Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3EFFC5021B9611F1ABDCF899DAE4EC9C.roa
File: 3EFFC5021B9611F1ABDCF899DAE4EC9C.roa (raw, json)
Hash identifier: OEBSOLOtuEEr7LITI1TX1uWnikP4GZ8AEgjDIlq1cvE=
Subject key identifier: 8A:FF:F6:FB:B0:B0:C8:30:01:2F:DB:D1:6B:3F:1D:37:F0:44:92:45
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07D9
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3EFFC5021B9611F1ABDCF899DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:59:15 +0000
ROA not before: Mon 09 Mar 2026 08:59:09 +0000
ROA not after: Sun 09 Mar 2036 08:59:09 +0000
asID: 211138
IP address blocks: 41.216.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009 (0x7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 08:59:09 2026 GMT
Not After : Mar 9 08:59:09 2036 GMT
Subject: CN=69ae8be2-3665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:30:f3:af:da:b1:e9:74:e5:ca:19:50:e4:
29:3c:e6:a1:97:fc:8a:7b:e4:31:0c:43:00:83:3e:
c2:2a:ad:50:14:fc:52:39:e0:65:7e:96:25:b7:cf:
b5:5f:b5:a3:a5:b5:3a:3b:51:e8:e6:44:67:9f:6f:
7b:2f:d8:67:59:6b:28:24:da:2c:65:f6:cd:2a:b6:
1f:6b:be:24:38:b0:ac:ae:2d:c2:f2:3f:2e:7e:e5:
80:1f:b9:94:38:17:f6:ad:65:56:bb:23:bc:2e:4c:
8a:60:98:a3:94:a2:e5:b6:de:32:d9:a7:7a:75:c9:
b6:ec:ca:9c:4c:9c:ef:71:d1:7f:85:06:f0:f9:53:
f4:e5:73:93:7e:7f:03:2e:12:01:2d:3a:be:4d:a9:
73:42:cb:7f:96:a5:4d:93:9e:2d:7c:79:5e:6e:b7:
d7:64:78:e8:be:1f:16:d1:fb:e3:87:0b:e0:95:b4:
21:7c:71:0b:66:58:a4:96:2e:4a:58:9e:68:fd:ec:
09:ae:37:73:a7:7c:ce:25:b7:49:d9:82:e2:5f:48:
b3:e6:3a:27:ca:6c:3d:ef:db:a5:43:8d:1c:b8:0e:
71:cc:67:60:7a:fd:84:e0:21:59:8c:73:01:0f:06:
21:df:13:6e:e1:3b:81:c9:07:1e:23:d2:68:b1:6c:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:F6:FB:B0:B0:C8:30:01:2F:DB:D1:6B:3F:1D:37:F0:44:92:45
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/3EFFC5021B9611F1ABDCF899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.189.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8a:5c:81:45:13:9f:4c:f6:51:08:d2:c1:50:11:e6:1b:1c:
12:c1:c7:3f:56:8b:1c:a2:72:cb:16:13:e9:08:b6:2d:79:6a:
9f:9d:1c:d5:a9:2d:97:ce:4d:c4:a4:f8:b6:d6:61:c0:4b:7b:
45:5a:09:9e:4e:1c:62:06:89:bf:70:9d:bf:ad:d8:f5:89:4a:
83:6a:74:38:f3:dd:95:8c:a4:7c:6b:ad:9c:56:33:6f:e4:d1:
77:ad:87:5f:28:ec:86:05:81:68:bc:72:bd:f2:87:39:0f:d4:
b4:95:d3:30:2c:7d:37:81:d4:f9:60:aa:cf:6d:20:37:4a:a1:
63:9a:41:23:45:e1:5b:35:33:7d:aa:41:9b:3e:de:77:24:4f:
e0:44:7a:00:7b:4d:ec:c7:66:c8:a9:0d:e0:bd:37:7b:08:52:
5b:bd:4c:8b:52:11:16:10:6c:2b:84:c6:98:35:3d:fe:6d:7f:
d0:26:ca:a5:ff:7b:35:a0:b3:d1:0b:ab:13:b4:76:fe:68:b5:
51:51:96:ec:5f:bf:fa:4e:2e:66:08:9b:65:96:81:d0:1e:71:
b8:24:4d:79:1e:69:c2:8d:64:a5:47:b8:6a:8f:24:93:2f:21:
75:14:74:15:da:b5:74:49:be:44:e8:25:2a:a3:35:41:d7:c1:
15:7d:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:58 2026 by rpki-client