Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/44E9BD1C291811F1B79C4DE5DAE4EC9C.roa
File: 44E9BD1C291811F1B79C4DE5DAE4EC9C.roa (raw, json)
Hash identifier: TL3Ljpgc4pSzmT+DozUjqPhaXoSaOT1kL5IBW8F0FX4=
Subject key identifier: 6D:71:5A:F3:4C:5E:E6:60:5D:0F:1B:3B:F8:CA:57:DD:48:88:CA:92
Certificate issuer: /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial: 06E3
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Authority info access: rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/44E9BD1C291811F1B79C4DE5DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 13:32:44 +0000
ROA not before: Thu 26 Mar 2026 13:32:38 +0000
ROA not after: Wed 26 Mar 2036 13:32:38 +0000
asID: 37645
IP address blocks: 129.122.128.0/17 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Validity
Not Before: Mar 26 13:32:38 2026 GMT
Not After : Mar 26 13:32:38 2036 GMT
Subject: CN=69c5357c-6907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:9c:75:77:7a:c1:37:e4:b3:bd:35:c8:bf:
ce:34:89:78:08:fd:88:9d:99:a6:b9:a5:2e:87:37:
e2:c7:29:40:b6:50:7f:8e:0a:50:99:e7:7d:b3:e3:
a1:b8:ef:9b:cb:8e:ff:84:d8:23:bd:67:94:df:96:
49:70:d4:b0:0d:ad:56:cf:56:83:53:99:cd:88:1a:
cd:5d:60:fd:d4:74:98:e7:83:ee:d9:14:5c:55:cd:
7b:ef:a6:78:42:ac:5f:13:f3:a1:2e:8c:f5:c7:65:
7d:2a:4d:de:a0:34:5f:0a:57:e3:54:42:81:4c:7b:
a2:87:ef:c7:ff:c1:d9:ef:07:a0:7b:de:a9:a4:e7:
4c:2c:55:18:d2:41:07:5e:b8:be:51:2b:a4:9c:9f:
61:37:48:b8:d6:ed:51:57:8d:86:0c:83:7b:17:54:
c5:a7:aa:7d:25:0d:26:63:57:04:2f:d1:79:5d:06:
65:38:6c:63:b7:a2:98:4f:c8:3b:6a:d1:ee:84:4d:
2e:eb:b2:13:13:70:3c:20:72:b7:75:04:c4:9a:e2:
a0:cf:6f:ed:35:95:e2:d3:1a:d1:0a:a3:22:88:ce:
c0:db:65:e6:69:41:f0:4c:99:35:78:f6:7c:c5:14:
87:03:a5:8c:3b:d1:6b:b8:0c:fd:06:db:a2:a9:8a:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:5A:F3:4C:5E:E6:60:5D:0F:1B:3B:F8:CA:57:DD:48:88:CA:92
X509v3 Authority Key Identifier:
keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/44E9BD1C291811F1B79C4DE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.122.128.0/17
Signature Algorithm: sha256WithRSAEncryption
26:77:ba:ad:09:10:7c:ac:14:3a:0e:7b:8d:3e:73:80:ba:b7:
be:58:15:a8:60:4b:47:d6:33:fc:81:aa:19:b4:22:bd:ca:aa:
f7:59:e6:86:65:4e:fa:ef:fe:4c:ac:93:23:ee:00:d1:33:dc:
e3:54:70:54:56:df:6c:bd:51:b6:3a:a2:f1:84:d9:84:ae:de:
4e:40:d8:b0:cb:53:dd:a6:c2:0b:3b:d9:2c:4d:e6:ed:dc:7d:
f5:bc:54:a0:20:27:14:90:1d:d0:3f:7d:5c:b0:79:3c:01:e5:
69:67:70:65:98:bf:9c:af:2b:10:be:f8:bb:de:7d:5b:20:8d:
86:35:a4:af:69:05:62:bc:a8:a9:26:43:61:10:79:3c:90:74:
a8:65:8f:97:34:28:22:c6:00:66:58:93:b1:c7:75:fd:b8:9c:
6b:43:ad:7f:ab:d2:79:d2:2a:09:fd:94:ba:be:30:fd:2f:3e:
a2:c7:c5:32:8a:90:64:ca:c2:46:ed:72:1a:64:62:6f:de:8c:
09:b1:56:c2:48:c5:88:fb:5f:40:ba:09:f5:ab:b9:29:24:d9:
e5:2f:35:0c:73:91:10:29:06:c4:a7:51:47:18:39:e6:ee:65:
9a:50:8e:c5:ab:26:11:32:b7:f9:22:7d:97:0b:6f:0a:f2:27:
3c:ea:44:e9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBUjExMC8GA1UEBRMoMEUzNTM2REUzNDJGODhDNTVFNEFDOTRDNEI3RUE3
MEEwQzI3RTlBMTAeFw0yNjAzMjYxMzMyMzhaFw0zNjAzMjYxMzMyMzhaMBgxFjAU
BgNVBAMTDTY5YzUzNTdjLTY5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6J5x1d3rBN+SzvTXIv840iXgI/Yidmaa5pS6HN+LHKUC2UH+OClCZ532z
46G475vLjv+E2CO9Z5Tflklw1LANrVbPVoNTmc2IGs1dYP3UdJjng+7ZFFxVzXvv
pnhCrF8T86EujPXHZX0qTd6gNF8KV+NUQoFMe6KH78f/wdnvB6B73qmk50wsVRjS
QQdeuL5RK6Scn2E3SLjW7VFXjYYMg3sXVMWnqn0lDSZjVwQv0XldBmU4bGO3ophP
yDtq0e6ETS7rshMTcDwgcrd1BMSa4qDPb+01leLTGtEKoyKIzsDbZeZpQfBMmTV4
9nzFFIcDpYw70Wu4DP0G26KpihJLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUbXFa
80xe5mBdDxs7+MpX3UiIypIwHwYDVR0jBBgwFoAUDjU23jQviMVeSslMS36nCgwn
6aEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzczRDQyOEZBRjEzODExRUJBNThDQkYxN0Q4QTAxNENFL0RqVTIz
alF2aU1WZVNzbE1TMzZuQ2d3bjZhRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0RqVTIzalF2aU1WZVNzbE1TMzZuQ2d3bjZhRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkExQ0VGLzczRDQyOEZBRjEzODExRUJBNThDQkYxN0Q4QTAx
NENFLzQ0RTlCRDFDMjkxODExRjFCNzlDNERFNURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeBeoAwDQYJKoZIhvcNAQELBQAD
ggEBACZ3uq0JEHysFDoOe40+c4C6t75YFahgS0fWM/yBqhm0Ir3KqvdZ5oZlTvrv
/kyskyPuANEz3ONUcFRW32y9UbY6ovGE2YSu3k5A2LDLU92mwgs72SxN5u3cffW8
VKAgJxSQHdA/fVyweTwB5WlncGWYv5yvKxC++LvefVsgjYY1pK9pBWK8qKkmQ2EQ
eTyQdKhlj5c0KCLGAGZYk7HHdf24nGtDrX+r0nnSKgn9lLq+MP0vPqLHxTKKkGTK
wkbtchpkYm/ejAmxVsJIxYj7X0C6CfWruSkk2eUvNQxzkRApBsSnUUcYOebuZZpQ
jsWrJhEyt/kifZcLbwryJzzqROk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:30 2026 by rpki-client