Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/358C3F1A5DE411F1BB2F0DD6CE1D38B0.roa
File: 358C3F1A5DE411F1BB2F0DD6CE1D38B0.roa (raw, json)
Hash identifier: HiXxXfq8y3MSa+ebFIcxUHo9G0Yk8MPlrY+KbF+ox9w=
Subject key identifier: 1D:E9:C6:2A:67:13:B0:5D:E6:C7:AC:FF:E6:F7:67:47:1A:8A:BB:59
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 01D2
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/358C3F1A5DE411F1BB2F0DD6CE1D38B0.roa
Signing time: Mon 01 Jun 2026 18:03:36 +0000
ROA not before: Mon 01 Jun 2026 18:03:32 +0000
ROA not after: Sun 01 Jun 2036 18:03:32 +0000
asID: 22351
IP address blocks: 41.194.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 04:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF, serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Validity
Not Before: Jun 1 18:03:32 2026 GMT
Not After : Jun 1 18:03:32 2036 GMT
Subject: CN=6a1dc978-e3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:68:c2:e4:d3:a7:05:e1:e4:cb:c6:76:29:
89:60:5e:05:35:6d:a0:d5:19:85:94:71:ce:4c:7d:
75:24:f0:ef:5b:78:ae:ce:82:81:5e:ce:80:64:5c:
f3:ea:88:f9:76:a6:23:bd:d8:5e:36:07:04:c0:aa:
fc:45:05:77:9c:00:bb:49:e4:6c:5d:09:b7:81:21:
01:de:f0:af:f9:46:c3:f3:d0:c9:c6:7d:c7:7b:bc:
91:4b:5d:db:e3:41:bb:9f:be:3c:d0:d7:e8:d1:ad:
a5:2b:a5:19:20:4b:77:7d:27:c0:b1:07:b9:5a:f1:
40:b9:73:65:65:58:6a:a5:76:58:53:ea:e7:f0:0e:
d9:47:e1:9b:20:7e:ef:f2:a9:5c:4d:2b:5e:5c:8b:
76:9b:8f:25:e5:fa:a2:7f:41:ac:cd:6f:4f:2f:a4:
55:72:f3:c8:b3:46:a6:cc:4a:56:09:58:ee:73:74:
3e:cf:71:ce:31:c9:e2:f8:d8:c5:86:0c:81:52:3e:
01:f2:41:7d:58:b0:67:61:af:38:55:2c:0a:0c:96:
ab:f0:8c:25:1a:8c:e4:18:91:2f:13:02:c4:2b:77:
da:bd:ac:ef:d0:18:4d:e0:79:09:41:7b:4c:a6:4f:
8b:ad:d6:32:fc:02:25:5d:9f:cc:6e:b4:18:81:5b:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:C6:2A:67:13:B0:5D:E6:C7:AC:FF:E6:F7:67:47:1A:8A:BB:59
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/358C3F1A5DE411F1BB2F0DD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.194.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:49:f0:69:c8:93:c8:fa:93:c5:b3:3a:64:f5:93:ad:3c:1d:
36:36:a4:03:b9:47:fe:01:f4:7c:5a:88:86:be:22:10:03:07:
e1:f1:d5:b3:96:9d:51:af:3f:d1:51:d4:bd:e7:d8:e1:50:83:
38:01:f6:b2:ac:77:67:74:fa:d3:7a:d6:58:ad:7d:d0:71:19:
1a:d2:59:eb:42:78:cc:8c:f4:d9:c7:4b:98:ec:21:90:63:91:
45:07:57:bb:03:dd:f1:e8:1e:45:20:9d:4e:09:79:74:fb:ee:
aa:ee:b3:47:29:0a:48:fd:59:a0:6d:6d:70:78:fd:e3:38:9c:
33:5e:88:db:1a:b4:6f:ce:6d:29:03:43:75:31:a8:1a:e1:40:
c5:fd:10:74:49:a3:a6:56:59:c6:48:e7:80:75:ff:a9:8a:1e:
e5:f8:7c:38:35:67:11:05:40:98:de:79:5a:bb:a9:f2:f2:28:
79:9c:a6:15:02:3d:c5:2f:6f:f8:8e:37:00:07:80:75:e6:27:
de:e8:93:38:36:1a:91:24:c5:26:53:1e:6f:bd:d9:0e:b2:7b:
0e:04:c6:52:91:64:6f:d5:b5:f7:88:c1:88:32:34:30:51:b9:
3e:6c:9b:ac:4c:c9:78:1d:3a:2a:cf:75:a8:c7:81:28:ad:39:
c8:b8:59:c5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhCMDNBRjExMC8GA1UEBRMoQzBFNjBEODI4ODE4QTBDMTVFRkYzQTEyMDQ5RTY1
NzU1OTdFRDlBQjAeFw0yNjA2MDExODAzMzJaFw0zNjA2MDExODAzMzJaMBgxFjAU
BgNVBAMTDTZhMWRjOTc4LWUzYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxyWjC5NOnBeHky8Z2KYlgXgU1baDVGYWUcc5MfXUk8O9beK7OgoFezoBk
XPPqiPl2piO92F42BwTAqvxFBXecALtJ5GxdCbeBIQHe8K/5RsPz0MnGfcd7vJFL
XdvjQbufvjzQ1+jRraUrpRkgS3d9J8CxB7la8UC5c2VlWGqldlhT6ufwDtlH4Zsg
fu/yqVxNK15ci3abjyXl+qJ/QazNb08vpFVy88izRqbMSlYJWO5zdD7Pcc4xyeL4
2MWGDIFSPgHyQX1YsGdhrzhVLAoMlqvwjCUajOQYkS8TAsQrd9q9rO/QGE3geQlB
e0ymT4ut1jL8AiVdn8xutBiBWygZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHenG
KmcTsF3mx6z/5vdnRxqKu1kwHwYDVR0jBBgwFoAUwOYNgogYoMFe/zoSBJ5ldVl+
2aswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4QjAzLzZGOTM0M0IyMDExNDExRjBCQjE3RkM1Nzc2MkU5NTFBL3dPWU5n
b2dZb01GZV96b1NCSjVsZFZsLTJhcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dPWU5nb2dZb01GZV96b1NCSjVsZFZsLTJhcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY4QjAzLzZGOTM0M0IyMDExNDExRjBCQjE3RkM1Nzc2
MkU5NTFBLzM1OEMzRjFBNURFNDExRjFCQjJGMERENkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApwo0wDQYJKoZIhvcNAQEL
BQADggEBAJ9J8GnIk8j6k8WzOmT1k608HTY2pAO5R/4B9HxaiIa+IhADB+Hx1bOW
nVGvP9FR1L3n2OFQgzgB9rKsd2d0+tN61litfdBxGRrSWetCeMyM9NnHS5jsIZBj
kUUHV7sD3fHoHkUgnU4JeXT77qrus0cpCkj9WaBtbXB4/eM4nDNeiNsatG/ObSkD
Q3UxqBrhQMX9EHRJo6ZWWcZI54B1/6mKHuX4fDg1ZxEFQJjeeVq7qfLyKHmcphUC
PcUvb/iONwAHgHXmJ97okzg2GpEkxSZTHm+92Q6yew4ExlKRZG/VtfeIwYgyNDBR
uT5sm6xMyXgdOirPdajHgSitOci4WcU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:27:52 2026 by rpki-client