Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C642CE7CA01411F0B494AFB9DAE4EC9C.roa
File: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (raw, json)
Hash identifier: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=
Subject key identifier: 4A:72:12:9C:79:CD:E4:D2:ED:62:75:AF:87:8E:7D:C4:5F:B4:FB:59
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 066B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C642CE7CA01411F0B494AFB9DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:52:34 +0000
ROA not before: Fri 03 Oct 2025 04:52:29 +0000
ROA not after: Sun 31 Dec 2045 04:52:29 +0000
asID: 328327
IP address blocks: 102.140.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1643 (0x66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:52:29 2025 GMT
Not After : Dec 31 04:52:29 2045 GMT
Subject: CN=68df5692-7d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:02:b5:a5:59:69:27:87:ce:88:a5:c6:57:
79:94:81:ff:37:8e:ae:64:87:00:d6:86:33:dd:1c:
94:4c:83:86:f6:aa:ad:91:ab:ce:b7:22:93:3e:fc:
f1:10:4b:dd:2d:46:5d:5b:19:92:79:56:4b:2f:c5:
dc:b6:2f:6b:d3:ef:2b:cf:0f:bd:90:3a:7c:02:53:
07:bf:71:0c:7b:2f:d1:5e:ad:67:17:a9:0a:1b:1e:
d8:e7:69:29:00:a0:d1:4b:b9:65:e3:16:44:df:2a:
1d:55:89:7a:93:95:5e:de:15:a1:6b:b1:8c:7f:0d:
9b:81:b0:8a:80:a9:f1:75:d7:41:ac:2b:52:4e:a4:
ca:a1:32:f4:24:74:81:d3:ed:75:73:77:f8:aa:a6:
9c:fa:3a:c4:05:f1:5b:4b:c8:ca:64:35:c1:c6:ef:
bb:99:ad:bf:c8:a8:92:7f:41:33:4c:b5:72:a3:51:
00:fe:c3:54:c8:8a:32:c4:21:f7:b1:16:b8:8d:92:
a1:c0:af:60:1e:aa:32:4e:ad:79:6b:c9:b2:b3:ed:
55:9d:26:2a:ca:15:b2:9c:05:54:15:97:4c:8f:25:
0e:1a:2b:ab:6c:42:6d:9e:2c:fc:af:a1:96:b5:76:
5b:54:88:be:a3:f3:51:b1:68:99:b2:82:06:4f:88:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:12:9C:79:CD:E4:D2:ED:62:75:AF:87:8E:7D:C4:5F:B4:FB:59
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/C642CE7CA01411F0B494AFB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:65:60:83:e7:b7:71:05:b0:1c:05:2f:f9:1c:cb:ad:8b:08:
42:0e:bd:60:86:94:f5:a7:80:03:a8:77:2d:88:2d:d4:c3:96:
95:c4:5d:99:27:4b:3a:78:c6:50:c2:58:71:bc:34:ea:e8:6d:
fb:5d:34:d8:ee:e6:20:ec:eb:b5:98:8e:b1:ab:6e:94:b0:55:
33:87:b6:4e:6a:12:9a:2e:44:36:29:e2:23:b7:5f:c7:f8:a5:
77:03:bd:25:0f:4d:a4:6d:f9:5d:1d:1f:10:32:26:0b:45:fd:
b2:4d:c1:36:53:28:00:83:4c:85:8e:b0:44:0f:34:b4:67:53:
07:53:1c:a9:e2:ec:98:99:5e:4a:18:9e:01:7e:5d:7e:78:b9:
14:a3:bd:b1:33:a8:ae:f7:19:33:bd:a2:09:8d:3d:a7:81:97:
d8:e4:9e:21:56:6e:c3:9e:a5:e1:b2:23:ba:85:c5:3f:d0:f2:
1f:30:cd:35:a8:c5:40:71:89:d9:c9:2d:de:a9:6e:71:9e:7b:
08:f2:57:6d:31:2a:3a:a8:1a:9e:2a:02:5e:8f:48:bb:98:f7:
7a:c7:b2:23:45:ee:a7:36:1d:46:40:5f:28:07:dd:da:78:fc:
5d:fe:41:df:17:8f:a4:52:d4:a0:96:dc:5a:01:3e:29:dd:1a:
cc:f0:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:42 2025 by rpki-client