Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/F6F234F221D011F19C459D7CDAE4EC9C.roa
File: F6F234F221D011F19C459D7CDAE4EC9C.roa (raw, json)
Hash identifier: HVe45gs/wvjKiJakshYzfT4peQnPHPirdYQxmEKJzm4=
Subject key identifier: 34:1B:C9:12:72:19:13:3C:E2:E3:C1:DF:E8:CF:E2:18:8E:A0:9F:8D
Certificate issuer: /CN=F36EADB7AR/serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
Certificate serial: 0557
Authority key identifier: 20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
Authority info access: rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/F6F234F221D011F19C459D7CDAE4EC9C.roa
Signing time: Tue 17 Mar 2026 07:14:41 +0000
ROA not before: Tue 17 Mar 2026 07:14:35 +0000
ROA not after: Mon 17 Mar 2036 07:14:35 +0000
asID: 328257
IP address blocks: 165.73.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EADB7AR, serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
Validity
Not Before: Mar 17 07:14:35 2026 GMT
Not After : Mar 17 07:14:35 2036 GMT
Subject: CN=69b8ff61-7103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:5c:76:47:6c:20:73:33:79:20:a7:59:03:
73:eb:2e:5c:a5:e2:44:c3:d0:72:cf:1b:91:7d:87:
2e:d1:25:7b:f4:e0:12:07:39:18:12:e0:69:b0:d3:
c7:a9:5b:e9:3a:24:62:bd:68:88:69:24:6d:08:75:
6b:64:d8:4c:f5:3d:74:b9:2f:ff:ab:0b:ea:e3:a1:
e4:d1:c4:9b:b9:a0:e1:c8:14:8a:5a:f7:07:57:cd:
8d:1d:06:8d:62:77:82:48:e2:7d:27:24:74:c4:7b:
10:7e:4e:21:07:02:d0:29:ce:cf:77:d5:4e:d9:87:
2d:f3:e8:69:4d:58:b9:e3:20:25:9f:68:7a:46:e4:
be:57:5b:6c:1b:ff:ed:0f:39:33:e4:20:c0:ee:e9:
07:20:12:05:24:9b:5c:dd:af:22:a3:77:b9:6d:5b:
a2:c3:d4:28:61:e1:6e:85:cb:47:17:0a:76:3e:6e:
82:65:aa:55:3d:1c:dc:fe:9c:cb:99:83:9e:a2:12:
38:cd:01:c5:d2:86:25:94:72:36:25:7f:64:11:ec:
aa:39:ce:89:c4:4f:60:b1:08:45:9b:a8:ef:ff:a5:
66:33:d0:95:42:39:ad:7c:77:46:fb:0e:21:c0:a2:
de:eb:cd:23:af:81:50:6c:f7:0b:ed:bd:3a:8c:75:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:C9:12:72:19:13:3C:E2:E3:C1:DF:E8:CF:E2:18:8E:A0:9F:8D
X509v3 Authority Key Identifier:
keyid:20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/F6F234F221D011F19C459D7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.73.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:cb:89:a3:cd:20:5e:2e:08:fc:91:90:60:bf:84:8b:4d:40:
c3:55:c1:28:10:4a:48:6f:ed:38:32:03:dd:e1:1a:33:be:0c:
c1:d3:6f:b7:e2:e5:1c:bf:ed:f7:f8:08:f6:ca:c0:ef:18:07:
1b:11:09:c1:af:91:fe:2d:71:5c:16:ba:2c:02:38:2b:f3:12:
39:31:55:db:5f:c8:b2:a7:b8:66:65:05:a4:d4:26:f8:dc:d7:
4e:92:be:4d:d7:69:5d:d0:57:88:e9:66:ba:80:55:a2:41:af:
b2:8b:98:25:27:2a:3e:93:89:5a:b3:98:2d:bf:4c:b0:eb:92:
e5:06:1f:2b:e9:e5:be:af:e5:3e:cf:10:5e:68:d2:83:60:04:
b3:98:a8:4d:c5:de:37:b6:17:c9:15:fe:a5:4d:32:97:c8:65:
d2:b3:85:36:08:8a:e4:ff:5b:02:05:30:9a:32:fe:ce:2d:4b:
ef:5b:f0:9d:94:1e:bb:0e:79:e7:52:fd:58:9a:e2:c8:25:32:
0d:fe:bc:1b:fa:c2:a3:dc:50:08:1f:cb:0e:76:d4:aa:96:d8:
d6:57:20:ce:46:ba:50:27:e6:88:ac:81:29:02:8a:66:d7:d3:
76:ee:95:8b:a0:72:97:82:8e:ac:b0:3d:92:89:61:73:71:2b:
ab:f7:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:33:42 2026 by rpki-client