Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D67C1A42E8211F1A237D7B7DAE4EC9C.roa
File: 4D67C1A42E8211F1A237D7B7DAE4EC9C.roa (raw, json)
Hash identifier: HaGDid8D5otKkMJEMhk5DpMSoF5CnC8V4wgctHkHsDk=
Subject key identifier: 70:EB:B0:26:69:9D:90:1E:DE:32:F4:07:D9:A1:28:81:DA:E2:CB:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C239
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D67C1A42E8211F1A237D7B7DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 10:54:21 +0000
ROA not before: Thu 02 Apr 2026 10:54:16 +0000
ROA not after: Wed 06 May 2026 10:54:16 +0000
asID: 202656
IP address blocks: 154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115257 (0x1c239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 10:54:16 2026 GMT
Not After : May 6 10:54:16 2026 GMT
Subject: CN=69ce4add-1494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:81:cc:90:63:f5:eb:bd:36:46:c8:78:0b:
e7:56:96:9d:1d:f9:94:cf:10:0b:9c:27:8e:ea:35:
e1:88:98:19:c0:5e:eb:b7:c6:73:d2:31:c4:47:26:
17:c5:05:af:90:eb:f6:62:ec:1e:70:1b:34:96:79:
94:0e:d0:75:79:17:d4:3c:40:26:b6:18:7d:e3:a7:
b4:e9:0f:39:9f:d4:b6:a6:30:7a:6a:90:11:eb:fb:
37:f7:62:95:ea:74:af:70:fe:a5:20:41:08:51:04:
ee:51:12:42:4a:19:a0:d6:e6:70:16:15:10:7a:91:
29:d3:77:ba:61:9b:d3:05:63:71:56:99:39:5f:24:
cc:76:0b:7b:32:56:97:fe:7a:c9:c3:02:0e:bc:cc:
65:c7:b6:0d:ea:04:3b:3b:5f:d3:47:4f:18:90:b9:
2a:8b:6a:ca:30:2a:5f:07:88:eb:db:5e:39:d5:f4:
36:2c:a8:f1:da:c6:1f:93:77:28:40:53:5a:54:d5:
41:6f:e2:fd:40:d4:96:6d:0b:2b:26:e7:58:da:1a:
2d:3d:ea:5e:80:fd:02:ae:3f:78:25:d0:eb:79:3a:
4b:3a:f6:a9:d0:ca:b8:fd:8a:71:38:e9:96:64:36:
1d:2b:d2:da:46:79:fc:bf:b4:d6:2e:ea:ab:6a:50:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:B0:26:69:9D:90:1E:DE:32:F4:07:D9:A1:28:81:DA:E2:CB:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D67C1A42E8211F1A237D7B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:db:58:42:3f:34:76:be:6f:17:2b:be:e6:d8:3a:be:7b:ed:
9f:3c:fb:db:3a:cf:f7:a0:9a:09:45:44:0a:f9:e7:cf:5d:5c:
3e:c2:a7:a9:0c:a2:79:23:f9:9c:a0:5d:fa:23:22:fe:bb:65:
9f:4b:92:7a:d9:de:36:d5:9b:ca:5d:9b:ea:ad:33:74:84:18:
4d:a1:4c:e8:f7:f0:b0:5a:d0:ff:e1:c0:d6:04:1d:86:6b:7f:
63:5d:07:f2:11:cb:1d:59:c9:3a:e4:53:65:88:37:28:f9:1c:
c7:f1:6b:0f:61:f3:0c:d9:0a:83:b9:1b:1f:bb:31:7f:e9:da:
de:25:7b:ad:9b:5f:eb:df:69:72:8e:61:30:a9:6d:6a:6d:63:
1f:3f:37:a8:b2:c9:26:25:d8:17:58:b4:ab:52:ea:8f:da:9f:
1b:06:eb:b0:97:63:32:fb:a1:cb:a3:23:85:81:a1:09:52:a4:
e7:3f:02:24:0e:69:1d:2b:68:d4:e8:ca:84:54:cb:cb:3f:b4:
6d:80:00:ef:4b:9d:f4:26:5b:96:e3:80:d4:88:b1:95:05:f0:
f2:f1:31:07:43:bc:fa:a3:30:52:01:a5:4f:70:56:a6:bf:25:
13:ad:4d:ba:c8:80:99:fa:20:3c:69:a6:e4:c2:c5:82:03:4f:
6b:c5:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:19 2026 by rpki-client