLuRsep
bAJjTvQMKSFUPsGqlgt2FDsL7CwsQiFMhqHjDBH1pneNcQKoZGN3yG+4Ckp52paH
I/ovrompzA0UV6b1SDVQMZeIUb1BAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5Wea
aY5iknbSFdvmmoair2BzLUIwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFLzdENzM2RjQ0QTAxOTExRjA5NzUzQkFEQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmjEwwDQYJKoZIhvcNAQEL
BQADggEBACbchzv10YzyBbPD8Oo/dZLkXxbfdRrSI76PQPWXEodGdjKnJsJTb4DR
Qhh+94Q30+jTv8UbGeLD8FNK64FGs5/PNEo/Jnk1K2kFPGuRtjwExeMake8YCPF2
fsYj/kFRfwUJdzIh8YOos0Qeidzg7sEYmAFm6JIlQzRWk131rL7Jnd4zijFxgggo
IGYzzJbgRh5enForfBaP+TuPrewfUiTTsBzKdPTbqVqdPTe8iUWPYhIcDR1XJnqH
OWElMjvxyxH6TMqdaasHuSbEsDMTcxBniileukyCanTiTlMjIVET++tJZJA3B1Bx
pVP6//LLsu9RGOZeUponLFZ08jpoB0Y=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:40 2025 by rpki-client