Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E690DC63A6011F19B1C11F8CE1D38B0.roa
File: 4E690DC63A6011F19B1C11F8CE1D38B0.roa (raw, json)
Hash identifier: dt/OU7krOo7KWxrMx5xDw84HdmFjLEG2J/OqLQZYiE4=
Subject key identifier: B0:1B:4F:0A:DA:2C:C1:8B:E0:D4:70:97:93:86:CD:BB:EC:45:53:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E690DC63A6011F19B1C11F8CE1D38B0.roa
Signing time: Fri 17 Apr 2026 13:21:13 +0000
ROA not before: Fri 17 Apr 2026 13:21:08 +0000
ROA not after: Mon 25 May 2026 13:21:08 +0000
asID: 272854
IP address blocks: 154.194.13.0/24 maxlen: 24
154.194.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116191 (0x1c5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 13:21:08 2026 GMT
Not After : May 25 13:21:08 2026 GMT
Subject: CN=69e233c9-0e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:d2:17:02:6b:cb:6a:46:b5:3a:11:38:56:
d5:22:6a:73:47:da:b7:60:3a:db:dd:51:df:56:0d:
1d:33:d2:e1:9b:4f:de:08:61:42:5b:b2:19:10:62:
e6:1b:58:e2:38:00:9d:ae:ef:7e:39:81:bf:fa:df:
34:8f:1d:ba:fc:ad:55:10:b8:a7:2e:1a:26:cb:e6:
88:9f:fa:24:05:f3:4e:80:46:88:eb:d2:64:18:63:
b7:76:f7:1c:49:fb:e7:38:04:34:52:6f:17:78:7b:
e6:1c:7a:6d:bd:66:05:78:f8:7f:72:7b:2c:0d:73:
70:4e:9f:a3:75:fb:e4:6b:91:2f:50:bf:c7:07:1a:
94:f6:4a:d8:24:eb:fe:b4:15:42:8d:e1:87:f3:50:
bf:c8:4c:b6:6c:61:49:c5:ac:ff:f7:81:42:9c:d3:
7f:42:aa:89:dc:41:80:53:05:04:37:9c:a8:66:52:
1c:8e:f2:80:f6:66:ab:6a:50:04:b9:7c:da:e9:c2:
a2:0c:3d:f3:9a:e2:04:6f:59:d7:d0:c6:57:ff:ec:
01:23:c9:a0:bb:ee:91:6f:61:02:e4:ef:ad:67:4a:
6d:b4:91:5c:a7:97:89:3b:34:6c:a3:c4:83:92:db:
01:cb:25:69:14:53:be:4b:a7:74:26:42:38:a6:43:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:4F:0A:DA:2C:C1:8B:E0:D4:70:97:93:86:CD:BB:EC:45:53:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E690DC63A6011F19B1C11F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.13.0-154.194.14.255
Signature Algorithm: sha256WithRSAEncryption
72:0b:64:91:6c:20:79:f6:4d:96:94:f2:23:82:4e:7d:35:e7:
51:a2:63:8e:fd:8d:2c:4a:bd:17:19:c0:53:14:16:58:9d:64:
9e:eb:b5:23:bd:15:fc:60:04:9d:0e:0d:61:87:19:39:da:02:
80:94:a7:d5:32:95:74:a0:ad:cc:7a:c1:9b:90:83:ad:53:72:
2c:c7:d7:dd:39:99:a9:43:1c:0e:b9:64:5c:36:e2:e2:1c:41:
5c:48:df:a5:8e:3b:66:b7:97:ff:1b:2a:e5:d8:34:9d:20:8f:
02:1f:08:24:41:2b:68:47:2e:cb:ea:72:a0:ce:a7:8d:54:76:
75:8a:92:e2:bf:fb:a2:42:5a:27:a2:63:f4:f3:3f:9c:32:77:
10:99:f5:05:d5:78:ad:72:3b:f6:ff:cf:f8:75:2d:2c:f9:84:
65:7f:d8:f3:1d:5a:65:87:1c:ac:b2:0a:e6:64:9e:23:2e:30:
8e:7c:90:08:55:01:9e:f9:bb:e8:21:c5:2e:43:bc:cf:7d:45:
41:cb:09:c9:e2:03:c7:9a:1a:86:75:81:b0:ca:86:73:fe:12:
2e:e1:72:f1:15:c2:12:4a:ea:23:70:bb:95:48:b4:6c:61:ab:
d7:fa:b4:96:f3:8a:c6:b9:e4:c0:02:13:1a:4f:5f:05:51:d5:
95:cf:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:26 2026 by rpki-client