Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/754FDAB02D8F11F193C4B7B5DAE4EC9C.roa
File: 754FDAB02D8F11F193C4B7B5DAE4EC9C.roa (raw, json)
Hash identifier: fct50P7fbketjS3C+7ySeYCZCzp4FKWcw+jHMqXh/7g=
Subject key identifier: 58:F7:30:C9:E2:77:68:59:BF:50:04:9E:BB:84:99:2D:D7:1B:66:BC
Certificate issuer: /CN=F36D3DBFAR/serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Certificate serial: 0146
Authority key identifier: 89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
Authority info access: rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/754FDAB02D8F11F193C4B7B5DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 05:56:00 +0000
ROA not before: Wed 01 Apr 2026 05:55:55 +0000
ROA not after: Mon 01 Apr 2041 05:55:55 +0000
asID: 327829
IP address blocks: 169.255.72.0/22 maxlen: 24
169.255.72.0/24 maxlen: 24
169.255.73.0/24 maxlen: 24
169.255.74.0/24 maxlen: 24
169.255.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3DBFAR, serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Validity
Not Before: Apr 1 05:55:55 2026 GMT
Not After : Apr 1 05:55:55 2041 GMT
Subject: CN=69ccb370-0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:e2:82:3f:73:1e:44:2b:a1:3b:4d:69:97:
6e:91:b1:dc:76:9c:0c:cd:20:50:3d:38:97:d5:7d:
01:e9:a8:91:4f:f3:17:8a:7f:35:5f:12:52:95:ea:
a0:6e:11:79:bf:d0:36:f5:bc:b3:c3:39:d0:b8:d3:
9d:74:a2:21:90:0e:cc:c2:04:98:e0:90:b2:a9:18:
9a:66:d1:f0:17:89:2b:0a:4e:9b:f1:0c:1e:45:a3:
28:89:84:c1:2a:39:cf:69:ac:6f:18:7e:c2:c3:c0:
6c:19:26:78:36:c4:ce:89:59:8f:c0:de:67:3d:8b:
93:05:b3:9b:99:ea:db:24:b9:72:f2:8e:47:ab:31:
d3:27:d8:f0:f6:24:4d:47:97:5b:0d:c1:38:cc:35:
05:16:2c:70:9d:0c:9f:85:cc:d4:db:41:91:e5:2c:
84:de:a5:a5:ed:1c:79:cd:bf:15:42:c0:e3:e6:5d:
a3:7b:00:7e:31:6d:db:92:b0:67:00:47:49:10:98:
8f:41:36:93:9b:40:50:34:31:e4:be:5d:30:90:12:
4b:db:c1:4f:36:70:93:0f:1d:d4:fd:49:63:69:80:
5d:27:20:93:81:ed:ef:7d:16:42:28:f6:2a:a9:a1:
6e:d6:dc:50:90:10:93:f6:a8:8c:53:d3:34:0d:7c:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:30:C9:E2:77:68:59:BF:50:04:9E:BB:84:99:2D:D7:1B:66:BC
X509v3 Authority Key Identifier:
keyid:89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/754FDAB02D8F11F193C4B7B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.72.0/22
Signature Algorithm: sha256WithRSAEncryption
39:6a:2a:56:f5:f7:2c:d7:63:53:5b:b8:eb:00:aa:8c:bc:aa:
