Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A34959B8A01911F0A89ED4DADAE4EC9C.roa
File: A34959B8A01911F0A89ED4DADAE4EC9C.roa (raw, json)
Hash identifier: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=
Subject key identifier: A4:BA:00:12:71:A5:83:A5:3A:FA:07:67:31:4B:C1:7B:C7:FE:C6:95
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0687
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A34959B8A01911F0A89ED4DADAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:27:23 +0000
ROA not before: Fri 03 Oct 2025 05:27:18 +0000
ROA not after: Sun 31 Dec 2045 05:27:18 +0000
asID: 328327
IP address blocks: 102.140.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:27:18 2025 GMT
Not After : Dec 31 05:27:18 2045 GMT
Subject: CN=68df5eba-1c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:90:17:3d:b6:a5:7c:37:fe:0c:ea:d5:4c:
80:83:57:fe:1d:b4:02:7c:ee:d1:c5:ae:2c:5a:b4:
fa:cc:1b:76:f5:25:8b:64:72:a8:60:e8:60:76:9a:
f6:36:d5:97:41:f3:03:2c:d0:92:26:61:26:37:c1:
82:a6:3e:89:a2:30:fb:53:64:f0:09:ec:f8:ab:79:
a2:35:aa:3e:47:81:4e:d3:69:1b:f0:2e:90:ff:0e:
0c:ba:63:e3:87:4f:82:59:11:42:cf:53:71:f4:dc:
19:1e:7e:36:0f:71:f2:02:86:a6:ba:ce:3f:c4:ca:
6d:4a:b2:b9:82:8f:1b:2e:d3:40:07:65:43:6f:9e:
74:fb:95:c2:49:a3:b0:f7:eb:d3:39:5c:37:fc:e8:
5f:d7:5f:a5:2a:69:25:ff:a9:74:14:0e:c4:36:e1:
b0:b0:3f:84:94:9a:87:32:f1:96:db:8b:25:7a:36:
de:44:e5:cf:4a:09:7a:2e:7b:8f:99:12:a6:f0:64:
8d:a7:e4:c2:33:73:fa:37:d7:e9:40:d1:bf:74:62:
27:5e:45:9d:a7:a2:b2:cc:a8:0a:8b:22:44:a8:f9:
4b:94:15:72:0f:62:36:60:af:6c:c5:4e:ff:33:6c:
e7:e5:9b:4a:03:89:49:d1:1e:c4:fd:32:e3:58:20:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:00:12:71:A5:83:A5:3A:FA:07:67:31:4B:C1:7B:C7:FE:C6:95
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A34959B8A01911F0A89ED4DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.78.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:19:c2:08:94:a6:16:ef:fa:2b:53:16:6e:28:9e:00:6f:9d:
7c:0b:18:dc:a3:1d:69:37:94:1f:34:00:26:93:ea:1c:8c:f7:
45:98:d3:70:06:18:89:17:35:56:cf:1b:cb:99:99:a8:ef:30:
8a:38:b2:a1:02:c9:39:96:41:48:74:e2:28:55:8f:2d:17:d7:
bc:7c:13:4b:d2:94:bc:97:9f:57:31:7d:00:6a:0c:68:b4:0e:
f2:2b:a3:b0:59:fd:72:d9:d1:27:9f:87:4f:69:4e:f7:a3:f5:
76:22:13:96:9e:6e:67:1e:53:fe:4c:ad:de:1c:1f:1c:58:c7:
d5:b9:6d:42:69:c9:bd:d2:ed:be:18:de:33:75:e6:d4:14:0a:
3c:09:b9:67:fe:d2:81:aa:01:f9:e1:60:5c:a3:85:b7:cd:af:
22:52:7b:89:14:3e:e2:21:e9:9a:3e:e6:48:9f:b0:09:de:8d:
f8:e3:86:72:21:35:02:11:55:9c:33:98:79:fc:dc:55:15:ad:
94:c5:92:2f:e1:f6:d3:0e:d5:5d:c0:3c:a8:a3:f3:a1:5f:ad:
e6:a3:33:0d:4e:d9:3b:82:27:be:b3:45:3c:63:db:85:55:e1:
b7:3f:88:49:84:be:15:70:5a:0a:bc:9c:c3:d2:0f:71:f1:82:
32:30:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:40 2025 by rpki-client