Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/D7D2E2A452A611F19BD02DF2CE1D38B0.roa
File: D7D2E2A452A611F19BD02DF2CE1D38B0.roa (raw, json)
Hash identifier: b+2jKegvzCwZfq+fb5FZqDtq1CY8HBge8hnfwp6Km68=
Subject key identifier: E7:14:87:E3:75:FD:E1:9F:40:36:4C:7F:71:D1:77:AF:CC:72:74:1C
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 0347
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/D7D2E2A452A611F19BD02DF2CE1D38B0.roa
Signing time: Mon 18 May 2026 10:46:37 +0000
ROA not before: Mon 18 May 2026 10:46:32 +0000
ROA not after: Tue 18 May 2027 10:46:32 +0000
asID: 37613
IP address blocks: 169.239.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839 (0x347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: May 18 10:46:32 2026 GMT
Not After : May 18 10:46:32 2027 GMT
Subject: CN=6a0aee0d-db6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:f6:a6:e9:f8:e3:4b:3f:9a:d4:24:3c:ef:
41:67:58:5b:ff:b3:59:fc:45:f3:c0:4d:1a:75:08:
3a:8a:46:d7:72:0d:0b:ad:a2:ec:58:6a:e0:44:9d:
9d:1e:55:30:a0:84:d6:25:4a:fd:4d:5d:02:3d:70:
fc:9e:33:e7:de:3c:c6:cc:9f:06:e1:b1:d0:b4:98:
fa:87:ee:e9:41:8b:cb:d8:a0:71:50:05:23:88:e3:
a5:92:c8:85:b0:e3:61:d7:92:71:e2:88:eb:41:8d:
67:27:e3:4e:d6:5f:96:82:34:4b:a1:ce:e6:8c:26:
b1:7f:1b:0d:60:24:88:a4:4f:a9:d6:10:77:81:48:
b8:55:5e:3e:11:9d:1b:63:04:46:62:ec:f4:e1:3b:
5a:97:e4:13:f2:82:8a:68:fd:79:be:33:0c:c7:cc:
7e:e6:9e:bc:78:e9:02:33:d5:eb:e6:dd:41:4a:d5:
99:b8:c7:4f:33:91:c6:fb:af:75:3c:f7:25:56:cc:
0b:6a:57:4e:93:7c:9d:05:57:ab:9e:9d:e2:e1:c6:
f8:07:13:99:d7:4e:7d:7c:c3:13:b5:10:76:b9:28:
11:af:3f:fd:09:31:d7:2e:5c:30:8e:ac:96:6a:3f:
52:e5:a1:dc:24:ee:2d:9c:fe:10:f1:60:db:45:63:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:14:87:E3:75:FD:E1:9F:40:36:4C:7F:71:D1:77:AF:CC:72:74:1C
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/D7D2E2A452A611F19BD02DF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.188.0/24
Signature Algorithm: sha256WithRSAEncryption
16:73:c2:ac:34:ba:43:e3:1f:c5:08:1d:a9:dc:00:f7:82:20:
29:11:8c:ea:77:1c:40:39:40:d9:f3:1f:1a:17:73:24:f4:8b:
fc:ce:65:52:11:b7:86:0a:0f:1c:c7:19:53:ee:84:35:e3:f3:
e0:e7:14:bd:94:df:88:dc:cb:62:c0:ba:c8:ba:41:6d:7e:d6:
98:0d:57:b8:1b:a7:b3:2e:7f:7c:eb:5d:e4:ba:e2:f1:db:08:
a4:33:ea:e1:3b:bf:c3:c9:c7:6d:4a:fc:c0:12:53:66:b6:21:
a5:df:25:53:82:e1:da:44:75:1c:53:6c:7e:ce:0e:ad:08:01:
e8:4c:06:ba:f3:ce:9d:85:7f:e9:eb:d7:6c:85:30:14:9a:8c:
6e:92:54:f7:34:5f:74:09:e8:7b:26:f8:a8:cc:7e:62:22:40:
b0:c4:b1:70:33:3b:ea:62:13:9a:4c:59:3e:9e:5c:44:d7:fb:
7d:e4:9e:99:27:8a:f1:d3:07:88:9f:0b:17:b3:35:d6:4e:57:
bd:31:fe:21:04:55:93:ad:3d:20:6d:0b:93:a4:84:e0:fa:9e:
a2:47:ef:23:4d:69:8f:f8:96:aa:d0:a1:a8:43:1a:2f:30:30:
4a:d0:78:f4:f1:30:88:77:c1:e5:d2:bd:b1:0c:3a:53:a6:11:
6b:f0:c2:55
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM0RTRBUjExMC8GA1UEBRMoMkM2NzFGNDI1OTcwNzAyNzIzNzU0MEJGNjIyNjVB
MkQ5N0VCOTVDQjAeFw0yNjA1MTgxMDQ2MzJaFw0yNzA1MTgxMDQ2MzJaMBgxFjAU
BgNVBAMTDTZhMGFlZTBkLWRiNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0efam6fjjSz+a1CQ870FnWFv/s1n8RfPATRp1CDqKRtdyDQutouxYauBE
nZ0eVTCghNYlSv1NXQI9cPyeM+fePMbMnwbhsdC0mPqH7ulBi8vYoHFQBSOI46WS
yIWw42HXknHiiOtBjWcn407WX5aCNEuhzuaMJrF/Gw1gJIikT6nWEHeBSLhVXj4R
nRtjBEZi7PThO1qX5BPygopo/Xm+MwzHzH7mnrx46QIz1evm3UFK1Zm4x08zkcb7
r3U89yVWzAtqV06TfJ0FV6ueneLhxvgHE5nXTn18wxO1EHa5KBGvP/0JMdcuXDCO
rJZqP1Llodwk7i2c/hDxYNtFY3LVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5xSH
43X94Z9ANkx/cdF3r8xydBwwHwYDVR0jBBgwFoAULGcfQllwcCcjdUC/YiZaLZfr
lcswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNEU0L0NDOEZDMzZDREEzMDExRUU5RTZDOThBQTc3NTQxMkU2L0xHY2ZR
bGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0xHY2ZRbGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkEzNEU0L0NDOEZDMzZDREEzMDExRUU5RTZDOThBQTc3NTQx
MkU2L0Q3RDJFMkE0NTJBNjExRjE5QkQwMkRGMkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACp77wwDQYJKoZIhvcNAQELBQAD
ggEBABZzwqw0ukPjH8UIHancAPeCICkRjOp3HEA5QNnzHxoXcyT0i/zOZVIRt4YK
DxzHGVPuhDXj8+DnFL2U34jcy2LAusi6QW1+1pgNV7gbp7Muf3zrXeS64vHbCKQz
6uE7v8PJx21K/MASU2a2IaXfJVOC4dpEdRxTbH7ODq0IAehMBrrzzp2Ff+nr12yF
MBSajG6SVPc0X3QJ6Hsm+KjMfmIiQLDEsXAzO+piE5pMWT6eXETX+33knpknivHT
B4ifCxezNdZOV70x/iEEVZOtPSBtC5OkhOD6nqJH7yNNaY/4lqrQoahDGi8wMErQ
ePTxMIh3weXSvbEMOlOmEWvwwlU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:21 2026 by rpki-client