Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4277C6E2E8011F1998C0DB0DAE4EC9C.roa
File: C4277C6E2E8011F1998C0DB0DAE4EC9C.roa (raw, json)
Hash identifier: hX/OQJHub6relIIQPi85UiVC9vIRcjLAa4HrqkqJ0q4=
Subject key identifier: 6C:91:4E:DE:83:79:C1:08:F3:7E:92:5B:15:F1:7F:D9:AC:97:12:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C235
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4277C6E2E8011F1998C0DB0DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 10:43:21 +0000
ROA not before: Thu 02 Apr 2026 10:43:16 +0000
ROA not after: Wed 06 May 2026 10:43:16 +0000
asID: 202656
IP address blocks: 154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115253 (0x1c235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 10:43:16 2026 GMT
Not After : May 6 10:43:16 2026 GMT
Subject: CN=69ce4849-b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:cf:ea:0c:5d:db:9f:0f:d7:22:66:2f:02:
c5:98:35:24:4e:67:20:1a:24:71:6b:33:b9:a3:79:
9f:ad:07:5b:8d:63:1c:93:e6:cc:5f:b7:ef:4d:e9:
e8:cb:5c:94:32:93:17:95:0a:8d:a9:f3:d7:ca:de:
2d:8e:df:08:9d:ac:52:cc:1b:56:45:8e:f6:e0:23:
83:f7:f5:4a:71:c3:c1:d9:16:ae:58:38:49:4b:bd:
4b:70:9a:9f:a6:aa:0c:2d:ee:70:65:dd:19:0d:71:
ab:5c:c2:8f:9a:da:db:e3:2b:7a:72:f1:18:41:57:
c5:97:6e:d6:ea:1d:1d:58:0f:c2:88:97:92:a5:fd:
f1:ce:0d:a1:9f:d2:c4:a6:33:78:a8:3c:a3:f0:b5:
71:3f:45:14:f3:6d:31:de:97:0f:7d:d2:b1:5b:e4:
eb:21:6c:cb:5b:89:35:d0:92:de:65:fd:2e:59:7a:
5e:d9:32:60:f1:dd:fe:a2:99:19:73:f8:93:3c:c1:
c3:fc:73:e0:2f:74:b5:96:4c:ef:92:54:2d:7e:ed:
af:52:b9:ab:c1:ce:13:b1:6d:78:f4:af:74:a1:2a:
2e:78:89:42:77:14:50:7b:f7:a0:03:82:0e:0a:1a:
25:48:91:fe:29:3d:30:53:05:65:fb:35:7e:36:ea:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:4E:DE:83:79:C1:08:F3:7E:92:5B:15:F1:7F:D9:AC:97:12:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4277C6E2E8011F1998C0DB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.237.0-154.219.243.255
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d5:14:1f:3e:5e:0c:9c:f8:ca:41:1d:2f:1b:16:b5:b7:a2:
fb:d0:5d:38:2d:f6:95:4a:d3:6c:32:1d:cb:dd:d0:d9:4a:ef:
03:ac:b3:6a:5b:0b:dc:3e:ac:01:a7:13:78:e6:9a:84:e0:ae:
73:47:4c:fa:48:00:66:47:39:55:3a:1f:52:10:cd:8a:72:95:
0d:80:4c:23:79:c9:19:df:58:3d:9e:85:ea:4e:0e:85:17:fc:
9b:e9:ce:ef:e5:9f:54:e8:b6:e4:86:88:e4:b9:0f:eb:9c:43:
2d:22:58:31:5a:97:62:a4:04:7b:49:78:ac:a7:a4:f4:4d:82:
77:fc:c8:38:7a:0a:58:2a:69:48:83:f8:9b:0e:49:fe:cb:11:
a9:79:07:d3:3d:c4:d6:6d:2e:50:55:eb:23:95:29:95:0a:c5:
02:2c:82:48:fd:05:6b:27:43:bf:81:35:79:0f:b5:38:0a:33:
76:63:52:3f:70:7e:e5:58:50:77:73:31:37:ac:b8:08:06:76:
47:9f:c2:f3:a3:c7:b6:28:29:5c:74:87:64:ed:dc:e3:30:a2:
88:e6:07:4c:be:86:2e:8c:08:f4:f5:28:91:fb:0f:58:e9:72:
95:b3:70:e9:ec:1e:b1:20:49:aa:e6:61:0b:c4:d5:6b:09:a9:
7c:1b:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:32 2026 by rpki-client