Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/EA82641AA01311F09744A3B4DAE4EC9C.roa
File: EA82641AA01311F09744A3B4DAE4EC9C.roa (raw, json)
Hash identifier: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=
Subject key identifier: 13:4A:0D:02:66:C0:E9:A8:E7:2E:AF:17:04:BA:9F:E8:7D:E5:D8:F8
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0661
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/EA82641AA01311F09744A3B4DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 04:46:25 +0000
ROA not before: Fri 03 Oct 2025 04:46:20 +0000
ROA not after: Sun 31 Dec 2045 04:46:20 +0000
asID: 328327
IP address blocks: 102.140.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 04:46:20 2025 GMT
Not After : Dec 31 04:46:20 2045 GMT
Subject: CN=68df5521-5638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:f7:96:d9:f4:c4:87:0b:a9:ac:80:e2:4a:
37:25:d4:6c:91:47:d5:cc:d1:3e:6c:04:60:c2:35:
27:2c:f6:53:0b:e2:02:f2:12:b5:14:da:b5:e6:1d:
de:22:8a:dd:40:56:b1:48:24:ba:df:83:93:55:bf:
d4:30:0b:1a:16:78:2c:a4:58:56:a2:31:b0:dc:eb:
4f:1a:50:8b:9d:2b:3d:da:6f:f7:86:97:43:24:b8:
61:50:3a:80:63:be:01:5f:78:d3:37:ca:b3:c3:55:
01:6e:c8:90:48:62:05:d6:4a:6b:88:fb:5a:77:e1:
2b:f6:2a:fb:b7:57:bb:8c:a5:06:8d:06:35:b6:f6:
5b:b0:00:96:db:77:b8:58:7d:86:33:9b:aa:c5:fc:
bc:4c:80:bc:34:b1:b0:ef:1d:82:2b:4d:16:55:7b:
8b:be:4c:c6:3c:16:53:e4:fe:e5:81:41:34:0c:ea:
30:c6:36:3b:49:76:09:40:4e:a0:a6:57:03:77:61:
3e:7e:d3:81:50:e2:19:d8:58:0f:ba:53:6f:61:d5:
ad:03:f4:7e:dc:69:75:bf:3e:9b:d4:5e:26:6c:f4:
e5:3f:59:03:a4:09:2b:44:21:2d:b7:d9:09:5b:10:
46:0e:59:b2:01:e0:74:99:d2:a0:85:88:2b:b7:4e:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:0D:02:66:C0:E9:A8:E7:2E:AF:17:04:BA:9F:E8:7D:E5:D8:F8
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/EA82641AA01311F09744A3B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ed:0f:1e:9d:00:85:f0:6e:37:3a:29:46:d3:5a:7a:61:38:
08:0b:3c:e2:7d:3e:94:22:ef:60:4b:ae:b1:d5:91:2e:9e:fe:
f4:33:7f:ea:b2:3c:ba:d5:c3:5f:a3:40:b8:c0:d5:82:c0:d1:
89:8a:13:36:8a:e4:74:dc:09:26:67:cc:55:e1:6a:d4:b3:e3:
f5:60:8a:6d:a8:56:42:ec:01:f9:a1:fc:24:63:3b:c1:e8:b8:
ac:a5:34:d3:5c:47:30:e2:ff:6e:65:4a:9a:46:5d:0d:38:aa:
dd:ba:32:04:48:8b:d6:cd:72:77:ea:70:da:db:85:34:ea:26:
b9:f7:43:83:10:fc:7c:e7:eb:6e:ed:a2:2e:77:0f:90:e2:12:
cf:59:27:f1:15:f4:23:f1:41:16:44:b8:67:77:5b:83:47:43:
f3:51:98:c7:2d:50:32:c4:15:47:97:c7:84:5d:cf:81:99:a7:
2a:37:13:57:aa:82:a2:c6:97:f4:b4:9d:7c:d8:d3:6c:27:41:
51:b5:41:82:41:48:fe:51:5f:48:1d:64:cf:9c:f9:7a:7b:fc:
21:35:41:ad:0e:b3:fd:f7:5f:aa:9e:37:ff:26:1b:59:1c:f9:
10:97:32:37:2c:5f:26:69:0e:f0:2b:91:1d:4e:2b:ac:cd:63:
fb:28:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:32 2025 by rpki-client