Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4634A462366411F1ACE8A21DCF1D38B0.roa
File: 4634A462366411F1ACE8A21DCF1D38B0.roa (raw, json)
Hash identifier: fjWmOR435cZpXOXoynpoVisiGnrnZTXDu5cqrj63+h8=
Subject key identifier: E5:14:AA:93:6F:99:D0:32:40:FC:44:FB:DF:B1:19:9F:43:10:BE:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4634A462366411F1ACE8A21DCF1D38B0.roa
Signing time: Sun 12 Apr 2026 11:39:33 +0000
ROA not before: Sun 12 Apr 2026 11:39:27 +0000
ROA not after: Thu 12 Apr 2029 11:39:27 +0000
asID: 17561
IP address blocks: 154.95.248.0/24 maxlen: 24
154.95.249.0/24 maxlen: 24
154.95.250.0/24 maxlen: 24
154.95.251.0/24 maxlen: 24
154.95.252.0/24 maxlen: 24
154.95.253.0/24 maxlen: 24
154.95.254.0/24 maxlen: 24
154.95.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115912 (0x1c4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 11:39:27 2026 GMT
Not After : Apr 12 11:39:27 2029 GMT
Subject: CN=69db8475-246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:04:50:75:f2:d5:f2:48:9c:b6:ff:fd:32:
03:38:b5:92:f5:9e:7d:df:2e:d9:ad:7f:db:33:c5:
34:e4:91:e7:59:cb:94:17:42:e0:c6:8d:bb:52:65:
84:30:70:88:71:9c:25:cb:7b:33:09:43:b5:bf:0d:
20:b0:d2:1a:09:dc:09:6f:e2:0e:81:6d:37:36:9f:
7c:79:46:f5:24:32:4f:48:fc:e0:d7:9d:72:24:8d:
40:a9:cb:df:b4:a9:a6:c7:21:65:50:34:f6:a5:01:
8f:fe:4d:5a:f4:43:b7:5c:d7:93:61:cb:d5:09:c6:
1f:48:b7:5a:d7:03:c7:15:0a:d9:9a:68:89:f7:a7:
a2:eb:67:35:69:4c:5e:f1:90:28:b6:18:5b:20:8a:
0a:7b:02:56:70:37:b5:61:10:6c:25:49:91:0d:23:
dd:43:56:e5:9f:9f:8d:e4:55:37:40:f1:2b:dc:4c:
ce:e5:4b:6b:0f:aa:90:54:f2:65:b9:3f:68:de:53:
fd:87:ab:15:5b:73:14:08:e7:dc:89:5b:78:e7:84:
cb:fd:f0:13:fa:86:08:28:8d:4b:43:9a:35:15:4c:
ac:b8:0b:0d:3d:6e:6d:79:b1:2f:48:04:24:68:6e:
5e:78:6e:6d:c2:f6:81:f5:45:c3:e8:e9:90:8b:b6:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:AA:93:6F:99:D0:32:40:FC:44:FB:DF:B1:19:9F:43:10:BE:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4634A462366411F1ACE8A21DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.248.0/21
Signature Algorithm: sha256WithRSAEncryption
61:d6:22:08:5d:85:d0:c0:d6:30:5a:0e:6a:16:76:51:5c:4e:
fa:14:eb:ad:ca:73:7d:d9:48:e8:79:c4:c6:0a:18:1b:56:8b:
1f:19:5a:7b:35:d5:47:43:29:22:2e:b6:bd:37:f3:7f:65:76:
35:d1:a4:bf:e7:d2:26:95:f9:34:ae:42:0e:f3:db:02:2e:80:
ef:ff:16:23:17:65:9d:9d:7b:b3:a4:5c:9e:ae:34:dc:61:97:
97:9e:f6:cd:d0:3e:b2:4c:5c:0f:09:12:3f:4e:00:df:c3:eb:
8c:b4:a9:e9:2a:86:77:bf:03:86:60:77:22:00:c2:88:c2:9d:
7d:f2:82:1f:8a:8e:8f:88:44:77:31:58:fb:e4:a6:d0:c5:63:
2c:31:17:03:dc:a0:cb:73:44:a6:c4:ed:25:6c:71:bb:86:18:
98:e7:9e:4b:07:d0:42:88:9b:bd:fa:7f:0f:e6:18:db:d3:6e:
8c:1a:74:19:e4:29:b5:55:22:de:68:f1:62:71:2e:5f:8d:70:
28:f5:ea:c8:f5:85:58:a7:14:82:99:e6:cd:1b:ff:13:0d:a9:
a4:9a:39:f3:65:c7:36:9e:c5:b7:a7:74:99:b1:bf:4d:72:e2:
10:b3:0f:29:35:34:17:6d:f4:d4:ad:df:9c:a1:01:f5:f4:51:
57:82:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:29 2026 by rpki-client