Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C048D206A01811F0997A41D6DAE4EC9C.roa
File: C048D206A01811F0997A41D6DAE4EC9C.roa (raw, json)
Hash identifier: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=
Subject key identifier: 89:AB:18:4A:DE:FA:BE:48:1F:C6:45:0C:3C:CD:EB:CB:DB:B3:1B:47
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 067B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C048D206A01811F0997A41D6DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:21:02 +0000
ROA not before: Fri 03 Oct 2025 05:20:57 +0000
ROA not after: Sun 31 Dec 2045 05:20:57 +0000
asID: 328327
IP address blocks: 102.140.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:20:57 2025 GMT
Not After : Dec 31 05:20:57 2045 GMT
Subject: CN=68df5d3e-99b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:e0:58:bf:6d:73:d9:f6:7a:53:92:f0:67:
b3:d3:70:00:07:b7:fe:76:96:86:42:f4:73:51:91:
24:e1:c7:5f:23:85:44:7f:9b:77:04:92:29:a8:14:
c4:79:08:87:d4:a2:53:bd:92:fe:31:9c:27:39:db:
9f:9c:69:22:aa:7e:f8:ca:59:fe:c2:a8:e6:f8:9b:
54:b9:bc:37:e5:0c:76:e6:6a:64:20:b6:f1:f5:b6:
27:ff:80:d6:e2:1d:ea:78:26:44:a0:68:00:3f:76:
7c:f7:c7:da:28:1a:19:e0:c0:0b:a8:3e:4c:56:d0:
34:8e:56:0d:6f:65:f5:1f:d1:38:ee:da:79:7b:c5:
d0:87:1a:28:fe:62:f5:b9:34:1d:97:59:e7:04:c8:
a8:b0:92:25:b7:50:b0:70:8a:7a:d4:8c:a2:8c:27:
00:13:28:33:57:72:37:17:f8:0d:23:61:70:80:7b:
25:c9:23:fb:30:76:e0:39:d9:60:f4:34:26:f8:c6:
e2:b0:2f:aa:4b:dd:91:e0:04:bb:5e:bd:1d:15:d1:
a0:e5:e5:d2:52:c4:d4:ce:e3:a9:0a:85:e2:ad:e6:
a5:26:18:85:a0:e9:14:ba:a3:b6:58:a2:36:eb:98:
ae:a5:16:86:df:88:9f:13:75:27:70:cd:c4:01:6a:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:18:4A:DE:FA:BE:48:1F:C6:45:0C:3C:CD:EB:CB:DB:B3:1B:47
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C048D206A01811F0997A41D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.66.0/23
Signature Algorithm: sha256WithRSAEncryption
26:11:b4:2b:bc:cf:db:f2:5f:0f:2b:22:5b:ed:61:b2:34:1a:
1e:89:ef:b5:65:ac:e1:ba:2e:e8:75:8f:1e:65:d6:b2:c6:1e:
84:96:7b:74:59:da:ba:f8:1a:b7:e5:3d:38:f2:c0:dd:6f:2a:
f2:67:17:77:81:bc:1a:83:41:1e:82:47:d8:10:ea:3f:c5:d6:
b2:0b:f8:20:df:fe:9d:b5:57:60:1b:6f:e9:45:4c:8b:27:e3:
8d:c3:18:38:2a:38:08:8c:9a:d9:c3:b9:c7:03:3e:9c:25:d5:
62:25:73:c8:29:5f:39:ba:a8:2f:c9:f6:08:3f:a9:bc:0f:dd:
96:0a:8c:85:64:09:b5:ea:40:cb:bc:66:d1:d3:f5:c7:06:7c:
c9:e0:a7:3a:c8:2f:75:cf:da:63:e0:f3:9b:82:d3:c3:2f:af:
dd:cf:26:3f:ac:bc:f8:e4:2c:5d:84:c1:58:b4:50:94:cd:49:
2f:e5:2f:82:b1:58:0e:b3:64:d6:e8:06:f2:1c:24:2d:f1:bb:
81:92:67:e3:b9:f0:40:ef:01:14:2c:e3:7a:9d:17:a7:c7:d3:
85:a6:b1:04:5b:ec:af:fe:a1:46:3b:ab:d3:36:f8:f3:b8:f3:
f3:a3:c7:b0:d0:76:44:bf:87:52:31:63:e3:98:45:39:6f:5b:
88:12:b1:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBnswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNTEwMDMwNTIwNTdaFw00NTEyMzEwNTIwNTdaMBgxFjAU
BgNVBAMTDTY4ZGY1ZDNlLTk5YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMsuBYv21z2fZ6U5LwZ7PTcAAHt/52loZC9HNRkSThx18jhUR/m3cEkimo
FMR5CIfUolO9kv4xnCc525+caSKqfvjKWf7CqOb4m1S5vDflDHbmamQgtvH1tif/
gNbiHep4JkSgaAA/dnz3x9ooGhngwAuoPkxW0DSOVg1vZfUf0Tju2nl7xdCHGij+
YvW5NB2XWecEyKiwkiW3ULBwinrUjKKMJwATKDNXcjcX+A0jYXCAeyXJI/swduA5
2WD0NCb4xuKwL6pL3ZHgBLtevR0V0aDl5dJSxNTO46kKheKt5qUmGIWg6RS6o7ZY
ojbrmK6lFobfiJ8TdSdwzcQBaoFPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiasY
St76vkgfxkUMPM3ry9uzG0cwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFL0MwNDhEMjA2QTAxODExRjA5OTdBNDFENkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmjEIwDQYJKoZIhvcNAQEL
BQADggEBACYRtCu8z9vyXw8rIlvtYbI0Gh6J77VlrOG6Luh1jx5l1rLGHoSWe3RZ
2rr4GrflPTjywN1vKvJnF3eBvBqDQR6CR9gQ6j/F1rIL+CDf/p21V2Abb+lFTIsn
443DGDgqOAiMmtnDuccDPpwl1WIlc8gpXzm6qC/J9gg/qbwP3ZYKjIVkCbXqQMu8
ZtHT9ccGfMngpzrIL3XP2mPg85uC08Mvr93PJj+svPjkLF2EwVi0UJTNSS/lL4Kx
WA6zZNboBvIcJC3xu4GSZ+O58EDvARQs43qdF6fH04WmsQRb7K/+oUY7q9M2+PO4
8/Ojx7DQdkS/h1IxY+OYRTlvW4gSsds=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:46 2025 by rpki-client