Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E21F91A2194511F1AFCE1BDFDAE4EC9C.roa
File: E21F91A2194511F1AFCE1BDFDAE4EC9C.roa (raw, json)
Hash identifier: jxMgQ58XzrZXVFi6Lzfd7wSIxqdnxzjSNMVMmGmDqrU=
Subject key identifier: 10:F1:17:8C:D8:DC:E7:35:A3:F5:44:CD:15:58:F7:78:5F:4C:8E:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E21F91A2194511F1AFCE1BDFDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 10:18:56 +0000
ROA not before: Fri 06 Mar 2026 10:18:52 +0000
ROA not after: Mon 13 Apr 2026 10:18:52 +0000
asID: 200733
IP address blocks: 154.83.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114171 (0x1bdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 10:18:52 2026 GMT
Not After : Apr 13 10:18:52 2026 GMT
Subject: CN=69aaaa10-4b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:c0:06:3f:87:09:49:e3:4f:ad:04:27:aa:
fd:45:80:03:00:9a:55:7e:13:96:de:a7:41:60:2a:
cc:7f:8b:7b:85:21:0a:31:d3:1b:37:35:ba:be:30:
30:ea:06:aa:1a:21:5a:8d:5e:ea:8b:c2:a7:47:39:
4f:b1:87:64:f8:49:e0:7a:e8:fa:1e:b3:e7:39:4e:
e6:b7:f7:e3:7f:c5:25:8c:b2:1c:bc:1e:12:aa:ff:
5a:33:bb:b9:34:7f:e2:88:3c:cc:1e:30:08:c5:f9:
40:a3:3b:78:5a:08:4a:6c:8b:1f:51:95:cd:be:b7:
19:88:cf:11:64:fd:e3:6f:e3:bf:bc:f5:c0:13:cb:
b2:2b:9e:12:11:23:8d:4f:17:01:ad:0d:b4:e8:00:
01:3a:02:66:e7:1c:17:c7:e8:c7:f6:f8:ed:10:a3:
66:a1:b4:d3:43:1f:d4:99:8e:3c:fc:ff:ef:94:10:
b0:4f:54:f7:df:3d:90:33:62:ac:8b:cf:58:c2:86:
4c:96:ab:90:1f:9b:77:10:d2:54:ec:70:66:43:35:
23:5b:b1:0f:3a:b9:07:68:fb:42:bc:c0:48:9a:78:
20:b0:4f:58:52:c9:fc:ae:34:0a:80:6b:f1:31:e3:
1a:13:8b:a6:18:35:83:94:99:d5:94:a6:12:6b:e9:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:17:8C:D8:DC:E7:35:A3:F5:44:CD:15:58:F7:78:5F:4C:8E:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E21F91A2194511F1AFCE1BDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.159.0/24
Signature Algorithm: sha256WithRSAEncryption
81:12:2b:86:ad:ed:26:23:26:a1:7b:1a:24:69:2f:ab:c8:47:
f2:03:33:17:db:eb:eb:18:27:56:44:ce:69:13:ca:4a:ef:bd:
58:c3:73:b0:ee:e1:8b:22:8f:4d:b4:45:82:f4:5f:21:e2:4e:
c9:5d:ac:58:d6:97:0f:ac:16:ac:81:70:23:c7:d1:98:b1:da:
a9:44:8a:65:53:5f:9b:c8:73:47:23:48:7f:f9:62:e7:98:74:
c7:a7:44:37:20:d1:d4:b5:ad:6e:d3:45:f9:68:d4:cc:17:94:
53:71:cc:df:24:d9:bd:fa:5a:b4:90:02:02:39:09:6a:64:26:
dd:c7:cb:17:a7:de:c6:b6:7c:d1:40:7e:9f:e4:4b:b4:a3:8e:
d8:a2:ca:c1:63:29:62:68:a7:94:5e:4d:2e:25:b7:b0:81:c7:
6e:fa:0d:ab:b1:5a:14:9b:91:74:f0:b1:32:80:13:be:c4:48:
48:84:17:09:ee:a6:3b:4c:5e:73:60:4e:4a:07:b6:99:ff:04:
95:e7:5d:04:9c:32:07:f7:75:69:38:15:1a:cd:b8:1d:54:93:
da:23:70:34:03:fb:86:b4:f6:67:b1:f1:1e:33:f0:2d:0d:87:
3d:16:e1:9d:f8:cc:9c:90:8d:96:90:12:e6:ea:2a:53:8b:3f:
4f:8c:6a:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb37MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA2MTAxODUyWhcNMjYwNDEzMTAxODUyWjAYMRYw
FAYDVQQDEw02OWFhYWExMC00YjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5V/ABj+HCUnjT60EJ6r9RYADAJpVfhOW3qdBYCrMf4t7hSEKMdMbNzW6
vjAw6gaqGiFajV7qi8KnRzlPsYdk+Engeuj6HrPnOU7mt/fjf8UljLIcvB4Sqv9a
M7u5NH/iiDzMHjAIxflAozt4WghKbIsfUZXNvrcZiM8RZP3jb+O/vPXAE8uyK54S
ESONTxcBrQ206AABOgJm5xwXx+jH9vjtEKNmobTTQx/UmY48/P/vlBCwT1T33z2Q
M2Ksi89YwoZMlquQH5t3ENJU7HBmQzUjW7EPOrkHaPtCvMBImnggsE9YUsn8rjQK
gGvxMeMaE4umGDWDlJnVlKYSa+kK7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBDx
F4zY3Oc1o/VEzRVY93hfTI7pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMjFGOTFBMjE5NDUxMUYxQUZDRTFCREZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOfMA0GCSqGSIb3DQEB
CwUAA4IBAQCBEiuGre0mIyahexokaS+ryEfyAzMX2+vrGCdWRM5pE8pK771Yw3Ow
7uGLIo9NtEWC9F8h4k7JXaxY1pcPrBasgXAjx9GYsdqpRIplU1+byHNHI0h/+WLn
mHTHp0Q3INHUta1u00X5aNTMF5RTcczfJNm9+lq0kAICOQlqZCbdx8sXp97GtnzR
QH6f5Eu0o47YosrBYyliaKeUXk0uJbewgcdu+g2rsVoUm5F08LEygBO+xEhIhBcJ
7qY7TF5zYE5KB7aZ/wSV510EnDIH93VpOBUazbgdVJPaI3A0A/uGtPZnsfEeM/At
DYc9FuGd+MyckI2WkBLm6ipTiz9PjGq1
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:34 2026 by rpki-client