Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/EE2BF774A01911F0B0CB31DBDAE4EC9C.roa
File: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (raw, json)
Hash identifier: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=
Subject key identifier: 3A:51:C6:67:C6:0D:89:25:E7:C4:94:96:61:7B:44:53:52:74:2A:32
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 068B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/EE2BF774A01911F0B0CB31DBDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:29:28 +0000
ROA not before: Fri 03 Oct 2025 05:29:24 +0000
ROA not after: Sun 31 Dec 2045 05:29:24 +0000
asID: 328327
IP address blocks: 102.140.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:29:24 2025 GMT
Not After : Dec 31 05:29:24 2045 GMT
Subject: CN=68df5f38-12ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:ed:d1:52:e6:37:1a:99:77:6a:59:0d:77:
e8:e4:43:6f:33:b7:53:fc:a2:53:df:5b:4b:8c:b9:
60:32:dd:ab:fc:4a:e6:2b:ca:e9:92:b7:e2:c6:0b:
c5:d4:ad:f3:cb:e1:fb:3e:10:2c:bb:7e:7a:39:19:
09:43:ff:82:d2:05:66:ed:98:3e:72:00:6f:c0:4d:
44:a2:d7:51:09:a3:84:67:e3:3d:23:1b:16:71:b4:
e8:89:6c:a3:00:4f:1b:44:f0:8e:27:be:d6:14:d2:
98:b3:85:21:e5:04:44:a6:78:96:a7:fe:a4:36:70:
5b:bd:98:b4:99:29:ef:fb:eb:00:ed:47:dd:9f:61:
8d:18:de:74:0e:7f:9e:94:a9:90:55:97:02:b0:97:
c5:58:4d:e2:86:c3:1a:ff:43:33:de:d5:3a:33:eb:
e3:f5:62:79:31:dc:f4:9c:31:67:03:8f:41:5e:50:
64:9b:19:d9:6e:7d:83:08:2d:cb:1a:a0:53:5f:8a:
c8:7f:c6:7e:48:83:57:ca:6b:c4:ec:26:ef:e1:67:
fe:2e:34:d8:99:f3:b4:a8:eb:35:3d:7c:e4:72:86:
44:c4:28:19:7a:e9:12:0a:ae:00:01:e2:ce:a3:5f:
bd:6c:3e:ee:47:39:21:bf:c5:ee:fa:b1:11:21:40:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:C6:67:C6:0D:89:25:E7:C4:94:96:61:7B:44:53:52:74:2A:32
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/EE2BF774A01911F0B0CB31DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.64.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:83:7a:0f:2d:ee:f6:da:ba:d2:ed:19:82:1e:dd:c4:2e:e5:
61:e9:e9:17:7d:d0:5c:dc:15:c4:23:8c:3c:c8:4e:ef:54:b6:
f0:e8:17:30:22:c1:86:b0:6e:2b:d5:33:76:dd:79:1b:f9:db:
83:bb:4f:bf:b2:57:7d:23:5d:62:35:8d:1d:97:a7:1f:a2:ec:
ab:5c:c0:a8:50:a6:65:59:20:46:2a:da:4e:52:fe:97:2a:c1:
c4:73:a5:55:80:b6:50:3e:13:b2:d5:c7:8e:0e:74:2b:13:45:
78:a0:2e:bc:54:a2:47:fc:50:fc:6a:0d:92:36:25:71:94:55:
3b:47:5e:89:96:88:b2:2b:fc:00:4d:ec:f5:e0:d3:39:3a:6f:
ce:24:62:e0:a1:6b:5f:8c:ba:88:74:2c:2b:7d:70:23:df:50:
d3:b6:ab:79:2c:08:75:dd:17:eb:9b:36:07:83:40:ec:9d:c7:
64:bc:ca:5c:d0:f8:6e:3e:8b:12:26:ad:9a:a9:25:af:89:25:
d2:81:0d:8c:05:57:48:9d:62:86:b6:22:b3:36:18:e2:54:b1:
ba:1a:4b:d3:22:cc:3f:13:23:d3:15:b0:f1:fe:bd:1e:39:e9:
81:51:cb:e1:39:6d:4f:65:18:30:92:68:8e:b9:8d:9a:95:f0:
8c:57:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:41 2025 by rpki-client