Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0B69092C1B9811F19D0D1FA4DAE4EC9C.roa
File: 0B69092C1B9811F19D0D1FA4DAE4EC9C.roa (raw, json)
Hash identifier: r4rq6L1loVCAAn4SzY57R0ZpXpDf4hOl2m+mNOOqHCk=
Subject key identifier: 1A:A5:A7:E7:22:7E:D8:58:8C:28:1D:48:A0:64:53:50:97:08:C6:D3
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07E1
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0B69092C1B9811F19D0D1FA4DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:12:07 +0000
ROA not before: Mon 09 Mar 2026 09:12:02 +0000
ROA not after: Sun 09 Mar 2036 09:12:02 +0000
asID: 327980
IP address blocks: 41.216.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017 (0x7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 09:12:02 2026 GMT
Not After : Mar 9 09:12:02 2036 GMT
Subject: CN=69ae8ee7-a4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:e8:0f:18:2d:50:fc:1c:58:81:bf:de:cc:
e3:a1:9b:6f:4c:f9:c4:3b:11:49:37:f4:07:0e:09:
f5:0f:8b:38:55:f4:e4:a8:0b:83:85:c6:13:19:f3:
ba:bc:bd:a6:68:d9:43:83:b9:14:08:9e:b4:7c:4a:
03:c9:8d:3f:68:f6:c5:12:7f:49:ea:d0:f7:19:97:
ab:d0:d6:6a:f5:70:fb:da:26:f1:42:61:7a:2d:7a:
a3:56:0b:fb:ce:28:2b:9d:a0:95:2b:fe:20:72:b7:
b7:4f:17:af:d5:ed:5e:2c:c0:01:85:f5:9a:1d:df:
2d:6c:bb:22:3d:49:c7:fb:16:5e:ec:89:be:11:75:
8d:4f:eb:c8:6e:a6:3e:5d:38:4e:62:4c:02:e4:96:
ce:a0:2f:33:d9:2e:73:6b:7d:2c:ac:71:9b:df:e0:
dd:d4:4d:bf:c0:b4:f0:38:84:35:05:a2:fa:d7:57:
c4:4f:3b:66:3a:df:2e:a4:87:2d:4a:9c:3f:e4:1e:
62:c3:28:7d:56:fb:88:33:03:0a:b7:91:41:7e:48:
ea:16:b2:42:8b:b3:70:7f:f7:3d:6f:e1:e4:8f:bd:
13:9a:b3:fa:21:40:a0:8c:75:fa:11:a4:f4:5c:8a:
7b:d7:f2:a0:98:7a:47:6b:43:85:b7:8d:d8:00:15:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:A7:E7:22:7E:D8:58:8C:28:1D:48:A0:64:53:50:97:08:C6:D3
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0B69092C1B9811F19D0D1FA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.177.0/24
Signature Algorithm: sha256WithRSAEncryption
82:61:c6:e3:cf:4c:c2:97:25:0f:2a:3d:19:54:c6:15:cb:cf:
54:ec:55:fe:45:b9:c9:15:1b:52:30:d7:aa:1c:04:62:f1:a0:
2f:a7:80:55:06:4b:6f:c6:a5:76:83:b0:37:e4:b0:73:6c:93:
39:dd:21:fe:36:3b:aa:18:fc:8b:9d:ce:2f:86:bf:35:c0:d6:
f6:20:fe:16:49:f0:3e:78:09:98:48:1f:96:8d:37:75:10:9e:
f1:21:88:32:83:dd:87:f5:bc:5f:9f:88:54:51:90:89:82:2c:
d9:ac:3d:7c:fc:19:e7:71:4d:8a:7f:4f:f4:40:28:59:17:25:
54:f9:01:67:9b:e7:58:7b:95:8d:c2:67:77:b7:f8:d7:14:5c:
52:50:c0:53:28:83:92:c9:eb:b7:80:f6:01:9a:ce:83:13:e1:
a4:2b:3a:86:a1:d7:1b:4e:a1:83:a7:ef:c6:50:cc:30:32:10:
f6:52:ef:50:bd:1a:42:9c:f9:b9:a9:72:cf:96:aa:68:ca:56:
20:8e:22:e7:22:a6:e9:74:80:65:fb:dd:95:2d:7f:9e:85:29:
41:8d:61:d8:15:4c:17:13:40:27:d4:e7:41:dc:8e:9b:03:1b:
4a:fc:00:5b:b9:7b:c0:71:2f:25:09:40:d2:d1:7d:a8:07:2f:
b7:bd:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:42 2026 by rpki-client