Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/D7DF9ABA27AB11F1AF1B6392DAE4EC9C.roa
File: D7DF9ABA27AB11F1AF1B6392DAE4EC9C.roa (raw, json)
Hash identifier: Oe+fyY7RgNdu3EBjmOnELMAeT+48fK5pPdI6UjR4QWg=
Subject key identifier: 03:E6:90:55:B9:FF:A1:E9:00:D6:BC:1E:BB:E0:5C:BF:C7:C8:2A:7D
Certificate issuer: /CN=F36DDABEAF/serialNumber=1E43F675C5655A48B5C1F2D1253B65BFC245BBB7
Certificate serial: 1C
Authority key identifier: 1E:43:F6:75:C5:65:5A:48:B5:C1:F2:D1:25:3B:65:BF:C2:45:BB:B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HkP2dcVlWki1wfLRJTtlv8JFu7c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/D7DF9ABA27AB11F1AF1B6392DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 18:04:04 +0000
ROA not before: Tue 24 Mar 2026 18:03:59 +0000
ROA not after: Thu 23 Mar 2028 18:03:59 +0000
asID: 33763
IP address blocks: 102.213.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/HkP2dcVlWki1wfLRJTtlv8JFu7c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/HkP2dcVlWki1wfLRJTtlv8JFu7c.mft
rsync://rpki.afrinic.net/repository/afrinic/HkP2dcVlWki1wfLRJTtlv8JFu7c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DDABEAF, serialNumber=1E43F675C5655A48B5C1F2D1253B65BFC245BBB7
Validity
Not Before: Mar 24 18:03:59 2026 GMT
Not After : Mar 23 18:03:59 2028 GMT
Subject: CN=69c2d214-8c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:62:12:91:6e:4c:c1:e9:5d:8c:54:b2:f7:
20:ab:c3:3e:f8:95:28:1c:24:d7:3e:69:34:2a:f3:
0f:28:9c:24:0b:ec:08:8b:d1:1c:bf:75:cb:1e:4e:
ae:fb:f1:88:97:1c:9e:2a:b3:67:e7:d3:19:bb:9a:
21:69:bb:44:89:ae:0b:3e:13:27:24:4f:ee:32:18:
7e:93:a1:22:1e:4f:40:28:f5:03:8d:6a:7c:be:93:
1d:ca:e1:ec:b1:48:89:2e:36:6b:f6:f1:f7:e4:f7:
f1:94:20:73:75:ce:86:63:be:ff:02:7b:bd:f4:48:
15:5e:eb:db:61:91:32:14:fa:cc:ef:d4:5a:3e:d4:
f2:4d:c9:51:67:b5:25:01:eb:72:f5:31:c4:d5:39:
63:0a:88:11:43:f1:70:77:27:ad:85:a3:34:6c:d4:
21:26:cb:f3:02:0b:e7:d8:64:58:0e:97:46:19:aa:
1c:87:38:e7:15:04:d4:bb:b1:2c:23:f1:1b:c9:7f:
26:78:b8:cb:00:69:78:22:10:01:4e:18:47:32:0e:
6c:4f:ff:f8:a4:d1:78:df:70:d2:8e:cb:04:64:a5:
9b:f5:74:53:dc:6b:02:df:46:00:db:a0:d7:13:8c:
95:d5:1c:8f:24:81:c7:03:9b:16:84:a3:b3:a8:5d:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E6:90:55:B9:FF:A1:E9:00:D6:BC:1E:BB:E0:5C:BF:C7:C8:2A:7D
X509v3 Authority Key Identifier:
keyid:1E:43:F6:75:C5:65:5A:48:B5:C1:F2:D1:25:3B:65:BF:C2:45:BB:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/HkP2dcVlWki1wfLRJTtlv8JFu7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HkP2dcVlWki1wfLRJTtlv8JFu7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DDABE/5FBEE6C41EE311F198302CE2DAE4EC9C/D7DF9ABA27AB11F1AF1B6392DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.184.0/22
Signature Algorithm: sha256WithRSAEncryption
64:5f:23:ff:c1:42:fb:97:c8:e2:fa:7b:86:94:cd:c8:71:34:
e1:e2:c1:f5:70:1b:12:c6:7e:62:d0:cf:ea:16:0b:58:8c:1d:
66:74:69:e5:dc:48:0b:41:78:ff:52:f3:95:fc:15:15:b7:78:
67:f0:e8:f4:c7:ba:f9:82:61:80:2a:ef:63:ac:b4:6c:83:1e:
80:60:16:0e:d5:b4:6e:f6:6f:15:a9:ea:7b:31:a5:13:ea:90:
bd:fc:04:24:4d:56:9a:fd:07:6b:f5:b7:f2:07:e2:b6:5c:44:
47:e8:40:3e:fc:8f:03:10:d7:92:62:4b:ee:8f:7f:d9:04:ab:
c3:f3:1f:fa:ed:2a:32:f9:64:38:b2:c3:08:16:b5:30:51:35:
cd:59:8c:64:3c:89:6c:62:c5:9a:71:f2:58:97:90:6f:7b:fb:
41:30:17:12:a1:cb:9b:63:87:4a:d2:42:80:05:57:6f:be:3c:
7b:8e:ad:7b:43:29:fd:06:2a:39:3d:b9:45:05:85:ca:68:7a:
f0:df:cd:31:58:e4:37:57:0e:0f:98:cd:9e:5e:39:8c:63:89:
bf:c9:9f:b6:d9:ce:01:b2:64:aa:f7:85:87:8a:26:1a:61:a4:
72:f2:a3:df:9c:92:85:91:65:c1:98:21:81:36:5d:61:19:78:
04:f7:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:28 2026 by rpki-client