Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/9E2163FAA01811F09E3578D2DAE4EC9C.roa
File: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (raw, json)
Hash identifier: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=
Subject key identifier: AC:D8:EC:7E:68:A0:5B:AD:B7:1D:D6:B4:8A:AB:22:09:B2:D3:C2:8C
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0679
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/9E2163FAA01811F09E3578D2DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:20:04 +0000
ROA not before: Fri 03 Oct 2025 05:19:59 +0000
ROA not after: Sun 31 Dec 2045 05:19:59 +0000
asID: 328327
IP address blocks: 102.140.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:19:59 2025 GMT
Not After : Dec 31 05:19:59 2045 GMT
Subject: CN=68df5d04-dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:e5:1f:77:1c:44:d9:f9:95:a6:a1:c8:6f:
f4:9f:ab:ac:cf:a1:f6:46:3b:ef:3c:60:ec:5c:be:
ac:24:ee:62:70:9f:20:cb:ac:66:99:59:cc:15:f8:
79:ef:e5:f1:61:c3:6b:26:5f:1c:06:02:52:20:68:
1c:b9:0f:b0:e7:23:04:32:5d:03:1f:23:d6:fd:56:
85:cd:5b:d0:af:c2:37:e3:0c:69:0f:21:fd:3c:73:
a3:f8:d3:7c:58:7c:be:e8:e8:7b:3b:bc:e8:70:0e:
64:36:61:c7:fc:ce:82:b1:ae:56:da:87:05:6d:aa:
eb:e0:92:e8:9a:15:0d:8d:bd:49:7b:d4:cd:1c:c1:
3a:fc:11:2a:21:10:f2:88:b5:d2:2b:cb:3e:c1:97:
4d:9d:1d:c2:79:4b:5a:62:1c:e4:1b:da:60:34:dc:
b7:5e:c4:9a:06:68:f2:6e:71:48:f8:4b:a4:8e:8f:
df:2f:a1:bc:97:2a:4d:3d:f6:03:49:a5:8c:1a:51:
65:60:8b:d9:bb:25:e2:9c:dd:34:05:69:1c:c1:e2:
32:21:2f:8c:7a:47:69:49:e3:78:ab:87:ab:84:f2:
25:fb:86:67:6e:75:5b:3d:11:72:d6:69:0b:45:aa:
74:f0:7f:02:3d:36:01:a1:1c:47:2d:60:a0:c2:bf:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:EC:7E:68:A0:5B:AD:B7:1D:D6:B4:8A:AB:22:09:B2:D3:C2:8C
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/9E2163FAA01811F09E3578D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.64.0/23
Signature Algorithm: sha256WithRSAEncryption
20:fb:a2:e9:52:13:b2:9e:e5:fe:53:70:d2:a9:90:62:99:25:
64:e5:10:8c:3d:8d:56:ff:4c:22:dc:c0:85:94:f7:8c:5a:ca:
0d:11:ee:38:58:61:b6:bd:90:04:48:47:eb:3f:42:0d:c5:8b:
94:c2:85:19:b5:c1:8d:0e:64:af:2a:68:ec:1e:82:36:47:d4:
ba:6c:94:50:a3:40:93:6b:50:52:4c:1c:8a:78:f5:d6:3a:f4:
6b:e4:27:2d:d6:a7:e3:f8:3c:d1:70:4d:2c:6e:97:c2:b3:27:
91:ca:97:2a:34:33:4f:c7:ff:02:e2:01:dc:70:d0:96:50:58:
f4:d4:04:12:22:8d:d7:ee:15:b3:09:dd:56:da:83:4d:90:d9:
cb:62:d4:52:0f:ab:28:b1:c9:da:b3:0e:b1:88:68:b5:99:d1:
e9:03:52:23:c6:26:d7:07:63:e6:86:3e:11:81:60:a5:11:78:
00:d6:0e:5e:01:1e:76:fd:07:4d:01:c3:49:68:dc:88:03:c1:
73:02:f0:13:a3:2b:fe:2b:bf:eb:77:ef:83:3f:9b:8b:61:79:
0a:b6:32:bb:c5:57:c8:b4:d6:60:92:10:5f:65:15:6e:26:ca:
1b:2b:f1:58:a6:ba:ac:fc:ae:57:3a:80:39:5d:d3:23:1c:69:
5a:d4:b1:60
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNTEwMDMwNTE5NTlaFw00NTEyMzEwNTE5NTlaMBgxFjAU
BgNVBAMTDTY4ZGY1ZDA0LWRhZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgruUfdxxE2fmVpqHIb/Sfq6zPofZGO+88YOxcvqwk7mJwnyDLrGaZWcwV
+Hnv5fFhw2smXxwGAlIgaBy5D7DnIwQyXQMfI9b9VoXNW9CvwjfjDGkPIf08c6P4
03xYfL7o6Hs7vOhwDmQ2Ycf8zoKxrlbahwVtquvgkuiaFQ2NvUl71M0cwTr8ESoh
EPKItdIryz7Bl02dHcJ5S1piHOQb2mA03LdexJoGaPJucUj4S6SOj98vobyXKk09
9gNJpYwaUWVgi9m7JeKc3TQFaRzB4jIhL4x6R2lJ43irh6uE8iX7hmdudVs9EXLW
aQtFqnTwfwI9NgGhHEctYKDCvzmPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrNjs
fmigW623Hda0iqsiCbLTwowwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFLzlFMjE2M0ZBQTAxODExRjA5RTM1NzhEMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmjEAwDQYJKoZIhvcNAQEL
BQADggEBACD7oulSE7Ke5f5TcNKpkGKZJWTlEIw9jVb/TCLcwIWU94xayg0R7jhY
Yba9kARIR+s/Qg3Fi5TChRm1wY0OZK8qaOwegjZH1LpslFCjQJNrUFJMHIp49dY6
9GvkJy3Wp+P4PNFwTSxul8KzJ5HKlyo0M0/H/wLiAdxw0JZQWPTUBBIijdfuFbMJ
3Vbag02Q2cti1FIPqyixydqzDrGIaLWZ0ekDUiPGJtcHY+aGPhGBYKUReADWDl4B
Hnb9B00Bw0lo3IgDwXMC8BOjK/4rv+t374M/m4theQq2MrvFV8i01mCSEF9lFW4m
yhsr8Vimuqz8rlc6gDld0yMcaVrUsWA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:40 2025 by rpki-client