Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/14DDB8741B9611F1AEDEF299DAE4EC9C.roa
File: 14DDB8741B9611F1AEDEF299DAE4EC9C.roa (raw, json)
Hash identifier: TagLQ0892R3VVBadijR9sQxReuOMDykypp5Jn7djXRI=
Subject key identifier: E7:5D:19:B6:A9:57:70:F0:E5:69:85:6B:73:41:FB:AE:14:4D:08:7E
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07D7
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/14DDB8741B9611F1AEDEF299DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:58:04 +0000
ROA not before: Mon 09 Mar 2026 08:57:59 +0000
ROA not after: Sun 09 Mar 2036 08:57:59 +0000
asID: 211407
IP address blocks: 41.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 08:57:59 2026 GMT
Not After : Mar 9 08:57:59 2036 GMT
Subject: CN=69ae8b9c-6d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:ef:15:8e:60:93:7f:e3:11:5e:fc:00:4c:
4b:1d:4b:7e:3f:42:1e:74:9a:c4:ca:77:31:8a:97:
1b:b0:46:4d:95:c5:c9:51:02:2b:2c:1b:8a:16:48:
ed:c8:3f:2d:c0:4b:16:03:a6:e3:a7:10:f6:21:0e:
c5:24:87:f0:41:18:19:55:e4:e4:0d:d0:40:4e:dd:
14:0f:19:99:c5:24:d1:9b:f2:22:fc:da:04:88:4d:
48:a7:de:a4:81:2c:f6:d1:85:1b:3c:95:1c:48:fa:
72:00:c9:9a:4d:14:4d:b4:b5:00:20:7c:52:74:e5:
9c:3e:c0:3a:c9:cb:ef:3d:1d:86:e8:38:d7:8d:fa:
96:09:33:92:ad:4b:2f:47:e7:79:a6:2a:cd:2c:98:
aa:13:cf:e5:27:7d:60:7c:ea:c5:e8:2b:2e:6d:50:
c2:c9:81:fa:82:dc:73:e8:2d:ac:3c:4a:43:e9:8c:
f5:95:94:4a:1c:08:09:4c:17:f9:d5:a6:33:d8:22:
0f:1a:ba:07:25:67:ea:0b:e6:64:75:7b:ec:d8:57:
6a:ac:c5:bf:5b:45:f9:68:a4:14:1f:81:8e:90:94:
32:d0:63:e4:03:0a:5f:4b:27:4c:c7:95:34:b1:37:
bd:bd:8b:1f:4b:90:89:4d:fa:f5:62:f5:b6:47:ff:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:19:B6:A9:57:70:F0:E5:69:85:6B:73:41:FB:AE:14:4D:08:7E
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/14DDB8741B9611F1AEDEF299DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ca:16:89:88:90:4e:16:71:2b:d3:bc:5c:06:14:37:f3:d4:
bc:ee:68:42:51:60:19:79:0a:e5:79:ef:79:0b:e9:a6:a4:39:
c3:d3:e5:ed:52:e5:00:7b:e7:7b:cf:cd:c6:f2:8c:9a:64:6b:
09:3a:16:b2:7e:c6:1e:a5:87:3e:43:a5:08:ab:6c:43:23:c2:
a7:97:1d:ef:1b:b6:20:c5:ff:ec:b2:54:88:3d:0a:d0:4e:c3:
e6:8a:bc:21:78:6f:bc:23:06:47:2f:ee:71:dc:d5:f9:90:e3:
3d:fe:1d:a3:37:7f:a7:48:ed:20:65:e3:02:10:79:c5:b6:9b:
43:15:cc:3b:85:4d:c6:d8:f1:aa:8a:20:de:49:d9:4a:03:ae:
6c:fc:c5:33:36:54:da:21:ba:27:6b:f0:62:48:c3:1c:d6:e8:
b4:79:fb:8c:1f:14:f9:eb:8a:31:5e:1c:79:26:77:2c:51:27:
94:04:5c:1a:ba:58:d3:be:a2:3c:b0:49:a5:f4:f8:99:13:05:
b7:34:b7:9c:7e:24:4f:9a:d5:2e:1a:1e:fe:a7:7b:f3:e1:9b:
4a:e9:b8:56:78:86:59:cd:09:15:f6:6e:38:a8:b6:33:34:19:
7f:18:44:2e:11:a4:be:d1:6e:77:c7:53:e1:60:c3:1f:b3:ce:
27:3f:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:13:21 2026 by rpki-client