Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa
File: BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa (raw, json)
Hash identifier: QgCzz1u02jAncdSqmMDgneUgSDpivS4kunm1jBqDAMg=
Subject key identifier: C3:5C:6A:6C:9E:F4:5A:41:3A:4E:87:E3:F1:CA:3E:29:C1:82:40:B6
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 0393
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 16:31:29 +0000
ROA not before: Tue 17 Mar 2026 16:31:24 +0000
ROA not after: Fri 17 Mar 2028 16:31:24 +0000
asID: 37073
IP address blocks: 41.216.144.0/24 maxlen: 24
41.216.145.0/24 maxlen: 24
41.216.146.0/24 maxlen: 24
41.216.147.0/24 maxlen: 24
41.216.148.0/24 maxlen: 24
41.216.150.0/24 maxlen: 24
41.216.151.0/24 maxlen: 24
41.216.152.0/24 maxlen: 24
41.216.153.0/24 maxlen: 24
41.216.154.0/24 maxlen: 24
41.216.155.0/24 maxlen: 24
41.216.156.0/24 maxlen: 24
41.216.157.0/24 maxlen: 24
41.216.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Mar 17 16:31:24 2026 GMT
Not After : Mar 17 16:31:24 2028 GMT
Subject: CN=69b981e1-4844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:2e:02:de:cf:4a:88:72:b5:12:21:7c:97:
57:73:35:b5:b2:0a:8a:4a:4e:8e:89:61:77:f8:51:
1a:3d:bf:a8:e4:4c:33:e1:6b:3c:ad:8c:81:5c:20:
94:0b:4e:ec:ec:3d:d4:80:66:be:7a:62:33:c3:b5:
d5:70:8e:44:28:52:59:a9:0b:c8:71:67:45:65:17:
01:41:cd:34:80:05:e5:c5:bd:2d:09:11:25:3b:fa:
50:a5:1e:df:25:5b:b3:ef:c5:63:6d:54:fb:69:6e:
7d:93:94:46:70:cb:5c:91:af:02:2a:68:c8:52:d3:
5b:be:74:dc:4a:24:36:14:8a:d1:05:00:3c:31:78:
d4:a0:c2:ef:2b:d9:70:dc:54:6a:02:7c:47:0b:c8:
da:e3:7d:23:53:a0:91:a4:bf:6b:64:c1:c0:35:e5:
f4:ab:3c:6b:8a:9d:1e:51:60:78:ff:c9:e4:e1:ad:
1b:50:e8:37:a9:0b:77:ac:0f:28:92:bb:34:e3:93:
68:b3:52:60:f8:21:92:c0:b1:04:2c:87:8b:cb:ff:
87:6d:4e:9f:5d:2d:ad:1e:7d:dc:e7:23:a0:14:a5:
92:42:ed:a3:4d:70:0b:c3:49:96:43:a7:1f:59:e3:
85:08:c1:54:52:b0:9d:92:78:54:04:00:79:55:14:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:6A:6C:9E:F4:5A:41:3A:4E:87:E3:F1:CA:3E:29:C1:82:40:B6
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.144.0-41.216.148.255
41.216.150.0-41.216.158.255
Signature Algorithm: sha256WithRSAEncryption
88:16:36:ec:05:a6:3b:71:27:3c:d9:f1:6b:f0:cb:30:a6:2f:
4e:43:79:65:2b:16:f0:dc:3e:98:41:b1:0f:a9:29:13:3e:e2:
53:08:2b:a0:a5:eb:af:69:32:9b:dd:9e:6d:3f:f6:25:9b:c3:
d8:b6:54:16:f5:6b:d3:8b:fc:db:0a:91:76:a0:6c:d6:8a:18:
61:f1:62:16:b7:db:fb:76:25:4b:df:ec:a2:c3:9b:09:a1:1b:
79:4f:a1:27:1d:3c:e1:67:23:90:58:3e:29:28:b6:2a:eb:06:
ff:7b:25:ba:55:2d:68:22:c3:51:2a:90:45:e0:f1:cd:fc:c1:
ee:76:74:de:bb:f0:2d:8d:16:5a:25:17:1e:c2:c9:db:4f:ad:
70:eb:30:30:1d:3b:89:a6:d4:cb:42:71:81:bd:5e:70:ec:46:
34:7d:d3:fe:6d:3b:d9:cf:54:76:07:8f:04:75:cd:6f:25:23:
54:87:7d:fb:38:7f:dd:54:18:1a:0c:76:80:f8:26:22:ee:af:
01:1b:9a:a7:a6:30:34:7d:24:42:f0:67:3e:d2:ea:c2:ee:d2:
27:00:b7:e9:0a:89:d0:3d:23:82:74:fa:b8:86:3f:a7:7c:02:
37:3b:a3:0b:43:42:96:d0:4b:5e:99:50:e9:49:fe:ec:83:e2:
37:5b:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:08:04 2026 by rpki-client