Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/5656DE221B9911F1BAA305ACDAE4EC9C.roa
File: 5656DE221B9911F1BAA305ACDAE4EC9C.roa (raw, json)
Hash identifier: d1sCupRsCtmgYH5lcdqUegyx4RnKSvvMlQeEHE659Gg=
Subject key identifier: 65:E5:28:D1:10:80:2C:35:50:46:7A:25:A6:A5:25:5C:BE:3B:DD:29
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07ED
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/5656DE221B9911F1BAA305ACDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:21:22 +0000
ROA not before: Mon 09 Mar 2026 09:21:18 +0000
ROA not after: Sun 09 Mar 2036 09:21:18 +0000
asID: 327980
IP address blocks: 41.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 09:21:18 2026 GMT
Not After : Mar 9 09:21:18 2036 GMT
Subject: CN=69ae9112-1b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:98:18:8e:57:b6:cc:74:83:ec:22:b7:00:
07:9f:9c:6d:61:b7:3c:41:00:a1:16:92:37:e3:b4:
c7:f8:8d:ac:9b:4c:1a:de:fc:56:3c:15:b7:24:ac:
56:d9:b3:7d:86:c1:1c:71:89:48:3d:57:19:81:b1:
80:29:e2:58:f7:0a:32:74:c2:96:e6:3d:11:4c:0a:
98:47:07:a3:e6:0b:39:35:84:64:d9:e4:f9:03:72:
b0:25:36:82:25:33:ce:d5:0b:36:c3:ee:38:df:76:
3c:83:9d:3e:08:d4:d3:47:b4:0d:66:17:a0:b2:06:
4f:8c:74:50:73:5e:4a:92:fb:9d:19:e3:e8:5a:1e:
5e:2f:de:b2:33:75:f7:9b:5f:83:5c:6c:d6:82:3d:
00:90:c8:48:85:3e:0f:b1:03:69:e7:36:9d:34:6a:
d5:65:61:98:89:34:de:3b:6c:7b:30:58:75:86:ef:
93:76:14:37:f1:63:67:d7:68:8c:1a:ba:dc:d1:af:
eb:36:e5:dc:3c:6b:fe:b6:5f:ad:5e:e0:bc:9c:37:
01:93:11:5c:d6:3e:12:8e:28:c3:fb:e8:33:aa:b6:
85:e8:d9:4f:00:6d:d3:f4:5b:c2:06:7c:0c:57:e3:
79:45:3a:9d:e8:92:86:df:9c:fb:10:e9:bd:59:c0:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:28:D1:10:80:2C:35:50:46:7A:25:A6:A5:25:5C:BE:3B:DD:29
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/5656DE221B9911F1BAA305ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ef:72:03:1a:c4:45:44:bd:c8:4a:9c:59:68:47:b7:b9:04:
4e:6f:b0:22:d9:03:a1:44:86:18:61:61:dd:e7:dc:fe:e2:79:
92:75:e5:63:c7:8b:a5:54:ae:63:66:65:ef:3e:ab:f4:5d:a3:
1c:08:a7:26:41:51:f7:a6:26:1a:26:0f:13:f7:9f:a1:54:3e:
7e:35:f5:34:b5:93:18:eb:ec:74:29:f9:4a:73:91:c9:c2:d4:
96:c5:0c:cb:23:1c:23:6c:21:2a:f3:59:ee:a9:e8:51:06:8d:
4a:83:a3:2a:36:21:5e:46:02:74:d5:42:d3:8b:3b:84:ec:32:
4c:9a:ee:9c:e8:10:57:c4:f2:e0:47:0c:53:30:c7:c6:67:6f:
2a:d9:4c:60:b7:e4:bb:ac:1f:b5:a6:0e:bf:30:7a:2d:d3:91:
ee:7d:c9:1c:c1:ce:89:a8:c8:61:b0:d6:d2:fb:4c:86:24:20:
68:bf:4f:6c:3e:2c:fd:a1:28:b2:86:8e:f8:b6:e4:e1:41:be:
3f:56:02:b6:ed:e9:b4:9c:1f:e9:a3:e0:99:e7:5d:1c:66:51:
55:d9:43:7a:cf:78:35:cb:2e:fd:92:c3:a7:6a:d3:fb:67:c8:
59:aa:1c:b8:1c:25:a3:04:ce:02:70:95:05:33:a5:18:56:6f:
d7:59:7d:2e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjAzMDkwOTIxMThaFw0zNjAzMDkwOTIxMThaMBgxFjAU
BgNVBAMTDTY5YWU5MTEyLTFiM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvKZgYjle2zHSD7CK3AAefnG1htzxBAKEWkjfjtMf4jaybTBre/FY8Fbck
rFbZs32GwRxxiUg9VxmBsYAp4lj3CjJ0wpbmPRFMCphHB6PmCzk1hGTZ5PkDcrAl
NoIlM87VCzbD7jjfdjyDnT4I1NNHtA1mF6CyBk+MdFBzXkqS+50Z4+haHl4v3rIz
dfebX4NcbNaCPQCQyEiFPg+xA2nnNp00atVlYZiJNN47bHswWHWG75N2FDfxY2fX
aIwautzRr+s25dw8a/62X61e4LycNwGTEVzWPhKOKMP76DOqtoXo2U8AbdP0W8IG
fAxX43lFOp3okobfnPsQ6b1ZwA8DAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZeUo
0RCALDVQRnolpqUlXL473SkwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4LzU2NTZERTIyMUI5OTExRjFCQUEzMDVBQ0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LowDQYJKoZIhvcNAQEL
BQADggEBAArvcgMaxEVEvchKnFloR7e5BE5vsCLZA6FEhhhhYd3n3P7ieZJ15WPH
i6VUrmNmZe8+q/RdoxwIpyZBUfemJhomDxP3n6FUPn419TS1kxjr7HQp+UpzkcnC
1JbFDMsjHCNsISrzWe6p6FEGjUqDoyo2IV5GAnTVQtOLO4TsMkya7pzoEFfE8uBH
DFMwx8ZnbyrZTGC35LusH7WmDr8wei3Tke59yRzBzomoyGGw1tL7TIYkIGi/T2w+
LP2hKLKGjvi25OFBvj9WArbt6bScH+mj4JnnXRxmUVXZQ3rPeDXLLv2Sw6dq0/tn
yFmqHLgcJaMEzgJwlQUzpRhWb9dZfS4=
-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:41 2026 by rpki-client