Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/24D9C1DE358E11F1A3BCE602CF1D38B0.roa
File: 24D9C1DE358E11F1A3BCE602CF1D38B0.roa (raw, json)
Hash identifier: XOKeHt6x+Oc85Cb6mCtnzqoPD1de34Ozs1pzdMu2hMc=
Subject key identifier: 3C:8C:A9:1B:FB:46:B8:67:B4:1D:86:7F:A7:19:55:98:BC:3D:2F:6E
Certificate issuer: /CN=F363918AAF/serialNumber=89ED5F93C61C39C658863F374CBA24D13BC388C8
Certificate serial: 06E7
Authority key identifier: 89:ED:5F:93:C6:1C:39:C6:58:86:3F:37:4C:BA:24:D1:3B:C3:88:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ie1fk8YcOcZYhj83TLok0TvDiMg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/24D9C1DE358E11F1A3BCE602CF1D38B0.roa
Signing time: Sat 11 Apr 2026 10:06:45 +0000
ROA not before: Sat 11 Apr 2026 10:06:40 +0000
ROA not after: Fri 31 Dec 2049 10:06:40 +0000
asID: 36907
IP address blocks: 41.63.160.0/19 maxlen: 24
41.205.32.0/19 maxlen: 24
41.222.248.0/21 maxlen: 24
154.71.128.0/17 maxlen: 24
154.127.128.0/17 maxlen: 24
196.202.252.0/22 maxlen: 24
197.148.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.crl
rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.mft
rsync://rpki.afrinic.net/repository/afrinic/ie1fk8YcOcZYhj83TLok0TvDiMg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 02:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363918AAF, serialNumber=89ED5F93C61C39C658863F374CBA24D13BC388C8
Validity
Not Before: Apr 11 10:06:40 2026 GMT
Not After : Dec 31 10:06:40 2049 GMT
Subject: CN=69da1d35-b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:1e:36:c8:53:94:f2:cb:9a:42:ad:99:0b:
4a:6b:d6:52:74:52:fa:b4:6b:ee:29:03:fe:ba:3d:
4b:94:3e:32:1f:00:d8:13:cf:1c:00:8f:dc:ee:3f:
81:e2:cc:f2:20:d3:30:53:25:0f:fa:a5:27:d5:32:
ee:73:e7:06:69:95:1b:97:43:34:e4:1e:a8:aa:69:
48:54:de:7b:3e:7f:8e:d9:d8:27:51:68:c6:38:97:
d5:4b:8f:8a:a7:df:f7:ad:e3:04:cf:a5:9f:c3:54:
b0:46:11:3c:00:3f:11:e3:48:e2:bf:b9:0f:a2:69:
89:88:81:4b:2c:04:04:64:8d:1c:91:2b:04:42:d4:
4b:85:84:fa:c7:8d:a4:2c:50:af:35:04:61:4c:56:
3b:d6:a9:87:7b:32:d1:d6:bc:c8:fc:a0:59:82:ff:
65:00:1f:5c:f7:fd:54:cb:e5:bb:bd:51:7a:cd:b6:
76:0d:9d:40:50:bf:a1:61:f3:80:b9:44:8f:ae:d9:
b3:b8:2d:b3:df:50:1e:03:0b:33:f4:20:02:46:3c:
3a:44:c7:91:29:45:04:8f:1e:39:47:02:8e:32:d0:
8c:06:c4:5b:8f:48:53:77:01:3d:9a:98:76:11:4f:
50:fa:a5:3f:60:4a:de:3f:26:0b:c8:f8:92:fb:77:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:A9:1B:FB:46:B8:67:B4:1D:86:7F:A7:19:55:98:BC:3D:2F:6E
X509v3 Authority Key Identifier:
keyid:89:ED:5F:93:C6:1C:39:C6:58:86:3F:37:4C:BA:24:D1:3B:C3:88:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/ie1fk8YcOcZYhj83TLok0TvDiMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ie1fk8YcOcZYhj83TLok0TvDiMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363918A/85C87532F69E11EBB2F9C378D8A014CE/24D9C1DE358E11F1A3BCE602CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.63.160.0/19
41.205.32.0/19
41.222.248.0/21
154.71.128.0/17
154.127.128.0/17
196.202.252.0/22
197.148.0.0/18
Signature Algorithm: sha256WithRSAEncryption
23:0d:89:23:ba:72:5d:3d:8a:b1:73:9a:b0:36:97:3a:4e:87:
2c:f5:40:5d:1e:04:4b:a4:89:de:c0:ab:e7:0d:44:c1:96:a7:
71:02:71:25:3e:4d:c1:c0:50:24:10:dd:b5:0e:cf:c5:dc:ae:
7b:30:c6:da:22:a7:c9:cd:e3:22:0f:9b:ec:cf:5a:fb:fd:9c:
de:70:49:5e:95:c8:c0:15:06:9e:22:1b:af:39:98:0b:c5:92:
c8:c6:e1:99:31:a0:84:20:a4:c2:86:04:eb:b0:f4:40:52:b0:
75:8e:3e:d6:84:8d:06:ce:d5:e4:99:a1:c7:27:9e:47:6d:08:
50:0c:18:eb:cb:9c:37:df:73:f4:d1:b4:f4:59:0f:9e:91:e2:
fe:f1:57:66:47:8f:fb:9c:df:f0:02:90:13:f7:1e:c4:51:e4:
e1:13:3d:86:d7:72:a5:e9:3e:57:3d:2c:d5:92:c4:f4:4a:53:
a5:03:e5:ca:74:e9:b3:01:2b:56:c0:a7:85:5d:88:48:5e:a3:
71:be:bb:bb:71:2e:3a:d8:ec:72:34:f9:ff:be:34:ea:8e:8d:
70:3a:07:7d:dd:82:f1:28:8d:37:fa:1b:70:fe:9a:c3:8f:16:
90:94:1d:f7:f7:a8:b8:60:09:75:0d:e1:77:79:b1:da:ea:93:
e1:04:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:12 2026 by rpki-client