Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8FA8B8661B9511F197EF0596DAE4EC9C.roa
File: 8FA8B8661B9511F197EF0596DAE4EC9C.roa (raw, json)
Hash identifier: UCEd1H1cKMGw7dWRsynqiMGNaXBFFg/1Xx9djVpxQ7Y=
Subject key identifier: 6C:95:14:4E:F5:AA:D0:E5:08:1C:F5:36:BE:1F:37:B0:BF:14:17:06
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07D1
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8FA8B8661B9511F197EF0596DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:54:20 +0000
ROA not before: Mon 09 Mar 2026 08:54:16 +0000
ROA not after: Sun 09 Mar 2036 08:54:16 +0000
asID: 59895
IP address blocks: 41.216.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 08:54:16 2026 GMT
Not After : Mar 9 08:54:16 2036 GMT
Subject: CN=69ae8abc-eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:b1:f2:54:2a:a8:02:c8:a5:ad:53:08:39:
a8:1c:09:33:4f:0c:7b:34:f9:86:01:af:4a:a4:b3:
57:5b:09:71:ef:a8:c8:92:15:0f:26:36:e3:24:f8:
e0:7c:38:11:b2:80:a4:28:b2:6b:e9:fd:01:a8:78:
c3:81:42:77:39:32:62:e0:db:f2:f4:32:c4:a6:77:
c9:45:06:79:15:b4:54:23:ab:5f:88:04:0b:03:80:
1e:19:c7:ef:c9:e6:b5:fd:bc:73:67:90:30:5e:12:
dd:30:e4:4a:99:ca:58:39:dd:8b:34:7d:5e:b6:03:
72:73:f7:70:ad:ea:d8:4c:7f:b3:57:cb:f0:38:d2:
17:96:3d:7a:98:fa:e3:4d:32:5a:53:b2:d8:02:17:
3b:b8:cb:e0:04:2b:57:e2:f7:5d:59:b8:cc:46:58:
e0:dd:6c:55:fd:89:1a:2a:80:f0:10:15:66:eb:ec:
a0:81:99:9b:65:3b:ab:c2:24:92:b8:c2:c5:61:0e:
5a:ed:ba:32:66:bc:86:a3:c5:18:d0:00:b7:21:83:
fe:c4:e7:46:ee:d0:20:fe:a6:b7:38:97:91:9d:d4:
a2:57:ca:4b:52:6c:b9:20:6a:bf:fe:f6:78:e8:2e:
f1:9f:2f:9f:26:1e:51:35:e1:7f:50:e1:9f:be:75:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:14:4E:F5:AA:D0:E5:08:1C:F5:36:BE:1F:37:B0:BF:14:17:06
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8FA8B8661B9511F197EF0596DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.179.0/24
Signature Algorithm: sha256WithRSAEncryption
32:84:f6:b4:99:aa:37:f1:f3:f4:0c:99:3c:d7:d7:6b:b3:96:
d1:4f:b4:21:97:28:43:41:7e:e3:e4:22:54:bd:7e:ec:08:9e:
14:29:1b:06:96:c8:e4:b6:0c:25:00:db:4f:5a:7b:29:68:28:
a6:9e:6f:4f:a0:2a:74:22:d7:5e:97:44:46:28:ac:89:a0:db:
be:ed:64:e0:bf:01:0b:71:72:6d:21:c2:37:c5:7e:22:4e:17:
4e:ca:7f:5e:be:1a:ab:f2:bc:11:be:b7:87:01:18:84:df:b6:
2d:5c:cf:85:68:3e:59:75:c4:aa:de:1f:18:94:87:81:3d:17:
6d:eb:c4:e5:b4:bf:9d:54:bb:74:28:55:e8:26:ee:b4:42:f1:
2f:73:14:ee:99:7a:7e:6b:4f:ce:10:3b:b0:f2:88:f8:30:e6:
80:69:38:14:ee:05:74:4b:1a:20:49:dc:a1:cd:bc:5f:38:73:
66:d6:5b:7a:d0:51:8a:96:4e:07:b0:0b:a4:e7:79:c0:da:8c:
e6:fd:6b:01:f8:94:05:e6:5a:aa:12:62:d0:7b:a1:6d:2e:31:
e7:e6:8c:76:a2:f7:ca:de:10:74:45:df:34:0d:6f:5a:3f:eb:
d7:75:66:06:a1:a8:c4:1d:25:38:19:12:4a:92:d1:b4:db:21:
b1:e4:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:08 2026 by rpki-client