6d:be:66:a6:cb:24:85:3c:b7:85:a1:be:36:ed:14:e9:b9:3d:
76:33:d7:11:33:3d:78:e2:ed:8f:48:a7:d3:a2:28:92:fc:83:
3b:ec:ea:fb:06:d5:c9:a9:30:b2:49:07:ab:af:1f:f3:f7:9d:
6b:ce:85:d8:94:c3:0a:ad:d1:b1:6a:3b:c1:f9:af:0f:1a:f8:
3f:e4:98:0f:e3:c2:c1:47:e5:97:d7:4e:bc:e4:9c:45:e5:cc:
e2:77:d8:43:23:76:74:64:57:4e:aa:1d:03:0c:aa:c4:4c:2d:
92:b1:0c:35:0f:e7:4a:20:77:77:d7:c3:29:b7:99:7a:7e:a5:
1e:98:2c:7b:84:c1:57:ee:56:ec:0d:d1:69:1e:1e:98:58:31:
07:61:ec:64:03:04:df:35:3b:66:10:41:60:8f:19:db:24:f7:
03:25:50:ce:67:a5:8a:a2:79:b7:ed:9b:f0:32:4f:15:c5:31:
22:7c:2c:9e:1b:59:f0:c4:bb:0f:eb:ae:03:b4:c4:74:56:11:
fe:4f:0b:68:6c:ad:e6:2b:af:75:2f:68:43:b5:13:7a:5d:23:
c5:6a:bf:b3:1d:5a:7a:14:da:e5:2b:68:7c:f3:df:9b:1d:f0:
db:fb:01:57
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDNEQkZBUjExMC8GA1UEBRMoODk3Qjk3M0JBMDNFQjkzNERFQzVFMDc2MTI4NkQz
REQ3QzgxQTNCNzAeFw0yNjA0MDEwNTU1NTVaFw00MTA0MDEwNTU1NTVaMBgxFjAU
BgNVBAMTDTY5Y2NiMzcwLTAyMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0f+KCP3MeRCuhO01pl26Rsdx2nAzNIFA9OJfVfQHpqJFP8xeKfzVfElKV
6qBuEXm/0Db1vLPDOdC40510oiGQDszCBJjgkLKpGJpm0fAXiSsKTpvxDB5FoyiJ
hMEqOc9prG8YfsLDwGwZJng2xM6JWY/A3mc9i5MFs5uZ6tskuXLyjkerMdMn2PD2
JE1Hl1sNwTjMNQUWLHCdDJ+FzNTbQZHlLITepaXtHHnNvxVCwOPmXaN7AH4xbduS
sGcAR0kQmI9BNpObQFA0MeS+XTCQEkvbwU82cJMPHdT9SWNpgF0nIJOB7e99FkIo
9iqpoW7W3FCQEJP2qIxT0zQNfDWNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUWPcw
yeJ3aFm/UASeu4SZLdcbZrwwHwYDVR0jBBgwFoAUiXuXO6A+uTTexeB2EobT3XyB
o7cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzREJGL0U4RDkyNEMyMzYxQTExRjA4NjQ3NUQ3OURBRTRFQzlDL2lYdVhP
NkEtdVRUZXhlQjJFb2JUM1h5Qm83Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2lYdVhPNkEtdVRUZXhlQjJFb2JUM1h5Qm83Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkQzREJGL0U4RDkyNEMyMzYxQTExRjA4NjQ3NUQ3OURBRTRF
QzlDLzc1NEZEQUIwMkQ4RjExRjE5M0M0QjdCNURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKp/0gwDQYJKoZIhvcNAQELBQAD
ggEBADlqKlb19yzXY1NbuOsAqoy8qm2+ZqbLJIU8t4WhvjbtFOm5PXYz1xEzPXji
7Y9Ip9OiKJL8gzvs6vsG1cmpMLJJB6uvH/P3nWvOhdiUwwqt0bFqO8H5rw8a+D/k
mA/jwsFH5ZfXTrzknEXlzOJ32EMjdnRkV06qHQMMqsRMLZKxDDUP50ogd3fXwym3
mXp+pR6YLHuEwVfuVuwN0WkeHphYMQdh7GQDBN81O2YQQWCPGdsk9wMlUM5npYqi
ebftm/AyTxXFMSJ8LJ4bWfDEuw/rrgO0xHRWEf5PC2hsreYrr3UvaEO1E3pdI8Vq
v7MdWnoU2uUraHzz35sd8Nv7AVc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:48 2026 by rpki-client