Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa
File: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (raw, json)
Hash identifier: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=
Subject key identifier: EB:35:8F:81:F9:51:13:B0:6E:E8:9E:AA:85:6C:0C:01:1E:D0:41:77
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 065F
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:45:18 +0000
ROA not before: Fri 03 Oct 2025 04:45:14 +0000
ROA not after: Sun 31 Dec 2045 04:45:14 +0000
asID: 328327
IP address blocks: 102.140.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:45:14 2025 GMT
Not After : Dec 31 04:45:14 2045 GMT
Subject: CN=68df54de-c8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:71:9c:9e:fd:05:37:c9:26:24:70:ca:00:
fb:4f:7b:37:fd:6d:47:0d:0b:e0:96:3a:19:bd:5c:
d9:e4:ad:02:93:16:f9:f2:55:5d:87:e4:bf:ad:60:
ec:50:7d:1f:48:38:d2:c1:2f:30:c6:25:7f:93:9c:
22:dd:d7:69:87:80:19:7c:1f:b6:ec:b3:92:b0:00:
ae:0c:ab:69:0e:f3:83:86:26:43:a4:5a:ae:b2:f5:
62:25:04:f2:29:6c:f0:5d:bf:08:90:90:c5:23:9f:
87:b0:3a:3b:5f:ea:7d:5c:b3:8c:62:d7:b1:1f:5b:
9c:bd:be:e6:f0:8b:a3:58:80:eb:29:89:97:6d:c8:
97:2f:3c:b9:73:a3:a5:72:92:e1:4e:a9:51:d7:d2:
7b:0a:58:11:90:57:67:e8:9e:88:d1:a5:cf:ae:dc:
a9:4b:0f:4c:86:38:6d:f0:5a:4d:29:68:e2:5d:c4:
59:52:88:03:f6:ca:e9:d1:58:61:e7:77:ee:e8:94:
36:aa:cb:66:81:c2:4a:96:5a:4f:4d:43:17:51:c4:
1a:27:06:15:e5:b8:0e:5c:11:81:45:4f:4c:3e:3b:
b7:20:ba:18:38:60:93:48:a6:1d:c4:9e:23:33:7d:
19:9e:35:db:0d:96:68:1b:c8:e5:93:b4:b8:bb:0b:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:8F:81:F9:51:13:B0:6E:E8:9E:AA:85:6C:0C:01:1E:D0:41:77
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:67:4b:e8:1a:80:ce:92:d5:ca:45:c9:bd:c7:7c:97:4e:56:
c5:f8:e2:3b:09:30:b8:82:fe:96:3b:14:2c:8a:93:43:12:cb:
80:09:aa:8b:1f:e8:91:c9:dc:18:c9:36:49:e9:31:ed:d2:8d:
49:61:09:21:97:dc:71:90:93:5f:45:63:d2:45:6e:d2:55:5f:
92:94:f8:32:dd:d9:f3:65:c4:ef:71:06:dd:14:99:23:3d:6a:
1a:3a:64:77:50:7e:ca:5a:9e:ba:b7:a2:92:93:a4:7e:27:88:
c9:5d:63:d1:41:f4:2f:55:ef:5b:fe:94:ec:b8:a8:72:15:4e:
ee:45:8d:c1:2a:a8:36:06:c9:87:a8:b8:e0:9e:4e:00:b2:46:
b9:75:a7:c6:2a:ae:ef:18:ef:db:9b:cb:de:bc:e7:f5:b3:de:
76:a8:b2:b9:1c:ee:b2:df:b3:5b:b5:8b:42:41:85:93:c1:14:
2e:f6:7f:1d:85:c3:33:48:ec:42:8d:99:f7:07:ca:83:45:e4:
58:c5:66:b6:1e:dc:9c:3c:e0:3f:8a:8b:7b:51:c3:bf:b6:9f:
87:f3:d8:30:0e:5f:5f:e5:65:2e:3d:d6:67:4a:c0:32:b5:49:
56:ea:f9:17:10:6c:a8:17:77:29:10:5b:20:41:d8:da:be:0c:
7b:ad:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:44 2025 by rpki-client