Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B019A7C18B711F1AA3CCCE9DAE4EC9C.roa
File: 1B019A7C18B711F1AA3CCCE9DAE4EC9C.roa (raw, json)
Hash identifier: rsVjnp53Vubxcpt2vDiYqklFgRSAszg+Onfm0I5Rz3U=
Subject key identifier: 36:39:9A:BB:AD:28:9A:CD:4F:05:BF:AE:2F:B9:57:18:81:85:22:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B019A7C18B711F1AA3CCCE9DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 17:16:54 +0000
ROA not before: Thu 05 Mar 2026 17:16:50 +0000
ROA not after: Thu 02 Apr 2026 17:16:50 +0000
asID: 53055
IP address blocks: 154.91.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114129 (0x1bdd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 17:16:50 2026 GMT
Not After : Apr 2 17:16:50 2026 GMT
Subject: CN=69a9ba85-ad5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:6e:97:c8:5e:51:7b:bc:35:8e:c1:d5:b3:
a6:e3:a1:16:34:64:c5:6a:04:56:6c:4b:e3:b5:f0:
7d:2e:bf:5c:d8:b0:0a:80:b9:f0:f1:e1:f1:21:d1:
6f:06:2e:6a:30:d3:32:eb:ab:eb:96:a6:56:c4:e0:
a8:16:a6:11:6c:cb:64:63:1d:2c:ed:e8:94:63:68:
35:e6:bb:1d:98:3c:b6:f8:8f:cc:25:58:1c:da:48:
ee:cd:27:f5:35:bb:65:31:44:8e:0a:7a:98:1f:53:
ee:ef:f3:20:9d:50:af:63:5e:9a:c5:2e:8f:05:d7:
d6:16:9c:88:a5:f2:58:c0:0f:a5:8b:d4:b2:7a:b6:
e8:3c:24:a4:d9:a8:e6:3f:af:00:1a:eb:ef:4f:cc:
b4:d0:e1:76:c2:f5:6e:53:e6:87:55:33:da:d6:28:
f1:f0:f4:4a:1c:49:ed:09:c6:c8:af:02:62:ff:4f:
0c:1f:2a:67:f9:ba:54:4f:51:96:dd:74:90:1c:e6:
2f:76:d2:fb:c0:91:54:a8:eb:45:ce:99:81:b7:b1:
3c:33:6c:fd:e2:64:3f:4c:19:06:03:1f:26:5d:23:
25:5a:b0:9e:83:da:41:0e:5f:35:bd:2d:8d:cd:0a:
8a:c2:69:10:15:35:db:41:28:05:3d:2f:d0:e5:3c:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:39:9A:BB:AD:28:9A:CD:4F:05:BF:AE:2F:B9:57:18:81:85:22:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B019A7C18B711F1AA3CCCE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:c1:77:35:a9:2c:a5:2b:17:0e:99:72:81:e0:ba:d9:93:42:
c1:65:5e:1c:a9:37:9d:24:ff:3b:32:94:f4:ee:09:5c:b5:c2:
9c:71:a2:e3:bd:ce:d6:7e:b6:50:91:94:27:34:88:da:9a:48:
4d:26:4c:e9:55:fa:8d:63:83:b6:fa:38:a6:53:cd:52:cc:80:
ae:4e:41:cb:8f:32:c3:d9:0d:7b:f7:24:6f:9f:2a:aa:30:77:
09:99:27:46:1c:41:4d:2c:4e:82:b1:33:25:40:44:84:8b:a2:
12:a9:86:d6:15:ed:34:11:97:3f:1d:37:7d:0b:f9:92:ee:c2:
0a:d9:08:bc:f1:46:da:23:8e:95:47:be:82:0a:de:e5:d2:4d:
0b:c3:fd:9d:bd:81:dc:c7:64:ef:20:3c:47:a5:f7:25:44:22:
48:4a:23:3a:b2:26:ee:a2:33:16:fe:46:79:e5:f5:7a:33:1d:
dc:93:af:61:7c:bc:16:2c:b9:67:dd:90:0c:22:bf:b8:da:1e:
44:e8:5a:4c:db:1e:db:74:37:7a:f1:9e:3f:3b:2b:45:85:1b:
af:6d:00:3e:37:69:8e:c7:61:70:d4:a3:e3:c9:7b:66:5f:20:
47:f8:f7:c2:66:84:f8:31:af:32:43:3a:21:ad:00:5a:43:48:
ee:0c:88:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb3RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA1MTcxNjUwWhcNMjYwNDAyMTcxNjUwWjAYMRYw
FAYDVQQDEw02OWE5YmE4NS1hZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwHBul8heUXu8NY7B1bOm46EWNGTFagRWbEvjtfB9Lr9c2LAKgLnw8eHx
IdFvBi5qMNMy66vrlqZWxOCoFqYRbMtkYx0s7eiUY2g15rsdmDy2+I/MJVgc2kju
zSf1NbtlMUSOCnqYH1Pu7/MgnVCvY16axS6PBdfWFpyIpfJYwA+li9SyerboPCSk
2ajmP68AGuvvT8y00OF2wvVuU+aHVTPa1ijx8PRKHEntCcbIrwJi/08MHypn+bpU
T1GW3XSQHOYvdtL7wJFUqOtFzpmBt7E8M2z94mQ/TBkGAx8mXSMlWrCeg9pBDl81
vS2NzQqKwmkQFTXbQSgFPS/Q5TyoCwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDY5
mrutKJrNTwW/ri+5VxiBhSJTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQjAxOUE3QzE4QjcxMUYxQUEzQ0NDRTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmluAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwwXc1qSylKxcOmXKB4LrZk0LBZV4cqTedJP87MpT07glctcKccaLj
vc7WfrZQkZQnNIjamkhNJkzpVfqNY4O2+jimU81SzICuTkHLjzLD2Q179yRvnyqq
MHcJmSdGHEFNLE6CsTMlQESEi6ISqYbWFe00EZc/HTd9C/mS7sIK2Qi88UbaI46V
R76CCt7l0k0Lw/2dvYHcx2TvIDxHpfclRCJISiM6sibuojMW/kZ55fV6Mx3ck69h
fLwWLLln3ZAMIr+42h5E6FpM2x7bdDd68Z4/OytFhRuvbQA+N2mOx2Fw1KPjyXtm
XyBH+PfCZoT4Ma8yQzohrQBaQ0juDIi4
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:52 2026 by rpki-client