Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E25BE6C2EE511F198CD4FEDDAE4EC9C.roa
File: 4E25BE6C2EE511F198CD4FEDDAE4EC9C.roa (raw, json)
Hash identifier: /+omKGtCuUNzx1YKG02GwzPXl47fUlUQHaIptcpYKvs=
Subject key identifier: 0C:40:3D:FD:D0:11:5C:FA:86:9A:D4:C3:FE:78:0D:B2:EB:25:73:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C293
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E25BE6C2EE511F198CD4FEDDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 22:43:02 +0000
ROA not before: Fri 03 Apr 2026 22:42:53 +0000
ROA not after: Sun 17 May 2026 22:42:53 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115347 (0x1c293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 22:42:53 2026 GMT
Not After : May 17 22:42:53 2026 GMT
Subject: CN=69cef0f6-6065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:0e:f9:74:e0:95:74:7e:7e:a7:35:8e:8a:
81:b7:4f:94:ed:0e:82:43:09:ac:33:ad:dc:33:4e:
07:b7:db:68:08:85:f3:0e:6a:3d:66:28:07:8c:c1:
9f:49:71:3b:a2:51:c4:68:8d:3f:98:37:68:14:c7:
2d:3a:37:dd:ba:90:e8:15:2a:0e:17:e6:51:e7:0b:
77:a5:59:cd:96:93:a1:5a:69:06:5c:3e:20:70:6a:
af:a8:35:64:61:af:ea:99:b8:f4:58:ae:69:18:79:
91:ca:9e:57:3c:19:de:cf:dc:31:db:dd:02:fd:bf:
26:c4:db:f0:c8:3a:5d:b1:4d:90:29:47:20:8b:45:
0c:68:38:ed:33:3f:6b:04:1b:04:92:32:71:4c:81:
1c:54:78:a2:a5:4b:28:ec:3b:69:fd:d5:d2:70:59:
7c:b2:af:50:00:03:6b:e0:c1:33:50:3d:05:4c:38:
89:6b:55:64:ae:57:8a:41:0c:47:a1:66:d7:4d:5e:
db:67:71:c1:6e:cd:bc:b7:8e:f1:8e:ee:cd:53:c2:
6a:67:dd:9c:85:3e:fe:10:13:2a:8e:c1:bb:31:3e:
48:08:3a:c2:2e:ed:f1:c7:77:7d:5d:b4:ce:87:2d:
06:39:46:ab:5a:21:11:72:da:23:db:43:99:1b:a9:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:40:3D:FD:D0:11:5C:FA:86:9A:D4:C3:FE:78:0D:B2:EB:25:73:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E25BE6C2EE511F198CD4FEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:57:8d:67:a6:ea:aa:f5:b4:99:12:8c:64:c5:5e:d5:1d:41:
13:91:c1:94:bd:cf:1f:51:21:aa:e7:eb:f9:6f:f5:6a:6b:bb:
be:41:fb:8a:08:e2:90:66:50:3a:81:2b:91:76:16:65:19:55:
eb:33:e5:e6:a4:9f:ff:c9:5c:45:d1:d2:7d:ef:e5:cd:cb:a7:
a5:f6:ad:81:10:fb:15:c9:8d:5b:c2:e4:c0:5a:f2:66:25:dd:
33:17:9f:05:41:d4:9d:bc:a5:c6:5f:69:12:ec:82:a4:6e:aa:
6d:60:a0:61:b0:30:4e:a3:ed:cc:7d:88:3a:8a:e5:3e:d7:87:
92:8c:9e:12:5c:32:a0:20:4d:7d:6e:f8:b9:87:63:6d:f0:03:
ed:cc:86:c1:83:2d:a9:fe:c6:82:2f:5a:a3:13:35:70:5e:47:
fa:35:20:1a:8b:08:27:aa:c6:7f:30:77:b5:95:74:e6:b7:ba:
e9:cf:53:26:f6:75:ac:63:e8:c6:69:f4:44:3d:c5:cf:a3:16:
07:6f:1e:fb:fb:57:3e:ba:64:8c:d5:6b:ad:25:88:8e:d3:45:
2a:f2:cc:1e:9a:9f:7f:64:4d:43:55:c0:f4:8d:60:55:93:65:
a0:8d:b4:5b:12:cd:65:dc:19:24:e6:d9:34:86:23:02:e9:0a:
0c:13:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:56 2026 by rpki-client