Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/BE045106A01211F094A319ABDAE4EC9C.roa
File: BE045106A01211F094A319ABDAE4EC9C.roa (raw, json)
Hash identifier: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=
Subject key identifier: F8:83:F9:14:56:C5:74:FE:0C:E4:0B:8F:6C:08:3E:9A:7D:F4:94:FF
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0655
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/BE045106A01211F094A319ABDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:38:01 +0000
ROA not before: Fri 03 Oct 2025 04:37:56 +0000
ROA not after: Sun 31 Dec 2045 04:37:56 +0000
asID: 328327
IP address blocks: 102.140.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:37:56 2025 GMT
Not After : Dec 31 04:37:56 2045 GMT
Subject: CN=68df5329-6282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:93:c7:4b:1a:9f:3f:c0:06:e9:51:1a:aa:
17:79:c9:4e:b1:d0:56:3b:b9:b8:70:f7:a0:73:9e:
6f:99:91:2e:ff:bd:60:0d:b8:44:f5:ac:cc:0c:76:
66:8e:cd:3c:87:f7:73:54:33:e6:a5:93:bb:1f:fd:
e2:a4:a3:53:f7:76:ab:fb:d4:dd:b5:a1:41:46:17:
f3:88:a0:aa:ad:31:66:24:2c:04:1d:00:44:dc:66:
9a:f8:18:a6:70:79:af:76:e7:86:9e:7d:43:9b:4d:
c6:f6:7f:89:d1:33:89:14:8c:ce:07:0e:71:9d:25:
fa:e9:2f:f4:18:d5:42:96:11:a5:70:6d:27:9c:a3:
2b:03:03:0f:3a:8f:b5:80:92:cc:ec:4a:f6:6c:28:
d9:d8:da:8d:05:8a:31:cd:cc:d1:b6:54:f3:f7:1a:
df:a1:65:08:4d:ee:6d:c2:90:54:4f:87:5b:8f:8f:
54:1c:a6:8e:77:d3:aa:b4:6e:2e:9d:2b:5a:11:16:
e0:ef:5d:79:fd:0d:c6:7b:b4:ee:25:c4:25:1a:7f:
c1:d8:ac:76:65:88:cc:c2:76:da:4c:aa:16:b9:49:
7b:5d:cf:49:bf:d3:75:39:4d:73:fc:46:7b:11:e3:
c5:b9:4e:b1:bb:bb:fa:6b:ab:65:3f:1a:ab:63:f9:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:F9:14:56:C5:74:FE:0C:E4:0B:8F:6C:08:3E:9A:7D:F4:94:FF
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/BE045106A01211F094A319ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.72.0/22
Signature Algorithm: sha256WithRSAEncryption
be:f0:c3:76:69:76:5d:f2:33:b9:a2:67:4a:61:8b:fd:21:2a:
4f:de:0f:1d:1c:e1:1a:61:ad:69:8c:2f:eb:5a:60:cc:ac:f9:
c2:7f:4f:e6:20:51:dd:1c:8b:c3:2a:06:42:eb:36:1c:51:81:
4e:8b:90:cc:cd:8e:ac:2a:75:dd:27:57:f8:5d:93:0d:20:e3:
9c:93:9e:e9:c2:86:dd:f8:e6:3e:e3:f4:db:ca:4e:50:34:b3:
b1:34:22:65:02:92:46:03:65:8c:1e:bc:32:bd:2a:28:8e:4b:
62:f9:9d:29:15:48:b6:1b:df:41:36:d0:e3:c2:13:9b:e8:eb:
26:8a:e2:9c:89:64:58:9e:e1:04:a4:f8:68:10:19:09:b8:cd:
f4:63:47:10:c6:d4:b0:32:8e:19:81:60:16:c8:41:c7:62:05:
a0:bc:22:ac:77:57:7f:6c:a9:60:27:d8:d3:87:e1:2b:5d:f6:
d0:11:68:36:5e:98:74:c0:03:01:7f:be:eb:ff:46:0f:8c:90:
99:19:5a:5c:0c:52:3e:0c:c7:2e:ec:17:c7:6a:60:14:b2:9b:
6f:65:f8:0c:9e:71:1b:2c:dc:e7:9e:d7:85:30:28:31:ee:b9:
4a:3e:b3:25:9e:15:49:4e:ee:c9:02:b1:22:8d:00:60:c7:8b:
cf:22:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:41 2025 by rpki-client