Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/B5CDAB981B9811F1B49AFAA7DAE4EC9C.roa
File: B5CDAB981B9811F1B49AFAA7DAE4EC9C.roa (raw, json)
Hash identifier: okz/XIpdGjV3fTBBVZmdvxqkxKK2rpB3+IcXfScdJ9k=
Subject key identifier: 96:CF:A6:D2:6F:65:F0:9A:3A:4B:CF:EA:3F:6F:FE:B6:9C:A3:67:17
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07E7
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/B5CDAB981B9811F1B49AFAA7DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:16:52 +0000
ROA not before: Mon 09 Mar 2026 09:15:48 +0000
ROA not after: Sun 09 Mar 2036 09:15:48 +0000
asID: 327980
IP address blocks: 41.216.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 09:15:48 2026 GMT
Not After : Mar 9 09:15:48 2036 GMT
Subject: CN=69ae9004-abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:03:e6:9a:65:76:e3:9a:aa:d5:d0:ad:78:
c7:7a:e7:09:f9:6e:b8:58:16:ab:80:f6:a2:d7:29:
5d:2d:12:09:41:29:a0:82:59:46:ef:33:05:4a:7b:
2b:d3:4b:c5:77:a9:e0:6e:17:fe:a1:af:07:dc:e3:
3c:94:0f:af:f8:b8:eb:35:40:d7:a8:dc:e9:9d:18:
3a:99:4e:c1:1e:a8:03:74:70:86:75:97:d3:79:e8:
73:ae:b0:4d:6a:29:dc:3b:e5:ba:3c:76:46:b3:65:
10:ba:58:ee:5b:df:99:82:78:6a:4b:05:c6:e8:a6:
2b:28:89:a8:3f:49:2b:38:3e:e0:76:4f:fa:2c:57:
a4:a0:1e:3e:fb:0b:3a:78:8f:f8:0d:59:71:75:20:
77:ac:2c:8a:7e:04:59:c4:57:da:5d:d2:44:b7:a4:
91:f0:e1:4b:3e:2f:74:95:85:69:b0:4f:46:e4:b2:
b5:f7:31:f2:1d:22:63:83:2e:3f:dc:d9:92:86:40:
f4:a4:79:c0:92:77:f2:51:cf:e7:cd:3b:d9:1c:f8:
8c:1a:0b:26:0f:20:74:96:a7:33:aa:c0:4e:dc:8d:
01:b8:23:03:30:0a:19:56:b3:a7:ef:5a:9c:2d:b8:
0d:37:ca:fd:a3:19:ca:7e:6b:c0:00:7c:d2:73:bd:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CF:A6:D2:6F:65:F0:9A:3A:4B:CF:EA:3F:6F:FE:B6:9C:A3:67:17
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/B5CDAB981B9811F1B49AFAA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:09:20:96:48:5b:34:fd:e8:fd:d9:46:4e:94:68:12:97:86:
4b:92:84:86:05:2a:17:07:ca:6b:7d:f3:8e:ca:0e:78:a5:c9:
20:21:20:a9:f0:3a:7b:ab:7c:c3:86:4e:6d:22:17:82:e5:7d:
d2:7f:46:db:9a:d0:02:9e:73:e5:29:51:70:33:40:41:12:4d:
fa:cb:ae:a6:a1:8e:0f:83:c7:dc:fd:51:87:81:0f:42:0a:f7:
d4:e0:b0:14:4c:9c:43:ef:c0:11:74:91:87:04:8f:dd:91:a7:
30:08:1e:ef:e2:5b:b9:b1:23:8d:c9:95:58:74:c1:30:b0:61:
ac:80:39:52:9f:30:fc:01:72:75:8e:c7:5e:49:bb:bf:8c:d6:
ff:a3:ed:0f:bc:e4:28:19:50:12:75:a7:36:9c:31:cf:c6:d4:
42:ca:43:37:ea:27:26:d5:9d:43:64:e1:42:a0:10:ab:1c:8b:
f3:5b:e6:d6:07:43:74:20:85:7b:45:35:5a:dd:75:36:0a:13:
f0:51:ff:53:64:01:49:a7:eb:23:c7:4d:51:9d:61:5d:48:5c:
92:27:e5:0c:9d:4e:c4:79:6c:47:29:56:4a:53:72:3f:14:e0:
46:6e:c6:88:62:41:c3:28:d4:91:98:17:dd:c9:00:58:60:42:
53:f6:88:4a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjAzMDkwOTE1NDhaFw0zNjAzMDkwOTE1NDhaMBgxFjAU
BgNVBAMTDTY5YWU5MDA0LWFiZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+gQPmmmV245qq1dCteMd65wn5brhYFquA9qLXKV0tEglBKaCCWUbvMwVK
eyvTS8V3qeBuF/6hrwfc4zyUD6/4uOs1QNeo3OmdGDqZTsEeqAN0cIZ1l9N56HOu
sE1qKdw75bo8dkazZRC6WO5b35mCeGpLBcbopisoiag/SSs4PuB2T/osV6SgHj77
Czp4j/gNWXF1IHesLIp+BFnEV9pd0kS3pJHw4Us+L3SVhWmwT0bksrX3MfIdImOD
Lj/c2ZKGQPSkecCSd/JRz+fNO9kc+IwaCyYPIHSWpzOqwE7cjQG4IwMwChlWs6fv
WpwtuA03yv2jGcp+a8AAfNJzvcr/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUls+m
0m9l8Jo6S8/qP2/+tpyjZxcwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4L0I1Q0RBQjk4MUI5ODExRjFCNDlBRkFBN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LQwDQYJKoZIhvcNAQEL
BQADggEBACoJIJZIWzT96P3ZRk6UaBKXhkuShIYFKhcHymt9847KDnilySAhIKnw
OnurfMOGTm0iF4LlfdJ/Rtua0AKec+UpUXAzQEESTfrLrqahjg+Dx9z9UYeBD0IK
99TgsBRMnEPvwBF0kYcEj92RpzAIHu/iW7mxI43JlVh0wTCwYayAOVKfMPwBcnWO
x15Ju7+M1v+j7Q+85CgZUBJ1pzacMc/G1ELKQzfqJybVnUNk4UKgEKsci/Nb5tYH
Q3QghXtFNVrddTYKE/BR/1NkAUmn6yPHTVGdYV1IXJIn5QydTsR5bEcpVkpTcj8U
4EZuxohiQcMo1JGYF93JAFhgQlP2iEo=
-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:43 2026 by rpki-client