Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/7423C0761B9611F1A790169CDAE4EC9C.roa
File: 7423C0761B9611F1A790169CDAE4EC9C.roa (raw, json)
Hash identifier: wFNRseHPNhpqYn9AtgzATv+E9Kytd9SUDOwd9sd5QJA=
Subject key identifier: 36:AC:20:8C:07:0F:D3:37:95:C3:D0:CA:B1:F8:81:8B:D7:4D:BC:24
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07DB
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/7423C0761B9611F1A790169CDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:00:44 +0000
ROA not before: Mon 09 Mar 2026 09:00:39 +0000
ROA not after: Sun 09 Mar 2036 09:00:39 +0000
asID: 327980
IP address blocks: 41.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 09:00:39 2026 GMT
Not After : Mar 9 09:00:39 2036 GMT
Subject: CN=69ae8c3c-fde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:d0:71:05:03:16:cd:18:61:a5:4d:84:cc:
89:2d:fa:89:ca:a8:b8:1f:f6:8e:90:da:be:a1:6d:
af:0b:09:29:a4:a4:4c:be:cf:0a:2b:32:c0:b2:47:
d3:e3:23:ae:22:40:08:8e:37:f0:3f:e3:88:6d:99:
49:83:49:65:1c:c8:a8:ee:af:d8:f8:7e:4f:fe:79:
56:f8:a8:fb:7a:6c:36:91:0f:d7:d6:e3:3a:2f:f5:
34:38:86:92:68:e4:bf:95:bc:f4:26:2c:54:05:42:
b0:7e:97:8a:fe:23:0a:06:e8:d1:8f:c1:c3:bd:97:
0c:33:57:42:52:63:34:96:5a:ce:58:4e:23:60:2f:
2f:a8:a8:6d:fd:ed:a8:37:b3:40:73:35:51:6e:a5:
47:26:35:c7:41:aa:8f:67:0e:65:ad:7a:cd:bc:5b:
58:b9:0c:9c:29:e2:52:68:6d:25:e7:4b:f1:5f:14:
c5:74:31:3b:8e:b1:80:95:44:a1:27:b0:7d:c4:0b:
cc:c0:95:88:49:a6:fb:d0:2d:c1:34:66:d3:8c:36:
37:6f:20:99:57:5e:8e:94:c4:29:bb:63:ef:18:fd:
7d:26:1e:c4:a3:2c:ca:ad:3c:48:ea:e7:02:68:37:
d7:d2:3f:ab:b2:2f:c6:2d:4c:70:37:b6:b0:14:eb:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:20:8C:07:0F:D3:37:95:C3:D0:CA:B1:F8:81:8B:D7:4D:BC:24
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/7423C0761B9611F1A790169CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7a:ac:12:d2:2d:c6:52:1e:c9:4a:74:87:c0:de:7f:30:80:
87:18:99:18:d2:c1:f6:ef:69:8a:d8:1f:04:a5:01:82:a0:ef:
5e:70:3b:cd:ee:01:74:c7:ff:65:26:d6:25:92:3f:f3:e7:a9:
b8:6e:6b:50:6e:05:2c:05:bc:60:85:a0:c9:89:bf:47:70:60:
84:0d:c1:e8:63:1b:a7:00:16:73:2a:a3:b6:a3:2c:72:e2:97:
71:47:fc:eb:a0:18:30:c7:7a:1c:b6:44:1c:84:43:a3:eb:0a:
3d:ce:72:e4:47:93:c7:99:ea:64:ff:64:3c:3c:18:92:fa:0e:
ed:70:71:25:36:27:7a:a2:2e:b8:18:dd:ea:e5:82:5c:c0:f2:
b7:0f:0a:de:c1:5d:44:b6:61:69:6f:08:45:1b:3a:b3:da:44:
ad:0c:f6:c3:00:28:0b:23:7a:95:79:c7:29:78:75:a1:eb:08:
bf:72:d6:a8:7b:bf:5b:b8:93:58:6e:15:54:aa:b5:e6:50:95:
8e:18:dc:4e:4b:fb:85:9c:5b:5e:d7:95:27:c4:25:22:2f:c8:
62:1b:9c:b9:f0:0e:9d:51:46:b3:d1:6a:72:f8:7a:8b:3f:1b:
8f:ad:87:a5:88:69:6d:ca:39:e4:ae:ac:8e:fe:4b:8c:25:5b:
8d:45:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:43 2026 by rpki-client