Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/EFEB23DA1B9511F1BA203498DAE4EC9C.roa
File: EFEB23DA1B9511F1BA203498DAE4EC9C.roa (raw, json)
Hash identifier: v+qFwaaht2QuxKIwyNjf4TTsShwAcY+6iT/Scb7JCgI=
Subject key identifier: D3:44:2A:4A:21:6D:EA:6F:AA:74:B3:B8:E7:74:FB:4E:73:22:8E:EE
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07D5
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/EFEB23DA1B9511F1BA203498DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:57:01 +0000
ROA not before: Mon 09 Mar 2026 08:56:58 +0000
ROA not after: Sun 09 Mar 2036 08:56:58 +0000
asID: 327980
IP address blocks: 41.216.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 08:56:58 2026 GMT
Not After : Mar 9 08:56:58 2036 GMT
Subject: CN=69ae8b5d-c172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:d0:5b:b3:6d:ae:51:8c:23:be:8c:14:1d:
b2:1a:68:71:26:97:e7:ca:a4:4d:ad:a0:e3:c0:47:
bb:59:71:d6:67:c5:96:7a:05:d1:c0:de:14:dd:77:
ac:55:c6:dc:46:46:e7:5e:dd:5e:f1:6b:54:9f:01:
9a:3b:41:7d:d0:6f:76:9d:19:e7:eb:c9:cd:df:96:
0f:f4:9b:73:fc:83:95:d3:de:8f:4c:f0:39:12:da:
7d:de:ee:7e:87:57:cc:cf:ad:bb:d8:fc:de:9d:e6:
ea:b0:25:33:db:7d:92:23:dc:71:c0:b4:32:56:d6:
03:0e:3c:7d:82:f6:af:d4:43:81:05:51:b0:6f:6d:
86:ff:8f:0d:3e:61:d6:5d:23:2f:dd:1f:8e:7f:e4:
73:b5:38:65:bc:08:70:31:d8:bb:f1:12:0a:f7:52:
4d:5a:e5:a2:64:05:b8:83:c2:ea:61:4d:fc:1a:ab:
f8:69:61:d7:e9:35:ce:79:45:43:c7:73:e0:92:41:
ab:9e:9d:c6:26:66:18:01:9c:77:ea:d5:bb:14:2d:
7e:ed:c9:29:6d:6a:21:b5:f6:88:b5:3e:9f:bb:cc:
87:4a:90:22:c2:69:b8:69:e0:c5:cc:8b:d1:62:b2:
9f:20:6d:4d:f5:31:e6:b4:f5:ef:bc:f6:a2:20:ca:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:2A:4A:21:6D:EA:6F:AA:74:B3:B8:E7:74:FB:4E:73:22:8E:EE
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/EFEB23DA1B9511F1BA203498DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.183.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bb:06:7d:1e:f4:14:1f:50:36:18:02:b9:38:42:1a:37:92:
67:63:59:d7:8b:52:b1:db:a1:e2:49:ae:50:6e:79:7b:d3:0e:
58:97:84:82:2f:02:37:4c:20:a5:7b:92:d3:12:98:e8:55:e5:
1e:e3:0c:14:cd:7d:99:e6:69:f5:bb:85:f8:4a:a7:f5:6f:82:
90:7a:a2:f8:77:20:3e:c8:d0:12:51:b2:b8:4a:58:c3:80:90:
68:a3:ed:8f:0f:48:b7:38:e5:96:95:89:3a:20:a6:3b:c7:c6:
82:49:bc:2c:a4:ce:8b:65:4b:f7:63:f4:c2:44:f6:22:c8:df:
9f:f4:37:71:70:09:f9:3a:f8:73:fa:f6:40:74:93:f4:f4:fb:
e7:e1:05:52:22:3a:6a:a3:3b:2c:92:25:21:53:ac:50:51:02:
f0:8d:e0:73:be:2e:cb:d5:11:df:02:0f:5d:5b:8b:26:3d:4a:
4a:d4:ab:39:3d:97:1f:8d:50:d4:42:e4:7d:bd:f3:c1:e8:a7:
0d:bb:3b:0e:42:9e:7f:fd:16:12:fe:b5:03:e1:79:64:92:89:
44:0a:40:2b:8f:19:7e:d6:32:82:ee:eb:d1:e8:ce:52:32:b2:
c3:3c:18:27:d3:e0:ee:fb:98:a8:63:92:67:79:58:15:a7:17:
b8:76:66:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjAzMDkwODU2NThaFw0zNjAzMDkwODU2NThaMBgxFjAU
BgNVBAMTDTY5YWU4YjVkLWMxNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJTdBbs22uUYwjvowUHbIaaHEml+fKpE2toOPAR7tZcdZnxZZ6BdHA3hTd
d6xVxtxGRude3V7xa1SfAZo7QX3Qb3adGefryc3flg/0m3P8g5XT3o9M8DkS2n3e
7n6HV8zPrbvY/N6d5uqwJTPbfZIj3HHAtDJW1gMOPH2C9q/UQ4EFUbBvbYb/jw0+
YdZdIy/dH45/5HO1OGW8CHAx2LvxEgr3Uk1a5aJkBbiDwuphTfwaq/hpYdfpNc55
RUPHc+CSQauencYmZhgBnHfq1bsULX7tySltaiG19oi1Pp+7zIdKkCLCabhp4MXM
i9Fisp8gbU31Mea09e+89qIgysK5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU00Qq
SiFt6m+qdLO453T7TnMiju4wHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4L0VGRUIyM0RBMUI5NTExRjFCQTIwMzQ5OERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LcwDQYJKoZIhvcNAQEL
BQADggEBABe7Bn0e9BQfUDYYArk4Qho3kmdjWdeLUrHboeJJrlBueXvTDliXhIIv
AjdMIKV7ktMSmOhV5R7jDBTNfZnmafW7hfhKp/VvgpB6ovh3ID7I0BJRsrhKWMOA
kGij7Y8PSLc45ZaViTogpjvHxoJJvCykzotlS/dj9MJE9iLI35/0N3FwCfk6+HP6
9kB0k/T0++fhBVIiOmqjOyySJSFTrFBRAvCN4HO+LsvVEd8CD11biyY9SkrUqzk9
lx+NUNRC5H2988Hopw27Ow5Cnn/9FhL+tQPheWSSiUQKQCuPGX7WMoLu69HozlIy
ssM8GCfT4O77mKhjkmd5WBWnF7h2ZnQ=
-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:42 2026 by rpki-client