Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/24DB9B261B9911F1A2189EABDAE4EC9C.roa
File: 24DB9B261B9911F1A2189EABDAE4EC9C.roa (raw, json)
Hash identifier: Sd2bbOyDBgHPbmMh4GfRUwYn+t0yNfM7pVM09Y8x0nw=
Subject key identifier: 4D:22:51:C5:6B:07:17:F8:06:72:9E:EC:5D:22:8D:FB:43:6F:D8:4A
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07EB
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/24DB9B261B9911F1A2189EABDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:19:59 +0000
ROA not before: Mon 09 Mar 2026 09:19:54 +0000
ROA not after: Sun 09 Mar 2036 09:19:54 +0000
asID: 327980
IP address blocks: 41.216.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 09:19:54 2026 GMT
Not After : Mar 9 09:19:54 2036 GMT
Subject: CN=69ae90bf-c08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:0f:b0:fd:a2:74:dc:22:19:d1:bf:99:8c:
57:c8:5c:2c:97:7a:18:7b:ae:e9:eb:27:63:a6:48:
09:7e:a9:2b:4e:d5:b0:08:98:09:1b:d2:39:a3:ce:
d4:d0:ae:43:f1:9a:70:41:00:d8:85:7a:a1:c1:95:
cc:d2:d5:7e:da:3e:08:48:9d:5f:95:c0:94:27:d3:
75:b6:8d:d3:7d:f6:05:85:c2:fb:12:f7:96:78:c1:
a6:eb:bd:48:bd:6d:e0:3e:d7:a6:d3:4e:c6:46:4e:
6c:22:1b:c1:79:f7:25:d6:dc:09:52:f6:12:c9:e0:
9b:a6:80:fd:e2:18:0d:db:5c:01:cd:56:54:49:a1:
a1:79:f8:79:c5:16:d0:34:5e:d7:cd:a5:b7:65:48:
a7:9e:a6:5e:45:d7:27:0a:f2:6f:22:a7:d6:12:b4:
d9:33:ed:ed:aa:3f:b0:f2:2f:c1:9f:92:05:25:15:
33:09:5a:48:8a:79:12:99:be:f7:5b:7a:4e:fb:08:
9e:01:db:08:d7:85:00:c2:51:44:97:11:4c:87:ad:
fe:16:7a:f2:a6:66:5e:01:d5:aa:c8:6f:53:0b:b6:
03:10:1f:0f:b1:b5:1c:1d:0d:51:70:21:8f:62:c7:
24:63:93:6f:d2:e3:41:08:57:a3:5a:94:86:89:07:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:51:C5:6B:07:17:F8:06:72:9E:EC:5D:22:8D:FB:43:6F:D8:4A
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/24DB9B261B9911F1A2189EABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.184.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b3:69:86:ec:f1:35:45:3c:3d:39:46:f8:90:d8:72:b2:5d:
9f:d3:c8:d2:84:3f:5b:a2:f2:e4:92:d5:0f:09:eb:c5:44:a6:
54:97:4d:1a:98:6f:7a:87:42:3a:0c:0e:a4:d3:ee:e7:f7:7b:
7f:d3:6a:f5:e7:77:88:3c:36:17:f4:1a:49:33:76:48:6e:ed:
f0:ce:c5:c0:77:45:d5:20:5d:73:b2:4a:fa:c4:66:0f:08:20:
c2:84:03:cc:27:fa:37:b5:37:2f:0a:eb:d9:4a:e2:31:20:4c:
94:f6:bf:7c:2a:d1:79:bc:86:8e:a7:c1:98:98:1a:b4:f0:ee:
1e:a4:d0:99:d1:1f:f3:e5:5a:0d:b1:30:38:25:39:af:39:8d:
a5:8c:bc:96:2d:4b:45:76:a0:c8:f1:31:29:85:93:77:cf:50:
9a:ad:19:76:14:b2:46:72:b6:ac:77:12:95:90:df:56:23:04:
ba:7c:ff:56:f4:82:69:1c:12:65:d0:e1:12:8d:71:b9:3e:f2:
ab:4b:a4:9b:e8:49:05:d5:5a:68:09:89:d0:57:1a:dc:1c:53:
2c:6e:cb:ab:5a:dd:f0:cc:9f:03:5f:b1:91:74:3c:ec:5f:c0:
b1:56:dc:38:bc:11:99:aa:0b:76:33:c7:74:6b:9e:24:b3:33:
ec:ff:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:43 2026 by rpki-client