Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/5D13438A066911F1AF7B9E7BDAE4EC9C.roa
File: 5D13438A066911F1AF7B9E7BDAE4EC9C.roa (raw, json)
Hash identifier: o3eibrTB3qklVAlPQvfUzdZj6M57IsoeiCH4IoymBO8=
Subject key identifier: 2F:E6:7D:2D:3A:95:0B:78:AF:F4:18:97:01:66:04:02:A5:68:79:88
Certificate issuer: /CN=F36BDDB2AF/serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Certificate serial: 6B
Authority key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/5D13438A066911F1AF7B9E7BDAE4EC9C.roa
Signing time: Tue 10 Feb 2026 10:15:03 +0000
ROA not before: Tue 10 Feb 2026 10:14:59 +0000
ROA not after: Fri 11 Feb 2028 10:14:59 +0000
asID: 329617
IP address blocks: 154.72.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Validity
Not Before: Feb 10 10:14:59 2026 GMT
Not After : Feb 11 10:14:59 2028 GMT
Subject: CN=698b0527-9fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:ad:13:98:76:61:37:ef:4a:19:0f:c0:66:
91:ee:59:6f:3c:02:f9:79:4c:47:58:db:d3:88:f4:
91:51:52:ca:01:9c:55:00:c9:81:c0:82:97:64:00:
55:b1:0d:63:83:c1:ca:8b:f4:97:fa:5f:8a:ab:b0:
1b:e0:b5:22:46:7d:17:0f:b1:52:ad:e7:cc:85:0f:
8f:6e:f9:42:f1:16:5d:a3:c2:88:e3:ce:7c:7e:9d:
5d:e7:39:b5:02:d5:73:8f:b8:bf:f1:d3:db:cc:f3:
78:3d:d4:af:2e:bf:56:34:16:53:a0:1b:5d:1d:c6:
5e:ae:5f:96:88:f9:b0:c2:e7:96:8d:03:28:c2:0f:
ad:97:45:42:84:8c:1c:f2:43:5f:8e:d7:69:67:17:
0d:40:57:1c:69:b4:e0:a3:f6:74:f4:33:0e:b0:c7:
bd:5d:00:9a:c4:d9:9b:cf:33:e6:bb:24:85:16:f8:
43:20:b5:e3:5c:74:55:67:5d:dd:38:e7:d0:88:df:
15:58:7d:a3:a6:3d:87:94:f5:9c:c6:0c:b9:8d:a5:
ab:a5:05:32:72:c6:99:48:40:95:6a:99:0c:a7:f1:
e9:a6:2e:b5:fb:0a:65:01:ce:63:4d:2b:f7:fe:1a:
ed:dc:31:24:79:38:88:75:f5:9b:5d:00:ca:7b:1e:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:7D:2D:3A:95:0B:78:AF:F4:18:97:01:66:04:02:A5:68:79:88
X509v3 Authority Key Identifier:
keyid:A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/5D13438A066911F1AF7B9E7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d4:6c:38:35:b0:ca:24:b7:df:7c:0c:63:0d:85:0e:f9:2f:
84:ab:54:77:9a:46:00:98:7e:5e:80:22:23:5b:63:64:f9:05:
ee:e4:15:93:3c:88:aa:e7:12:2a:d6:0f:c4:97:41:92:d6:51:
4b:49:88:06:38:a6:07:a4:24:b7:b3:db:17:a1:ee:d6:ec:23:
13:c8:5a:a9:76:ae:4c:ed:ae:3e:46:e9:b6:a9:94:f1:43:01:
6a:ad:dd:f1:99:71:d5:9d:af:8f:b7:14:9a:3b:bf:44:7d:eb:
02:ff:96:8d:ab:9c:be:5c:fc:a4:35:d1:1f:5e:6a:73:a0:5b:
cb:e6:8a:0a:f3:a7:f2:21:eb:72:77:a7:8f:a7:12:f6:6c:86:
8e:e8:56:4f:a2:b4:51:3b:fc:3e:f0:16:fe:e0:d8:7f:da:0d:
fc:93:12:95:30:61:fe:41:e5:af:55:0e:b1:f5:01:c8:c7:ac:
a1:bf:04:c8:9d:b4:35:db:37:bb:10:9e:f8:78:67:d5:dd:4e:
7e:86:b5:05:b5:25:1b:e1:0e:2b:c6:5f:c2:ed:68:3b:61:c7:
5c:3b:03:f2:30:ec:c6:31:5d:7f:96:7f:d7:5c:6e:93:d9:6d:
ac:f4:e6:b4:67:db:ef:1e:69:08:27:94:34:c7:85:f7:0c:4f:
9e:de:31:16
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBazANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
RERCMkFGMTEwLwYDVQQFEyhBNUNBNEU1QTZGQ0FGRDk4NzA2NTIzRDMxNDVDNTZC
QkNFQzcwOTQwMB4XDTI2MDIxMDEwMTQ1OVoXDTI4MDIxMTEwMTQ1OVowGDEWMBQG
A1UEAxMNNjk4YjA1MjctOWZjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALh3rROYdmE370oZD8Bmke5ZbzwC+XlMR1jb04j0kVFSygGcVQDJgcCCl2QA
VbENY4PByov0l/pfiquwG+C1IkZ9Fw+xUq3nzIUPj275QvEWXaPCiOPOfH6dXec5
tQLVc4+4v/HT28zzeD3Ury6/VjQWU6AbXR3GXq5floj5sMLnlo0DKMIPrZdFQoSM
HPJDX47XaWcXDUBXHGm04KP2dPQzDrDHvV0AmsTZm88z5rskhRb4QyC141x0VWdd
3Tjn0IjfFVh9o6Y9h5T1nMYMuY2lq6UFMnLGmUhAlWqZDKfx6aYutfsKZQHOY00r
9/4a7dwxJHk4iHX1m10AynseP8kCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQv5n0t
OpULeK/0GJcBZgQCpWh5iDAfBgNVHSMEGDAWgBSlyk5ab8r9mHBlI9MUXFa7zscJ
QDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkREQjIvN0M3MTU5MENCRUYxMTFGMEExRTQ5OUE0REFFNEVDOUMvcGNwT1dt
X0tfWmh3WlNQVEZGeFd1ODdIQ1VBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcGNwT1dtX0tfWmh3WlNQVEZGeFd1ODdIQ1VBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkREQjIvN0M3MTU5MENCRUYxMTFGMEExRTQ5OUE0REFF
NEVDOUMvNUQxMzQzOEEwNjY5MTFGMUFGN0I5RTdCREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJpIEzANBgkqhkiG9w0BAQsF
AAOCAQEAC9RsODWwyiS333wMYw2FDvkvhKtUd5pGAJh+XoAiI1tjZPkF7uQVkzyI
qucSKtYPxJdBktZRS0mIBjimB6Qkt7PbF6Hu1uwjE8haqXauTO2uPkbptqmU8UMB
aq3d8Zlx1Z2vj7cUmju/RH3rAv+Wjaucvlz8pDXRH15qc6Bby+aKCvOn8iHrcnen
j6cS9myGjuhWT6K0UTv8PvAW/uDYf9oN/JMSlTBh/kHlr1UOsfUByMesob8EyJ20
Nds3uxCe+Hhn1d1Ofoa1BbUlG+EOK8Zfwu1oO2HHXDsD8jDsxjFdf5Z/11xuk9lt
rPTmtGfb7x5pCCeUNMeF9wxPnt4xFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:42 2026 by rpki-client