Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/EEED23E0221E11F1929878B9DAE4EC9C.roa
File: EEED23E0221E11F1929878B9DAE4EC9C.roa (raw, json)
Hash identifier: PIbvfw2+WuzsuifwkM5C+2Xq3LEZFo6ygJtOvVyzU5Q=
Subject key identifier: 03:60:70:3B:5B:7F:E8:7F:1A:DF:9C:AA:F0:E6:D1:BC:FC:C5:CF:FB
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 0395
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/EEED23E0221E11F1929878B9DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 16:32:48 +0000
ROA not before: Tue 17 Mar 2026 16:32:43 +0000
ROA not after: Fri 17 Mar 2028 16:32:43 +0000
asID: 37073
IP address blocks: 41.216.149.0/24 maxlen: 24
41.216.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Mar 17 16:32:43 2026 GMT
Not After : Mar 17 16:32:43 2028 GMT
Subject: CN=69b98230-31c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:c5:39:27:55:2c:77:f6:03:4b:c8:07:4b:
37:8f:c9:70:dd:4a:e4:4e:1a:03:af:94:da:5c:04:
6c:71:83:18:f2:76:e5:06:ab:48:91:e3:ca:0e:d0:
3c:dc:c2:19:82:b5:81:66:b7:47:b4:ca:61:95:11:
1d:d8:b0:d3:ff:27:a6:db:5c:f6:f8:02:1c:d6:f7:
9b:48:03:02:22:33:97:07:c9:ee:fb:3a:a7:24:98:
bf:94:b2:0c:43:93:ea:89:57:f2:e5:95:da:3e:3b:
87:d2:03:1b:22:0f:d9:7a:c6:c2:df:d3:05:18:b4:
82:e2:5a:98:b8:48:76:2d:a1:20:34:c2:5d:43:07:
30:3e:05:d7:3e:3e:f8:f5:04:3c:44:7c:42:28:a1:
6f:77:05:b9:3b:c3:41:04:1c:2c:b6:10:f7:d3:3b:
0d:ae:71:71:4f:be:f6:b8:9e:54:02:ae:d3:6e:98:
fe:fa:03:dd:1a:59:4b:05:47:ab:7c:1b:05:39:77:
c8:0e:9c:17:5a:9d:5f:c0:41:f3:92:d3:63:84:84:
b0:5e:40:75:bf:9c:7d:74:32:b4:08:28:46:0b:45:
72:b6:dd:3e:47:f2:fd:35:9e:88:6f:db:b9:e5:25:
42:c6:be:39:f9:d3:5a:99:f8:e7:7d:59:ce:c8:22:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:70:3B:5B:7F:E8:7F:1A:DF:9C:AA:F0:E6:D1:BC:FC:C5:CF:FB
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/EEED23E0221E11F1929878B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.149.0/24
41.216.159.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f4:ca:3d:1f:28:8a:62:c3:72:f0:2d:c5:f3:2f:d9:37:4f:
cb:a2:7a:b5:29:48:54:3d:57:8e:b5:84:65:33:02:4e:6b:55:
03:a4:95:bc:ae:bf:5d:a3:37:57:ec:4f:c0:f7:1c:27:82:7e:
b5:7f:c2:ad:75:29:e6:d2:fd:61:08:73:85:bb:9e:b6:dc:58:
78:a9:8d:43:90:54:fa:58:9f:a1:ca:3d:ac:cd:59:f1:18:91:
1f:53:00:40:7b:25:73:b8:44:b3:b0:7a:5f:36:c4:ba:1b:38:
69:e5:eb:87:fd:3c:e5:18:fb:e4:70:b0:2a:22:cc:46:36:57:
fe:3f:34:24:76:7e:bf:f4:2b:a5:c6:06:75:c0:1b:b7:77:a5:
44:58:9b:ff:ea:a7:d3:a9:49:b5:0a:f1:47:09:52:c6:c8:a6:
4b:ac:ad:a9:61:35:11:1a:0a:2e:d6:57:0f:87:10:27:7d:d4:
ca:1a:e1:fc:e5:8c:a2:11:b9:4c:25:b9:3a:63:92:cd:c0:0d:
d7:b3:51:21:0d:ea:9e:9d:af:b5:23:0c:c1:58:b7:fa:68:1b:
d3:f8:11:60:6a:7a:0b:aa:6e:96:03:fb:61:ed:fc:fd:39:df:
4e:a2:a1:d2:6a:b0:e6:df:77:14:5d:d5:87:f3:d5:c8:ac:f8:
c6:64:00:2d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1NjdBRjExMC8GA1UEBRMoNUZDMzdERUNFQjcwMDhCQkE3NDEzNDc4NDVCNzZC
NDc2NzdBRUE2OTAeFw0yNjAzMTcxNjMyNDNaFw0yODAzMTcxNjMyNDNaMBgxFjAU
BgNVBAMTDTY5Yjk4MjMwLTMxYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHw8U5J1Usd/YDS8gHSzePyXDdSuROGgOvlNpcBGxxgxjyduUGq0iR48oO
0DzcwhmCtYFmt0e0ymGVER3YsNP/J6bbXPb4AhzW95tIAwIiM5cHye77OqckmL+U
sgxDk+qJV/Llldo+O4fSAxsiD9l6xsLf0wUYtILiWpi4SHYtoSA0wl1DBzA+Bdc+
Pvj1BDxEfEIooW93Bbk7w0EEHCy2EPfTOw2ucXFPvva4nlQCrtNumP76A90aWUsF
R6t8GwU5d8gOnBdanV/AQfOS02OEhLBeQHW/nH10MrQIKEYLRXK23T5H8v01nohv
27nlJULGvjn501qZ+Od9Wc7IIhILAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUA2Bw
O1t/6H8a35yq8ObRvPzFz/swHwYDVR0jBBgwFoAUX8N97OtwCLunQTR4RbdrR2d6
6mkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNTY3LzMzRTMzMDI2NzRCQTExRUVBQTk0QzE3MzRBRDlFNkZDL1g4Tjk3
T3R3Q0x1blFUUjRSYmRyUjJkNjZtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1g4Tjk3T3R3Q0x1blFUUjRSYmRyUjJkNjZtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjUwNTY3LzMzRTMzMDI2NzRCQTExRUVBQTk0QzE3MzRB
RDlFNkZDL0VFRUQyM0UwMjIxRTExRjE5Mjk4NzhCOURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAp2JUDBAAp2J8wDQYJKoZI
hvcNAQELBQADggEBAED0yj0fKIpiw3LwLcXzL9k3T8uierUpSFQ9V461hGUzAk5r
VQOklbyuv12jN1fsT8D3HCeCfrV/wq11KebS/WEIc4W7nrbcWHipjUOQVPpYn6HK
PazNWfEYkR9TAEB7JXO4RLOwel82xLobOGnl64f9POUY++RwsCoizEY2V/4/NCR2
fr/0K6XGBnXAG7d3pURYm//qp9OpSbUK8UcJUsbIpkusralhNREaCi7WVw+HECd9
1Moa4fzljKIRuUwluTpjks3ADdezUSEN6p6dr7UjDMFYt/poG9P4EWBqeguqbpYD
+2Ht/P05306iodJqsObfdxRd1Yfz1cis+MZkAC0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:47:11 2026 by rpki-client