Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F19DC41AA01811F09F5B62D6DAE4EC9C.roa
File: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (raw, json)
Hash identifier: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=
Subject key identifier: 74:9D:A4:79:2E:2E:A6:DF:4A:30:D4:68:91:D0:C9:B2:19:A2:F4:F3
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 067D
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F19DC41AA01811F09F5B62D6DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 05:22:24 +0000
ROA not before: Fri 03 Oct 2025 05:22:20 +0000
ROA not after: Sun 31 Dec 2045 05:22:20 +0000
asID: 328327
IP address blocks: 102.140.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Oct 3 05:22:20 2025 GMT
Not After : Dec 31 05:22:20 2045 GMT
Subject: CN=68df5d90-aa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:3a:2d:7b:07:21:15:38:c1:92:83:76:90:
10:4a:0d:27:a8:0b:b0:94:e2:94:63:f0:56:89:50:
17:6d:23:9b:8a:81:da:5f:fa:5f:81:35:ed:59:5c:
32:43:e0:91:07:d3:03:18:03:31:33:b8:d8:ff:0c:
05:c5:be:ed:e0:ac:83:cd:89:41:8f:fb:7a:c1:38:
1e:9f:1b:ab:b7:8e:e3:76:9f:54:9d:53:b5:c9:e0:
1e:8d:82:0f:55:72:e0:10:44:29:95:fd:b3:a8:ec:
52:d6:2d:9a:22:40:4b:72:f2:31:ca:f8:3b:68:cd:
bd:4c:ed:c4:99:ca:16:98:33:36:7f:5f:0f:c3:43:
61:de:36:7c:e1:06:fd:a1:0d:a3:17:ee:14:43:d2:
d4:cf:46:25:b5:7f:57:12:a4:3c:54:44:89:f4:ff:
b2:b2:fb:d0:c8:c3:02:cf:0c:94:6b:9d:de:28:bb:
3e:b0:ea:a5:98:ea:bf:56:96:b9:8b:b1:43:b8:8f:
57:b7:1c:ce:48:95:1e:98:56:e9:e6:60:ef:3d:dc:
39:50:04:ea:36:c8:82:4c:fb:03:d4:a7:73:ef:2b:
fb:da:65:23:76:40:6c:9f:9a:e1:14:50:5c:64:d5:
ea:ef:5f:99:8f:9a:8a:36:b8:48:a4:49:0e:15:49:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:A4:79:2E:2E:A6:DF:4A:30:D4:68:91:D0:C9:B2:19:A2:F4:F3
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F19DC41AA01811F09F5B62D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.68.0/23
Signature Algorithm: sha256WithRSAEncryption
36:a0:76:eb:f9:4d:75:a5:c8:d9:ef:cf:ef:01:6d:90:c7:88:
1e:79:9e:e0:6b:13:ca:11:19:53:f2:70:2c:bb:44:9c:78:5d:
3f:8f:6d:dd:76:0a:9f:c4:20:a1:82:54:ae:62:c8:91:36:a1:
60:91:ef:7d:9c:55:61:7d:59:03:0b:29:85:32:8c:1c:36:65:
47:32:86:84:5b:53:8b:e0:4d:b9:8a:1c:b0:f2:5b:b9:45:57:
c8:2d:40:9c:38:bc:35:f0:5f:8f:77:62:2a:6e:ca:67:de:e8:
d8:80:72:1f:e1:5c:38:8e:07:5e:bd:45:ad:1a:cb:40:6b:df:
36:b0:11:c2:f7:52:e5:67:f9:9e:1c:09:7a:e0:41:a3:e9:65:
bd:24:8f:9a:3a:41:9b:22:b1:02:77:4f:18:b5:b7:28:0e:a2:
5d:b5:67:90:b2:2a:ef:b4:ae:04:0b:80:71:b0:33:e7:05:d9:
06:1a:72:7b:51:e2:27:16:5d:a4:e2:e2:8e:7a:6b:0d:91:ea:
c6:a2:4a:2e:8e:11:a3:42:4a:5e:86:aa:d1:0a:75:04:a6:5a:
5e:0e:c0:7b:23:7e:fb:17:99:75:9b:4c:66:7e:8e:d8:8c:53:
5f:de:fd:3f:47:ab:8c:2b:63:72:7d:e2:cd:2b:2f:8f:52:51:
07:2f:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:38 2025 by rpki-client