Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CE5196C12F211F1BF3D0C83DAE4EC9C.roa
File: 4CE5196C12F211F1BF3D0C83DAE4EC9C.roa (raw, json)
Hash identifier: otYgXvH/2mHr9vFN0eJXrWuKHUJd0dJnXK5VuSSxwPw=
Subject key identifier: 49:71:54:81:3F:AD:40:47:89:09:80:B4:B7:73:6D:D2:BE:B0:77:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CE5196C12F211F1BF3D0C83DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 09:05:31 +0000
ROA not before: Thu 26 Feb 2026 09:05:26 +0000
ROA not after: Mon 30 Mar 2026 09:05:26 +0000
asID: 401783
IP address blocks: 154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113663 (0x1bbff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 09:05:26 2026 GMT
Not After : Mar 30 09:05:26 2026 GMT
Subject: CN=69a00cdb-a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:9f:8c:23:99:7e:eb:10:00:b7:c3:c6:41:
39:b2:7f:d4:12:6e:32:58:f3:51:3a:5c:69:22:cf:
73:a5:59:06:95:6e:6a:bd:9c:7f:64:2d:20:03:ad:
c1:4f:e6:e1:17:51:bc:49:2c:55:14:68:9e:b0:89:
38:7d:55:8d:00:08:49:38:c8:a1:16:ab:26:53:9f:
e2:b9:67:62:07:fc:cd:3e:e7:57:1f:74:c0:f8:77:
15:50:93:dd:78:a8:80:ff:f3:b4:10:3a:24:f9:77:
5b:d1:f4:e2:5f:62:47:94:0c:41:db:b6:e7:27:a1:
6f:5c:20:fd:a8:60:9a:2b:27:5f:14:8c:ec:16:42:
d1:a0:9f:74:bd:da:11:81:1a:95:61:27:af:ea:da:
4e:f2:61:b5:1b:fd:05:1b:95:4b:92:5c:f8:9f:b6:
c2:f0:0d:04:63:88:93:94:62:f3:e1:ac:cd:eb:54:
af:55:56:05:86:74:ba:ee:0f:a3:a2:60:7e:83:6f:
07:58:4b:38:d6:50:24:d0:5c:ef:31:9e:f1:db:ea:
23:d3:dc:fb:a1:12:cf:3e:b6:ed:07:4e:64:4d:fa:
e2:91:3a:e4:71:b9:c0:ce:93:04:1d:57:1e:d0:d0:
88:5d:8a:22:19:28:a6:36:20:cf:4f:c5:5a:18:72:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:54:81:3F:AD:40:47:89:09:80:B4:B7:73:6D:D2:BE:B0:77:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CE5196C12F211F1BF3D0C83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.195.0/24
154.196.134.0/24
154.200.1.0/24
154.200.37.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0-154.200.54.255
154.200.60.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
54:16:6e:d7:97:11:83:f1:a5:cb:40:8c:74:1f:6f:c1:eb:68:
55:84:75:50:ce:59:ed:d4:ac:03:09:71:8e:ed:27:79:2f:9c:
26:98:48:dd:3d:9a:2b:12:c8:94:0f:d9:98:1f:99:43:95:f6:
5a:07:18:bd:dd:18:1f:1c:10:d9:27:a3:c9:39:b1:c4:14:59:
99:70:e4:f6:1f:77:78:ae:88:b4:63:ed:6b:0a:3b:75:b4:c4:
21:be:2e:a6:81:98:12:3f:e4:1b:37:28:b1:3e:47:c0:50:e2:
e3:c2:8a:ad:25:0c:0a:c1:64:f7:04:b5:14:af:8b:fa:fe:db:
89:2d:56:40:5d:52:a7:16:e3:e7:3e:91:56:74:ec:01:0e:d2:
47:0a:e4:05:96:0a:0f:95:83:75:2e:3d:38:46:13:1b:7d:54:
cd:e7:24:e6:37:0d:59:00:6f:76:64:72:b3:21:19:9c:a7:d1:
64:0c:5d:4f:d1:93:9c:e7:c1:b0:23:95:1b:58:6d:53:e6:c5:
2f:71:b1:fd:7f:ae:b7:e6:3a:f5:67:e3:c5:05:02:d5:8e:84:
4f:e6:5a:5b:93:a7:3b:75:41:25:15:a1:5f:4c:f3:cb:5f:a6:
ea:2b:e5:d7:91:80:d1:d9:38:76:54:36:bc:9f:33:c6:d5:20:
2f:08:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:08 2026 by rpki-client