Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/CC94B1F0A01911F0A21BE7DADAE4EC9C.roa
File: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (raw, json)
Hash identifier: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=
Subject key identifier: 6C:0B:EA:FB:F5:E0:15:70:2F:13:BF:EB:4E:4B:D4:13:30:7C:24:64
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0689
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/CC94B1F0A01911F0A21BE7DADAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:28:32 +0000
ROA not before: Fri 03 Oct 2025 05:28:27 +0000
ROA not after: Sun 31 Dec 2045 05:28:27 +0000
asID: 328327
IP address blocks: 102.140.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:28:27 2025 GMT
Not After : Dec 31 05:28:27 2045 GMT
Subject: CN=68df5f00-198d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:de:5a:00:31:b5:07:08:7b:12:f8:a6:f1:
a6:45:f5:e3:6b:94:e8:4a:19:81:0f:3e:20:bb:60:
dc:47:b5:f9:2b:31:f5:b5:a2:d0:4f:8d:8b:c9:2c:
ad:a1:85:15:4c:ce:4a:43:ad:4e:c0:2c:c3:88:ec:
d1:02:97:72:c5:47:7a:68:60:07:db:eb:c3:eb:73:
c5:5d:30:b4:b8:f4:f5:a4:87:e0:a6:1f:24:01:6e:
16:9d:f5:6c:96:fb:cc:f6:0d:9e:47:6c:0a:e2:aa:
52:ed:7d:15:47:97:5c:40:21:b9:10:f3:cf:ff:91:
01:a9:20:7a:d7:44:8a:da:7c:21:bd:7a:31:a3:ca:
06:cb:44:ec:e4:37:3c:0c:38:bf:7a:f8:98:f5:af:
5c:27:e8:c6:4b:27:d9:63:d2:ec:bf:29:0b:7f:0a:
88:d5:da:72:86:6b:bf:d6:f8:fb:0f:c4:2b:e2:d3:
5c:6d:92:c4:3e:b1:de:a5:20:b6:79:59:bb:5c:55:
6f:24:3f:c2:d9:2c:3c:47:bd:e7:22:fb:0b:bb:6f:
8d:37:ba:ba:e5:b1:dc:de:e0:df:20:6e:d8:df:e5:
59:e9:4a:f9:09:f2:1a:04:d5:85:53:5b:e9:9b:c7:
d6:29:61:30:11:51:7d:7f:a9:80:46:d6:96:b1:46:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0B:EA:FB:F5:E0:15:70:2F:13:BF:EB:4E:4B:D4:13:30:7C:24:64
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/CC94B1F0A01911F0A21BE7DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:cd:3c:65:05:52:4e:cf:88:b5:08:b1:db:78:e4:71:dd:35:
8a:de:22:0a:ab:58:6c:30:fc:c4:2f:53:ce:d2:37:67:7a:7f:
e3:7a:25:bf:3b:5f:26:47:5b:95:21:27:e1:9b:44:66:a0:a5:
05:d2:6a:95:22:80:f9:5d:ab:a4:5d:53:5d:06:94:8f:e0:04:
b2:ca:0e:00:8d:97:bf:3c:ca:4c:99:3f:65:c7:6e:cb:96:5e:
e2:5a:40:b7:b1:12:c0:c9:23:22:d2:89:53:7f:f2:4d:df:c8:
fd:c3:53:69:32:ab:e5:4b:18:d8:72:aa:f2:ae:1f:8c:5c:8f:
5c:9a:9e:47:b5:9e:45:3e:b5:04:5a:54:d4:7f:9d:c9:02:be:
1c:e6:5b:5e:aa:ce:8f:8c:f9:f1:c8:72:5f:b4:21:7e:53:bb:
30:b0:be:c1:b1:c6:30:43:20:d8:28:5a:df:ae:bf:d0:68:d1:
66:19:8f:da:0e:bb:b3:7f:d9:20:e7:e7:76:d7:d5:94:22:09:
52:36:1b:6c:f7:fa:b3:27:ca:53:75:49:5d:9e:56:e2:12:d5:
97:38:1f:42:bd:56:d7:ca:ce:c4:9b:ad:b8:79:f2:a4:0c:1e:
75:8b:c6:7e:5b:7b:4a:27:5c:62:66:f3:75:cb:e2:52:5a:a8:
7f:3f:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:37 2025 by rpki-client