Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32EFB6A80A9011F19C488DF2DAE4EC9C.roa
File: 32EFB6A80A9011F19C488DF2DAE4EC9C.roa (raw, json)
Hash identifier: SRhjnCmnz6Ew4NykVwwcPz+6adl21HXd8p7XsH0y+fk=
Subject key identifier: 07:66:ED:3B:59:0E:39:C4:FF:60:C8:AB:FD:04:45:13:2D:1E:74:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B988
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32EFB6A80A9011F19C488DF2DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 17:03:07 +0000
ROA not before: Sun 15 Feb 2026 17:03:03 +0000
ROA not after: Thu 26 Feb 2026 17:03:03 +0000
asID: 22773
IP address blocks: 154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113032 (0x1b988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 17:03:03 2026 GMT
Not After : Feb 26 17:03:03 2026 GMT
Subject: CN=6991fc4b-491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:7b:be:e7:2d:f1:52:88:c4:11:86:27:9d:
70:5a:45:80:42:f3:a3:7b:b3:50:0c:19:eb:89:d2:
b2:d9:17:28:70:50:4a:d6:2c:9c:27:ae:a7:91:70:
cb:c8:d1:44:e5:c7:5f:57:54:0f:ae:35:04:82:d5:
5c:59:73:6c:7d:58:80:5c:f1:73:ac:70:31:85:52:
cf:ba:df:e7:3b:07:a7:15:33:1b:5e:a7:a8:6d:3c:
6b:a8:51:25:23:46:83:04:4a:8b:90:e0:8e:1f:4f:
56:ab:59:35:1e:f7:ec:74:cc:59:d6:84:ab:d4:e5:
05:a7:74:01:91:9e:d8:97:0c:b3:b4:72:07:1d:63:
bd:fc:b8:2b:94:45:41:d4:8d:1d:82:98:8b:db:64:
db:fd:7e:08:ef:41:80:3f:3c:bd:6d:64:5d:d8:24:
a7:d5:e4:fc:64:9a:24:90:94:ec:56:dc:48:0e:e7:
b5:42:56:05:b4:e1:24:bb:8a:52:b2:f6:47:12:06:
69:b3:ed:7c:4d:43:da:19:b4:ba:f5:37:6d:e3:ed:
78:20:38:16:bd:66:7b:a1:1e:c0:4e:e7:89:83:68:
11:4b:7b:f4:6d:3d:1b:fa:f1:ea:aa:8b:94:1d:f9:
ea:c3:b4:fe:ee:f4:fb:43:64:b5:3e:6e:86:f1:d2:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:66:ED:3B:59:0E:39:C4:FF:60:C8:AB:FD:04:45:13:2D:1E:74:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32EFB6A80A9011F19C488DF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:65:61:64:cb:75:29:03:78:d5:0e:ce:ad:64:44:8f:c2:2b:
82:63:1c:81:77:98:3b:6a:61:58:0b:2f:44:fb:f4:d0:4a:f2:
50:a5:c0:0c:ad:2b:c3:f4:c8:70:16:d7:9d:51:ab:96:e8:3f:
e7:7d:01:3e:b7:2c:f3:ff:31:16:97:42:2c:16:b4:40:9a:a4:
26:54:47:f9:90:be:71:7d:9e:09:be:22:57:ee:75:76:8a:9f:
6d:78:4e:d1:ae:6a:95:db:92:c6:22:d0:64:f8:4a:8b:7b:b6:
19:7a:0b:60:c5:05:e2:63:fd:97:2a:c0:29:f7:51:2e:db:44:
03:95:3f:17:35:c6:69:98:50:b2:1c:5e:9d:b7:ed:87:cc:72:
7f:d3:6d:16:e8:8b:f7:05:43:0e:1e:de:f3:6f:a4:42:5c:02:
34:42:57:e0:5a:14:bb:b5:a3:ba:b3:94:9d:29:98:76:be:a5:
1a:ed:98:0d:a0:17:a6:b3:3c:e8:6d:40:76:27:2f:23:67:a4:
ac:f1:24:9e:e0:b5:6c:d2:2f:ad:78:6c:94:82:63:c4:6b:42:
a6:8c:20:40:57:2d:41:e6:aa:5b:91:0a:2d:80:bc:ed:88:c1:
c6:07:c3:ec:66:b2:92:37:f6:20:fb:46:02:39:87:c5:85:e7:
50:d8:ad:87
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAbmIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE1MTcwMzAzWhcNMjYwMjI2MTcwMzAzWjAYMRYw
FAYDVQQDEw02OTkxZmM0Yi00OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlBh7vuct8VKIxBGGJ51wWkWAQvOje7NQDBnridKy2RcocFBK1iycJ66n
kXDLyNFE5cdfV1QPrjUEgtVcWXNsfViAXPFzrHAxhVLPut/nOwenFTMbXqeobTxr
qFElI0aDBEqLkOCOH09Wq1k1HvfsdMxZ1oSr1OUFp3QBkZ7YlwyztHIHHWO9/Lgr
lEVB1I0dgpiL22Tb/X4I70GAPzy9bWRd2CSn1eT8ZJokkJTsVtxIDue1QlYFtOEk
u4pSsvZHEgZps+18TUPaGbS69Tdt4+14IDgWvWZ7oR7ATueJg2gRS3v0bT0b+vHq
qouUHfnqw7T+7vT7Q2S1Pm6G8dI1AwIDAQABo4ICvzCCArswHQYDVR0OBBYEFAdm
7TtZDjnE/2DIq/0ERRMtHnRpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMkVGQjZBODBBOTAxMUYxOUM0ODhERjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmspaMAwDBAKaylwDBACa
ymIDBACaymYDBACaymswDQYJKoZIhvcNAQELBQADggEBAFxlYWTLdSkDeNUOzq1k
RI/CK4JjHIF3mDtqYVgLL0T79NBK8lClwAytK8P0yHAW151Rq5boP+d9AT63LPP/
MRaXQiwWtECapCZUR/mQvnF9ngm+IlfudXaKn214TtGuapXbksYi0GT4Sot7thl6
C2DFBeJj/ZcqwCn3US7bRAOVPxc1xmmYULIcXp237YfMcn/TbRboi/cFQw4e3vNv
pEJcAjRCV+BaFLu1o7qzlJ0pmHa+pRrtmA2gF6azPOhtQHYnLyNnpKzxJJ7gtWzS
L614bJSCY8RrQqaMIEBXLUHmqluRCi2AvO2IwcYHw+xmspI39iD7RgI5h8WF51DY
rYc=
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:37 2026 by rpki-client