Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/9938B42452A611F1A083D6F1CE1D38B0.roa
File: 9938B42452A611F1A083D6F1CE1D38B0.roa (raw, json)
Hash identifier: a0lXwM6/HyZeCuqShxjjgi5zdBu0nuAUd14gda8F38w=
Subject key identifier: 60:6C:54:B0:40:98:31:6E:94:2D:C1:89:16:7B:EF:41:9A:22:ED:6F
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 0345
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/9938B42452A611F1A083D6F1CE1D38B0.roa
Signing time: Mon 18 May 2026 10:44:52 +0000
ROA not before: Mon 18 May 2026 10:44:47 +0000
ROA not after: Tue 18 May 2027 10:44:47 +0000
asID: 37613
IP address blocks: 169.239.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837 (0x345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: May 18 10:44:47 2026 GMT
Not After : May 18 10:44:47 2027 GMT
Subject: CN=6a0aeda4-8785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:8c:a5:86:85:29:75:a2:96:e5:cb:67:b3:
ba:4f:3a:28:16:57:e0:ef:c0:a3:d0:76:8d:da:ce:
c8:bb:c1:48:58:54:ac:c1:6c:c8:31:bd:57:4d:22:
6a:7f:8e:64:d5:41:ee:1b:a2:f6:f9:5d:ef:9d:34:
ee:0c:1e:59:5a:14:b0:02:bb:90:24:62:1a:07:06:
b3:87:8e:71:cf:6f:3a:ab:8c:9b:36:f2:ec:88:ac:
84:99:d1:12:2f:21:b4:8f:43:06:8f:01:7e:98:00:
52:8b:a9:3f:9a:bb:be:57:3f:15:d9:52:c6:2c:c7:
ac:64:08:17:17:70:e5:de:01:43:8f:ff:40:dc:c0:
38:ed:d1:7f:61:11:ef:47:c2:a3:db:8d:1a:44:1b:
20:cd:a5:63:19:de:f9:0f:b4:da:4b:56:a2:7e:25:
ec:c3:49:45:ba:94:74:c4:a7:dd:43:c5:ca:d9:6e:
8a:f4:e3:16:6d:cd:47:47:fa:d1:3e:b8:00:7e:cb:
84:91:b8:f5:9c:55:27:7b:73:99:60:46:1b:6d:37:
a1:80:69:7e:90:4f:6d:75:2d:91:ee:05:12:81:6a:
ac:e5:8c:8f:d8:a0:3a:81:1c:b3:7e:55:97:c7:66:
de:94:8f:ca:2d:2b:b8:1a:f9:55:c6:6d:41:fa:46:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6C:54:B0:40:98:31:6E:94:2D:C1:89:16:7B:EF:41:9A:22:ED:6F
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/9938B42452A611F1A083D6F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.189.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c7:a2:38:d3:12:60:98:78:1b:32:23:71:71:36:24:12:61:
f3:7e:df:01:00:69:ab:07:bd:00:f8:09:42:fb:f2:4f:59:f2:
9b:c8:e3:59:b0:01:16:2d:f9:8a:6f:96:6a:62:32:a3:d8:dc:
c0:1d:97:0d:b1:e1:40:40:78:87:19:61:8f:05:cf:b9:ce:53:
08:f7:66:67:35:b8:06:29:ce:9a:cc:71:6e:03:dc:ea:c4:79:
29:3a:8c:a6:b6:f7:c4:bf:e0:31:3f:1f:43:2c:61:fc:d5:e3:
77:60:97:5f:5c:69:c1:91:8f:2b:83:fb:e6:fd:4d:ac:39:18:
4d:47:72:1c:4c:c7:15:4f:8e:a3:70:66:77:33:ba:92:39:db:
8a:b2:22:5c:49:6e:0e:0d:4f:78:cf:3e:18:2f:58:64:37:71:
5a:98:96:42:b8:7c:2b:6f:e4:f8:cd:fe:3d:ef:00:21:64:6c:
b4:06:db:68:6e:34:95:e0:b9:34:55:58:a6:78:92:e3:13:f2:
d8:65:09:0e:c7:d5:19:8d:c8:7d:29:af:cd:0d:a7:80:9c:5d:
81:1b:88:c6:35:28:68:1f:20:da:4a:e9:2f:4b:23:12:0a:33:
d3:69:62:b5:54:f0:27:4e:25:22:6f:46:c8:ff:96:65:6d:3a:
b1:e1:9a:33
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM0RTRBUjExMC8GA1UEBRMoMkM2NzFGNDI1OTcwNzAyNzIzNzU0MEJGNjIyNjVB
MkQ5N0VCOTVDQjAeFw0yNjA1MTgxMDQ0NDdaFw0yNzA1MTgxMDQ0NDdaMBgxFjAU
BgNVBAMTDTZhMGFlZGE0LTg3ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0poylhoUpdaKW5ctns7pPOigWV+DvwKPQdo3azsi7wUhYVKzBbMgxvVdN
Imp/jmTVQe4bovb5Xe+dNO4MHllaFLACu5AkYhoHBrOHjnHPbzqrjJs28uyIrISZ
0RIvIbSPQwaPAX6YAFKLqT+au75XPxXZUsYsx6xkCBcXcOXeAUOP/0DcwDjt0X9h
Ee9HwqPbjRpEGyDNpWMZ3vkPtNpLVqJ+JezDSUW6lHTEp91DxcrZbor04xZtzUdH
+tE+uAB+y4SRuPWcVSd7c5lgRhttN6GAaX6QT211LZHuBRKBaqzljI/YoDqBHLN+
VZfHZt6Uj8otK7ga+VXGbUH6Rt4VAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUYGxU
sECYMW6ULcGJFnvvQZoi7W8wHwYDVR0jBBgwFoAULGcfQllwcCcjdUC/YiZaLZfr
lcswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNEU0L0NDOEZDMzZDREEzMDExRUU5RTZDOThBQTc3NTQxMkU2L0xHY2ZR
bGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0xHY2ZRbGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkEzNEU0L0NDOEZDMzZDREEzMDExRUU5RTZDOThBQTc3NTQx
MkU2Lzk5MzhCNDI0NTJBNjExRjFBMDgzRDZGMUNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACp770wDQYJKoZIhvcNAQELBQAD
ggEBAHfHojjTEmCYeBsyI3FxNiQSYfN+3wEAaasHvQD4CUL78k9Z8pvI41mwARYt
+YpvlmpiMqPY3MAdlw2x4UBAeIcZYY8Fz7nOUwj3Zmc1uAYpzprMcW4D3OrEeSk6
jKa298S/4DE/H0MsYfzV43dgl19cacGRjyuD++b9Taw5GE1HchxMxxVPjqNwZncz
upI524qyIlxJbg4NT3jPPhgvWGQ3cVqYlkK4fCtv5PjN/j3vACFkbLQG22huNJXg
uTRVWKZ4kuMT8thlCQ7H1RmNyH0pr80Np4CcXYEbiMY1KGgfINpK6S9LIxIKM9Np
YrVU8CdOJSJvRsj/lmVtOrHhmjM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:30:08 2026 by rpki-client