Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/274EB8B6372811F1B72DB9CDCE1D38B0.roa
File: 274EB8B6372811F1B72DB9CDCE1D38B0.roa (raw, json)
Hash identifier: xwU60XSN2Xkz+9J8uhdQooh3X4QjWWBU3s7evDnOguU=
Subject key identifier: D0:CA:D4:F2:B9:84:0A:94:0A:95:F2:81:0E:80:E1:D5:3B:4F:8D:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C50A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/274EB8B6372811F1B72DB9CDCE1D38B0.roa
Signing time: Mon 13 Apr 2026 11:01:43 +0000
ROA not before: Mon 13 Apr 2026 11:01:38 +0000
ROA not after: Sat 16 May 2026 11:01:38 +0000
asID: 22773
IP address blocks: 154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.198.44.0/24 maxlen: 24
154.198.45.0/24 maxlen: 24
154.198.46.0/24 maxlen: 24
154.198.47.0/24 maxlen: 24
154.202.2.0/24 maxlen: 24
154.202.5.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115978 (0x1c50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 11:01:38 2026 GMT
Not After : May 16 11:01:38 2026 GMT
Subject: CN=69dccd16-3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:7b:b7:7e:0e:72:50:84:bb:1d:30:28:55:
59:07:60:a4:f9:0f:dd:a7:3c:09:d9:dd:cc:41:8d:
36:84:89:60:61:0c:c6:d8:af:91:a1:c8:cb:4f:9f:
8f:3e:1a:0a:e9:3b:91:38:c9:84:05:6e:ac:38:ce:
8d:0a:19:ec:66:b4:34:55:a8:a6:cb:82:75:a7:1b:
8a:c3:1e:07:7f:26:ca:ab:7b:ab:26:fe:21:89:e6:
27:cc:aa:48:38:07:d2:e6:ee:3c:88:61:a3:fd:6f:
fe:e0:11:5d:4d:73:58:60:64:3b:ae:36:90:78:43:
c3:2e:f3:9c:75:bf:b1:25:a5:25:ed:60:f8:07:14:
db:c8:87:80:d2:6f:3b:62:d7:cc:11:0d:ee:d5:17:
56:f4:41:fb:cd:0a:8f:99:f5:e5:ee:7d:1f:41:94:
ab:4e:ab:98:a3:a8:08:f2:10:3f:c3:5b:8f:08:b9:
22:25:27:7d:fe:8e:1a:d3:02:38:5d:55:b4:b4:cd:
7f:b3:2f:c0:9d:c0:b8:a9:a4:55:53:e7:e3:88:8b:
79:d3:2a:72:98:8c:e3:41:8d:d2:2b:49:27:1b:f9:
e5:aa:20:6b:e7:75:ec:74:74:3d:5c:91:c8:61:08:
a9:6c:ce:43:6d:0f:e4:51:54:b1:66:ed:53:fc:3c:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:D4:F2:B9:84:0A:94:0A:95:F2:81:0E:80:E1:D5:3B:4F:8D:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/274EB8B6372811F1B72DB9CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.30.0/23
154.198.44.0/22
154.202.2.0/24
154.202.5.0/24
154.202.12.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
30:40:16:03:f6:f3:0c:6b:52:52:70:e6:5a:d2:99:42:c6:d2:
09:16:d4:f6:5e:7b:34:fa:28:24:a2:95:09:42:5b:6a:27:48:
cb:95:f2:bf:0a:79:11:b6:f9:d3:69:11:be:01:09:5d:e1:cb:
cc:b5:b1:6d:8b:b2:cb:f8:d1:fa:30:75:8e:74:07:c6:e7:6e:
5a:f9:a7:fa:66:da:ee:9d:87:34:22:5f:21:8e:91:c1:2c:bd:
56:a9:8b:3b:dc:1e:a4:99:8e:28:12:a4:b5:42:6e:f6:8c:6d:
e3:94:83:da:74:2f:02:22:cd:b7:55:d9:76:15:f9:41:cd:21:
41:1a:e9:a2:d7:4e:b7:e0:0e:c5:89:33:34:1a:83:32:96:d3:
d8:b7:20:6b:31:cb:2a:59:3b:4a:e2:4e:4a:0b:e3:eb:d1:3a:
37:27:ec:17:b6:78:1f:3f:d1:75:b1:66:f1:53:4d:2f:88:7f:
9e:21:da:0f:97:26:09:ca:5b:74:29:54:da:2d:15:26:66:81:
2f:c8:eb:17:ae:72:cc:5c:40:0b:97:0f:92:97:57:51:c4:00:
b3:02:50:05:f1:ad:1d:b5:c4:dd:4d:b2:8e:79:5b:d5:73:b6:
c9:50:10:14:db:6f:b7:d5:74:94:bf:8c:ae:83:12:ff:81:f7:
84:ee:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:57 2026 by rpki-client