Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FBF5ADC0A9611F19E004B99DAE4EC9C.roa
File: 2FBF5ADC0A9611F19E004B99DAE4EC9C.roa (raw, json)
Hash identifier: SQY6fJLZbBAhu4BBEl3qiUEkn7n1ahTj1eSLAc9Mx+g=
Subject key identifier: E3:5D:1D:33:38:5F:19:05:B4:D8:2D:64:D3:3C:37:BE:22:A4:E4:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B996
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FBF5ADC0A9611F19E004B99DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 17:45:59 +0000
ROA not before: Sun 15 Feb 2026 17:45:54 +0000
ROA not after: Fri 27 Feb 2026 17:45:54 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.194.63.0/24 maxlen: 24
154.194.66.0/24 maxlen: 24
154.194.240.0/23 maxlen: 24
154.198.6.0/23 maxlen: 24
154.198.14.0/23 maxlen: 24
154.198.17.0/24 maxlen: 24
154.198.18.0/23 maxlen: 24
154.198.190.0/24 maxlen: 24
154.202.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113046 (0x1b996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 17:45:54 2026 GMT
Not After : Feb 27 17:45:54 2026 GMT
Subject: CN=69920657-fcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:16:cf:77:43:4c:6a:8a:a8:d5:58:b6:f4:
1d:22:de:0c:81:f1:05:53:78:ff:2e:da:be:51:91:
a1:fe:16:28:a6:c7:25:57:c3:06:fa:6b:b3:b7:6a:
15:0b:57:09:62:4a:27:fe:92:8c:ac:bf:0e:a7:3a:
25:de:e5:3f:dc:f9:33:4d:c3:4b:db:5f:ec:37:ad:
37:d7:62:a0:19:10:80:45:b9:d3:50:f2:de:ec:c9:
33:28:b5:be:68:a4:8e:d8:68:cf:9d:32:65:e4:ad:
31:e0:3a:9f:13:15:f3:4f:2d:c8:03:2b:7d:59:d6:
4a:7d:f3:0d:4a:fc:a9:a3:21:a6:37:63:96:1e:32:
65:c0:bd:c8:6b:45:14:93:05:72:29:82:2b:39:c2:
59:00:19:80:4b:93:a4:e6:22:78:ab:1e:96:05:65:
32:ad:0d:47:b0:94:a2:c3:d4:cf:f7:07:23:ad:91:
be:44:25:c5:7b:02:98:c2:83:82:9f:a9:4d:8b:bb:
e7:89:9c:81:60:ea:17:8f:64:e4:cf:6b:bf:0d:32:
31:10:5d:4b:b0:33:d1:13:b0:39:20:fa:e3:a4:73:
1f:c7:c4:c1:1c:df:81:7c:8c:c3:6e:c0:3d:f8:63:
e7:4c:78:43:72:d0:f4:28:e3:95:33:d7:2e:2d:93:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5D:1D:33:38:5F:19:05:B4:D8:2D:64:D3:3C:37:BE:22:A4:E4:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FBF5ADC0A9611F19E004B99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.194.63.0/24
154.194.66.0/24
154.194.240.0/23
154.198.6.0/23
154.198.14.0/23
154.198.17.0-154.198.19.255
154.198.190.0/24
154.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:50:b5:68:0a:14:d1:ce:38:10:0f:1f:dd:a3:e4:6a:fe:1b:
02:75:9a:0e:eb:c8:8b:87:64:b6:b1:95:bf:fa:9e:d8:a8:d8:
ae:6d:6c:d8:7f:74:1f:02:6b:5a:a8:f3:29:ce:06:cb:79:ed:
b1:c8:8c:99:aa:13:92:6a:c4:5b:ed:9c:11:6c:3a:8c:ec:bf:
b0:cc:fc:c8:d8:4d:4a:00:c4:8d:fe:c3:0b:24:61:a0:1e:18:
19:dc:57:ca:a4:e4:8f:9e:1b:2b:e7:5c:3c:1a:da:0c:e8:d4:
73:ce:c2:49:cd:38:43:f6:e2:b0:6f:9d:f1:4d:20:61:07:30:
ba:ae:94:94:58:45:a2:a5:ac:c8:68:f4:f9:96:5f:f2:cd:78:
9d:75:42:ed:4f:c5:18:78:6c:28:f9:97:6e:21:3c:fd:a5:77:
bf:b7:dd:7a:8f:41:63:87:40:37:f3:a3:77:e7:e1:54:8a:53:
28:52:77:97:b3:c0:78:a7:c4:dc:5e:19:81:e7:72:42:72:db:
b6:ad:8c:d3:69:64:06:7c:54:f3:95:25:45:20:99:60:a5:59:
93:82:6f:03:43:f1:c5:00:98:2f:a0:75:cf:f5:16:72:1d:11:
66:12:ee:c5:87:4b:16:8f:e1:cc:d3:ce:5b:4b:0b:96:5e:cb:
93:93:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:37 2026 by rpki-client