Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/BCB893C61B9511F18FE71E98DAE4EC9C.roa
File: BCB893C61B9511F18FE71E98DAE4EC9C.roa (raw, json)
Hash identifier: e6g6QSZqWCOUTf50enQ9hsPyaPaKzz6XLKUdoUxLf+I=
Subject key identifier: F7:68:EB:8D:CB:82:5C:EB:71:DD:36:1A:CD:66:52:21:55:92:B9:E9
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 07D3
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/BCB893C61B9511F18FE71E98DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:55:35 +0000
ROA not before: Mon 09 Mar 2026 08:55:32 +0000
ROA not after: Sun 09 Mar 2036 08:55:32 +0000
asID: 213035
IP address blocks: 41.216.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2003 (0x7d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Mar 9 08:55:32 2026 GMT
Not After : Mar 9 08:55:32 2036 GMT
Subject: CN=69ae8b07-ecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:25:09:33:bd:1a:c5:d9:f7:34:85:0f:a7:
81:9d:72:a9:88:02:66:ff:84:ae:d9:33:f3:06:59:
22:3d:0e:56:51:2b:0e:2b:de:52:6f:ff:c0:97:e5:
fb:46:23:60:f4:db:0a:95:0b:eb:1c:a3:74:a4:41:
43:65:67:40:a8:f3:59:c7:06:f4:8b:05:1f:64:1f:
42:ee:e5:23:e6:7e:f6:cb:4f:4d:e6:47:9d:96:67:
18:39:96:00:56:7a:df:0c:fe:41:b2:3a:2e:ba:17:
70:a0:3b:ac:92:09:b3:fe:7e:ae:d3:50:55:43:ca:
11:5b:4a:a8:b3:35:67:92:42:7c:2a:84:5b:32:e9:
f6:f0:59:a9:8c:66:ec:59:fd:df:38:21:b4:19:1a:
73:a2:58:ac:c3:62:dc:c0:41:f4:00:cc:2a:7f:e6:
2c:db:c9:32:e9:69:46:bc:6d:93:44:07:a1:db:75:
96:f3:62:08:91:97:2b:c8:a5:26:04:2f:d0:4a:32:
18:7c:76:92:34:80:e4:6c:56:92:44:32:72:db:27:
fb:23:b4:9d:92:47:71:46:6c:13:fc:29:47:2d:aa:
b0:98:fc:b4:f6:23:61:a6:16:13:56:79:9f:4f:de:
06:c7:a0:a6:b9:5f:67:12:13:8b:79:71:55:61:a4:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:EB:8D:CB:82:5C:EB:71:DD:36:1A:CD:66:52:21:55:92:B9:E9
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/BCB893C61B9511F18FE71E98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.181.0/24
Signature Algorithm: sha256WithRSAEncryption
69:34:85:05:5a:1f:2c:7d:e0:d8:81:9f:ce:22:a9:97:81:2e:
75:20:4b:70:8f:e6:11:e9:d8:a0:b9:62:37:ca:68:e4:79:43:
d6:95:9c:7b:ae:a7:91:69:6e:00:ca:f0:3f:ca:18:34:aa:0d:
d5:56:5c:7e:12:a7:db:9f:16:f0:d0:9c:25:d5:77:19:40:31:
f6:68:9d:2e:1d:39:45:fd:e8:80:33:6c:72:49:11:7d:38:16:
5a:ff:99:78:df:1d:05:90:99:df:43:bb:55:31:58:b0:b1:45:
f9:ec:c9:9e:58:b0:ad:6c:42:1d:0a:e3:1a:0f:01:9f:84:61:
14:b8:e4:29:bd:61:6a:a8:40:1c:9d:67:91:ec:82:0b:5d:4c:
17:73:59:34:9d:ca:e2:9a:e7:b9:96:13:b9:93:7c:f9:74:a5:
28:70:37:7e:45:55:35:cb:00:5b:cd:fe:5d:91:1a:97:1e:57:
5c:f9:05:e4:49:16:96:0f:9b:dd:89:fa:b9:5c:30:9c:07:28:
80:dc:f8:0f:d6:fe:ec:bc:15:9e:4f:d2:a1:5b:63:5f:af:6b:
7b:f9:b6:7c:3e:d0:77:26:c3:e5:8e:d4:4e:9a:d6:5e:ce:51:
18:2e:a2:b5:b1:8c:74:5b:27:8a:78:7d:28:19:1e:77:1e:58:
8b:3b:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:02:10 2026 by rpki-client