Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/DDBA7F2C1BC611F19C09EFB1DAE4EC9C.roa
File: DDBA7F2C1BC611F19C09EFB1DAE4EC9C.roa (raw, json)
Hash identifier: bNRaSWgOzlSa4jhwe0JSxzZ03T3mND2JhbULWjzOEOY=
Subject key identifier: DC:06:ED:47:85:2A:3D:D1:AF:CD:25:90:FA:01:F5:B8:EA:E8:1B:24
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 0727
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/DDBA7F2C1BC611F19C09EFB1DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 14:47:16 +0000
ROA not before: Mon 09 Mar 2026 14:47:12 +0000
ROA not after: Sun 09 Mar 2036 14:47:12 +0000
asID: 327901
IP address blocks: 102.222.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Mar 9 14:47:12 2026 GMT
Not After : Mar 9 14:47:12 2036 GMT
Subject: CN=69aedd74-c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:7d:73:d7:76:a3:0c:f5:63:3d:cc:a6:01:
e5:f7:01:a8:f1:1a:a1:b1:e5:59:c7:78:68:d7:c1:
ca:a9:19:a8:08:16:fe:60:c1:5a:d2:3f:34:ad:e0:
b2:7b:2b:33:f7:bb:fc:ca:fa:db:62:61:97:8c:00:
ab:27:cd:aa:2a:09:e6:c5:f3:0e:f4:d4:2d:d9:80:
0b:87:d6:ba:3d:9b:34:46:3e:12:9e:c1:94:f5:5a:
a5:58:15:6b:1d:6d:44:b4:d3:5d:17:8f:44:14:6c:
a2:9e:cf:01:de:74:b3:19:6b:c7:d6:77:2e:0e:90:
cf:c3:c7:97:79:bf:87:4c:67:71:57:81:63:12:97:
47:f8:41:c1:3d:ee:f8:3a:a0:be:ba:e9:4f:37:1f:
c0:c6:11:f3:f1:d8:1c:09:f8:f8:c3:c8:b6:1b:bd:
2a:27:4a:4b:d3:c5:37:88:06:08:57:44:75:d0:eb:
fa:f9:be:02:65:97:a0:aa:34:54:a7:2d:c8:0c:f8:
cc:01:54:34:b7:20:c4:f1:fc:ad:3c:ac:50:2b:3e:
38:f6:1e:d2:f2:ca:17:ff:ab:50:91:0b:49:f6:f3:
4a:ea:6d:d7:3b:98:64:bc:12:f5:5e:55:08:d7:e0:
7f:14:ea:80:51:3b:5a:6e:6e:84:88:95:ec:0f:71:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:ED:47:85:2A:3D:D1:AF:CD:25:90:FA:01:F5:B8:EA:E8:1B:24
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/DDBA7F2C1BC611F19C09EFB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.222.168.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:14:2a:19:97:51:da:a0:a9:f9:e9:17:bb:8b:f9:3d:a2:ec:
b1:31:c8:0b:85:3a:da:48:20:87:bc:cb:a8:2a:af:6d:00:2e:
a3:80:9a:b8:17:56:de:be:1b:3c:6a:04:14:c8:2b:05:75:6b:
95:ad:d6:64:2f:4c:db:a0:23:4b:d8:bf:54:28:0c:ab:39:95:
0b:67:57:f1:db:77:93:cc:5f:fa:00:9a:0f:e3:9f:1e:0e:50:
dc:5e:20:ec:f0:e1:c0:02:e2:00:b9:a8:9f:39:3a:b6:c3:9b:
68:a7:76:80:2e:83:45:6b:7f:4d:76:d0:87:4f:da:8a:16:08:
24:f5:40:21:c3:4b:aa:d8:d3:3e:e1:ec:a8:4b:d2:8b:5e:dc:
e8:9b:a6:c5:85:78:84:d3:ba:df:d5:63:f8:d5:5c:40:d7:f7:
af:e8:13:30:6e:e6:ed:91:b2:8f:6c:65:b7:5c:c5:6f:27:93:
e3:a4:ef:bf:70:ed:f3:65:94:95:fd:5b:2e:88:d0:ac:ed:25:
ae:6a:16:68:32:ca:88:07:79:a3:01:dd:e7:5c:a1:fd:35:c3:
56:fd:55:a0:1d:c8:65:cf:a5:9e:ee:74:42:e1:fc:28:ac:b4:
bf:b8:ae:8e:6d:55:5d:55:ce:9d:9e:55:74:18:47:94:67:2b:
62:27:0c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:37 2026 by rpki-client