Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EAB15442A8511F181D506BBDAE4EC9C.roa
File: 4EAB15442A8511F181D506BBDAE4EC9C.roa (raw, json)
Hash identifier: bXC3Tybv5cHvLLl9I41caXBR06YaGOgpIT8q06WW4os=
Subject key identifier: 38:6F:0F:F1:9D:0F:A8:28:2B:7E:2C:32:48:D4:29:7D:78:A6:65:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C143
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EAB15442A8511F181D506BBDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 09:05:47 +0000
ROA not before: Sat 28 Mar 2026 09:05:42 +0000
ROA not after: Sat 02 May 2026 09:05:42 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115011 (0x1c143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 09:05:42 2026 GMT
Not After : May 2 09:05:42 2026 GMT
Subject: CN=69c799eb-c6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:35:e2:93:c3:8a:60:80:97:0a:30:d8:6f:
82:ab:60:d3:3b:03:05:ca:d2:45:85:70:61:bc:a5:
0d:fb:36:20:33:40:cf:7f:b5:1b:da:06:b4:a5:15:
21:30:d6:18:86:76:3e:16:42:15:d6:54:3c:c8:b6:
1e:c9:9b:d3:3d:d5:ff:23:3c:fb:0e:09:80:6f:70:
e2:cc:20:7c:11:9c:d6:56:57:a9:56:4b:ea:cf:c0:
b6:99:e8:fd:85:0f:1e:be:43:e1:5c:23:89:b5:be:
a6:91:6c:c2:2c:85:c0:6e:0e:62:52:7e:dc:71:56:
2b:74:13:5f:b3:4c:3b:2a:ef:05:43:45:11:9a:d4:
17:77:f2:f4:62:d8:59:e8:ae:c8:e6:4b:50:6c:a4:
51:fd:c6:78:35:fc:3b:c2:b9:2d:fa:f1:1e:c8:d8:
ca:55:b1:f8:61:92:dd:24:75:2c:94:29:00:75:3b:
20:46:cb:5b:ca:e9:d2:c5:85:1b:64:cd:6c:27:40:
f1:7a:11:75:a4:78:01:b5:01:1a:e3:a9:40:43:d1:
4e:c2:e8:e4:04:51:d9:ca:a4:c4:95:95:8f:23:08:
4b:ca:e7:07:35:14:24:77:5a:5a:1d:e0:8b:f6:56:
2b:f5:f5:0a:c2:bd:7b:58:92:66:56:a2:ee:58:83:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:0F:F1:9D:0F:A8:28:2B:7E:2C:32:48:D4:29:7D:78:A6:65:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EAB15442A8511F181D506BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.226.0-154.205.233.255
Signature Algorithm: sha256WithRSAEncryption
3a:45:ad:16:e1:43:49:c2:a7:46:e4:a3:e6:26:db:f3:96:13:
f0:26:2b:a3:69:fe:8b:13:64:34:c1:84:63:be:d2:42:68:ee:
fc:7e:90:a2:b5:a2:a9:c5:c9:ed:3e:93:b6:59:73:9b:97:f9:
26:c2:28:ad:bf:74:e3:31:83:c3:4b:8d:ac:ce:42:f9:18:21:
a7:a7:d4:2e:39:d5:29:a1:59:01:69:70:53:07:fc:f9:73:73:
50:60:7a:4d:74:24:33:5f:fc:ac:4b:bf:9f:85:6e:65:6b:aa:
d1:0d:ad:d1:b5:54:08:8b:22:ee:39:dc:37:b0:f2:97:e3:70:
d9:da:34:7c:26:28:93:64:bd:7e:bf:b6:ea:ea:4c:15:c8:16:
87:a9:a1:70:fd:34:77:f2:bb:97:b9:d0:c6:5a:dd:2c:e7:18:
e1:a2:dd:e7:b9:42:f9:db:ea:30:51:98:f9:ee:5f:37:46:1d:
cf:9a:3f:c8:eb:48:05:4c:9e:11:ef:99:78:b2:0e:6c:0a:1a:
37:16:ee:2c:2a:02:fe:f3:21:67:7f:74:42:f7:e1:36:b7:4d:
32:31:0e:da:f1:da:af:6f:49:18:a6:4c:4e:57:97:eb:cd:0a:
c3:13:30:4b:b3:b6:94:10:77:04:56:de:1a:d2:c1:04:da:96:
77:bd:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:16 2026 by rpki-client