Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E9F8E043A011F187E36318CF1D38B0.roa
File: C4E9F8E043A011F187E36318CF1D38B0.roa (raw, json)
Hash identifier: 7Q9S3Xp76b3AlhPglC9CDRayDVuNA1GWU8rglWnop2k=
Subject key identifier: 29:42:1E:B8:E5:BA:EE:26:AF:51:0E:05:74:4C:84:59:5B:4E:8E:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E9F8E043A011F187E36318CF1D38B0.roa
Signing time: Wed 29 Apr 2026 07:55:21 +0000
ROA not before: Wed 29 Apr 2026 07:55:16 +0000
ROA not after: Thu 04 Jun 2026 07:55:16 +0000
asID: 199707
IP address blocks: 154.202.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116678 (0x1c7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 07:55:16 2026 GMT
Not After : Jun 4 07:55:16 2026 GMT
Subject: CN=69f1b968-7e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:ed:90:09:c2:6f:53:91:45:87:ac:04:ce:
1f:c8:5d:a3:af:90:e1:20:8c:c7:29:33:b8:8b:ba:
dc:bd:46:d1:83:c9:75:c3:d1:68:c9:49:04:11:f6:
93:be:3a:bc:27:22:42:34:a1:89:38:c5:d0:bc:f4:
43:ef:c8:18:7f:dc:0d:84:18:bc:b8:14:09:c5:81:
ab:0d:b0:0a:62:e6:e2:ae:d5:8d:fd:1d:bc:e8:73:
b2:ea:77:7f:94:34:0f:a5:77:e8:47:16:50:81:a3:
88:e8:ae:c0:54:9b:80:59:40:e8:5c:37:88:d4:68:
ba:78:55:a4:d7:61:40:ec:a4:4c:c0:a9:85:c1:d7:
88:ad:e8:ab:76:b4:6d:c5:da:e3:ec:21:48:04:df:
ad:9d:76:5e:72:dc:6f:ac:c2:33:f3:3d:38:6b:f7:
ae:ba:d5:d9:8e:9d:a0:86:75:16:3d:49:5c:86:19:
a2:6d:ae:9a:3b:34:22:2f:ab:42:49:d5:58:2e:90:
81:fa:8e:b0:8a:bb:c4:e9:cb:6b:6b:60:a2:bb:2b:
f0:82:80:c7:10:27:76:3c:a5:41:db:18:6a:b9:74:
c6:67:5d:d0:f3:96:f0:e6:b3:a3:7f:9c:63:e3:50:
80:a2:e1:29:a5:de:2f:19:cb:c5:c2:b5:24:43:a6:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:42:1E:B8:E5:BA:EE:26:AF:51:0E:05:74:4C:84:59:5B:4E:8E:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E9F8E043A011F187E36318CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b6:cc:a2:90:83:01:44:71:93:2e:68:5f:74:5a:dd:77:bd:
21:ba:e6:e5:55:ef:91:79:aa:82:9d:ed:91:b5:47:70:80:00:
0d:19:c7:dd:7a:8f:2a:d5:bb:6d:ef:98:5e:be:1c:27:dd:9e:
32:65:e6:24:16:46:9c:f9:47:d6:f6:ae:fd:6a:c3:ce:bc:67:
4b:a7:d7:63:64:23:9e:e8:93:06:57:7d:e7:11:54:c7:c1:51:
44:7b:9c:74:48:40:ce:34:e0:91:cc:50:90:b3:ae:62:cf:c0:
b4:35:fb:37:20:ee:28:74:b3:b3:2c:4b:b4:38:d0:3b:93:29:
6a:41:c8:79:da:f9:82:65:03:87:9b:ab:f5:98:49:db:dc:7a:
3e:82:55:79:65:1b:2a:b5:7c:7c:ba:65:5c:d6:d1:82:0c:e9:
58:61:df:e5:4d:cc:0e:8b:2f:9a:4d:83:c7:d1:58:0c:b1:4c:
d7:df:9d:60:7e:54:cd:b7:9f:c8:02:dd:6f:64:21:7d:fe:66:
74:9c:8a:99:a1:e7:e6:64:0f:72:8c:e5:e5:ff:2a:96:0e:c9:
19:e3:fd:bf:68:c9:13:6b:7f:8a:ef:ea:15:62:e5:67:e6:1f:
97:d7:d3:92:c8:b0:89:38:73:d6:06:4b:09:5d:d9:58:fd:25:
4d:40:5f:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAcfGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDI5MDc1NTE2WhcNMjYwNjA0MDc1NTE2WjAYMRYw
FAYDVQQDEw02OWYxYjk2OC03ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvpntkAnCb1ORRYesBM4fyF2jr5DhIIzHKTO4i7rcvUbRg8l1w9FoyUkE
EfaTvjq8JyJCNKGJOMXQvPRD78gYf9wNhBi8uBQJxYGrDbAKYubirtWN/R286HOy
6nd/lDQPpXfoRxZQgaOI6K7AVJuAWUDoXDeI1Gi6eFWk12FA7KRMwKmFwdeIreir
drRtxdrj7CFIBN+tnXZectxvrMIz8z04a/euutXZjp2ghnUWPUlchhmiba6aOzQi
L6tCSdVYLpCB+o6wirvE6ctra2CiuyvwgoDHECd2PKVB2xhquXTGZ13Q85bw5rOj
f5xj41CAouEppd4vGcvFwrUkQ6ZBWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFClC
Hrjluu4mr1EOBXRMhFlbTo4ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNEU5RjhFMDQzQTAxMUYxODdFMzYzMThDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoEMA0GCSqGSIb3DQEB
CwUAA4IBAQAetsyikIMBRHGTLmhfdFrdd70huublVe+ReaqCne2RtUdwgAANGcfd
eo8q1btt75hevhwn3Z4yZeYkFkac+UfW9q79asPOvGdLp9djZCOe6JMGV33nEVTH
wVFEe5x0SEDONOCRzFCQs65iz8C0Nfs3IO4odLOzLEu0ONA7kylqQch52vmCZQOH
m6v1mEnb3Ho+glV5ZRsqtXx8umVc1tGCDOlYYd/lTcwOiy+aTYPH0VgMsUzX351g
flTNt5/IAt1vZCF9/mZ0nIqZoefmZA9yjOXl/yqWDskZ4/2/aMkTa3+K7+oVYuVn
5h+X19OSyLCJOHPWBksJXdlY/SVNQF9b
-----END CERTIFICATE-----
Generated at Sat May 9 11:03:43 2026 by rpki-client