Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/20E1A3021B9511F1AC4F3394DAE4EC9C.roa
File: 20E1A3021B9511F1AC4F3394DAE4EC9C.roa (raw, json)
Hash identifier: 9NW30Qu2gXnwd3q63LPoYGNqe8vJ4uiODjI440PZlho=
Subject key identifier: AC:2C:93:1B:85:B6:E4:CD:27:EC:E4:79:B6:68:32:E4:55:A5:EE:D3
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07CF
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/20E1A3021B9511F1AC4F3394DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:51:14 +0000
ROA not before: Mon 09 Mar 2026 08:51:09 +0000
ROA not after: Sun 09 Mar 2036 08:51:09 +0000
asID: 212738
IP address blocks: 41.216.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 08:51:09 2026 GMT
Not After : Mar 9 08:51:09 2036 GMT
Subject: CN=69ae8a02-cdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:6e:b3:1d:3d:97:83:2b:be:4f:2d:f0:52:
c4:14:5d:7d:98:13:e1:9e:01:53:34:b5:06:58:82:
90:bc:f1:67:b0:c9:e6:bd:3a:16:36:0e:1d:03:61:
f9:5a:20:41:3e:27:6d:4c:23:c3:f9:ed:35:3c:ee:
ac:5d:9c:72:5c:f6:c6:cb:88:da:66:4f:9e:0d:41:
db:f7:c1:f2:aa:6a:de:77:3b:c8:5d:44:b9:e9:1c:
bd:a5:91:94:0b:01:13:35:86:1a:90:d2:7a:91:27:
05:a9:b2:ae:65:55:16:a9:83:f2:63:42:d0:83:20:
9b:b3:1c:96:04:85:aa:a5:92:26:ae:0f:00:20:7f:
84:ef:80:9a:f6:4c:27:56:b6:ef:5a:57:4d:de:5b:
88:41:27:55:b5:da:b7:f7:7f:da:a7:47:15:dd:32:
e2:84:b1:46:a8:e4:04:81:9d:1e:41:62:a8:1d:fa:
99:b2:3c:88:88:95:db:cc:8a:58:ac:b8:26:37:ca:
16:b2:bf:76:2b:09:00:5b:0b:ea:30:f1:49:74:b0:
e8:ed:3a:32:d6:4b:9c:d6:00:2a:73:a4:43:72:c0:
85:cc:6e:5c:e3:5d:94:e8:39:d0:b6:09:bd:e8:73:
9c:6e:18:72:ed:4c:3b:8c:e5:21:53:99:4b:c4:98:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:93:1B:85:B6:E4:CD:27:EC:E4:79:B6:68:32:E4:55:A5:EE:D3
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/20E1A3021B9511F1AC4F3394DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.176.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3f:1e:9d:af:d6:67:63:cb:4c:3d:e6:17:bb:d9:5d:d1:bc:
a4:32:fe:eb:04:90:bc:8a:c3:ba:cb:93:ca:01:04:3e:af:83:
8f:4f:4c:e2:d2:b0:f6:4d:47:39:de:70:a4:46:70:df:62:ac:
38:fe:b0:fa:7a:f8:67:6d:3d:dd:9c:1b:83:af:ef:61:81:de:
a6:89:a5:bd:e7:2f:a3:1c:da:91:61:fd:33:2e:90:0a:12:97:
f7:29:85:ea:4b:22:be:91:ce:f9:dc:e0:20:f0:00:93:9a:7f:
e3:cb:18:05:14:14:2a:fa:1f:23:76:e6:a8:8b:31:18:f5:52:
cf:ae:b8:a0:d4:c6:09:fc:ba:9a:3b:a6:b1:70:ff:7f:94:f8:
41:4f:9a:a6:59:22:a2:a1:eb:f9:8d:67:18:54:96:53:30:da:
34:64:d8:79:51:c2:19:d2:6a:1e:7d:61:4d:0c:07:5d:b3:c2:
67:33:8c:2d:ec:eb:7f:db:f1:02:e2:c5:82:73:43:aa:d5:61:
e9:d3:e2:5d:eb:3e:62:87:af:58:d1:3a:6c:99:44:97:c3:59:
e5:7a:e7:94:fb:80:43:cd:48:12:ad:5f:49:b1:ce:3b:0f:c0:
54:8d:19:ae:e0:ea:e6:39:fe:71:7f:28:56:40:5c:53:d3:af:
55:32:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:14 2026 by rpki-client