Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA391C00B2411F1A5BC8C8ADAE4EC9C.roa
File: 5BA391C00B2411F1A5BC8C8ADAE4EC9C.roa (raw, json)
Hash identifier: Bs29UTrGUWHMrmigc/zYPpwthve5Dlyq0pcDeRr7ZJg=
Subject key identifier: E3:BB:BE:DF:F6:8B:9C:52:CC:E4:C1:9F:02:1D:47:65:4A:3F:2D:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA391C00B2411F1A5BC8C8ADAE4EC9C.roa
Signing time: Mon 16 Feb 2026 10:43:41 +0000
ROA not before: Mon 16 Feb 2026 10:43:36 +0000
ROA not after: Tue 17 Mar 2026 10:43:36 +0000
asID: 22773
IP address blocks: 154.85.13.0/24 maxlen: 24
154.85.121.0/24 maxlen: 24
154.85.122.0/24 maxlen: 24
154.94.32.0/24 maxlen: 24
154.94.36.0/23 maxlen: 24
154.94.40.0/24 maxlen: 24
154.94.43.0/24 maxlen: 24
154.94.44.0/24 maxlen: 24
154.94.47.0/24 maxlen: 24
154.94.51.0/24 maxlen: 24
154.94.52.0/23 maxlen: 24
154.94.56.0/24 maxlen: 24
154.94.59.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113098 (0x1b9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:43:36 2026 GMT
Not After : Mar 17 10:43:36 2026 GMT
Subject: CN=6992f4dd-0715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:44:d9:25:be:d4:c2:c4:bf:4b:81:83:06:
79:18:22:f4:5c:6e:76:af:14:b3:34:1a:fb:3a:74:
cb:ce:5c:a2:42:f2:08:28:5b:55:98:7b:07:dd:69:
c5:8b:d8:f4:a2:a8:7e:53:3d:72:32:40:09:e3:a9:
bc:6f:f1:13:d4:92:e9:c9:fd:43:8f:f4:77:cd:64:
8e:00:65:78:cf:f3:43:ac:60:10:10:3c:c5:0b:a6:
fa:0d:16:87:f7:59:82:70:ea:11:ca:d6:e7:ff:bc:
4d:8d:36:60:f7:51:fd:37:11:ee:7d:21:56:9d:55:
09:d5:43:e9:a3:ec:b7:f5:4e:8a:f4:12:78:3e:3b:
0e:9c:f0:68:f9:d3:4a:22:e1:72:68:72:cd:c4:e1:
a6:79:0d:1e:44:87:a0:be:48:3e:73:83:0d:90:60:
26:fa:7b:8c:0f:ee:01:a1:b8:e3:1c:56:df:47:05:
65:83:4d:c4:1b:a8:38:28:a2:df:7e:da:aa:3e:25:
f5:33:f5:62:22:ae:7f:48:00:8a:18:f3:1a:7f:d4:
d4:c4:48:d4:20:98:b0:9c:c3:d8:d5:dd:11:d2:b3:
db:dd:ba:12:1a:85:30:1f:7e:12:14:ee:a7:fb:4f:
b3:f5:d2:76:cd:9a:f2:eb:e0:46:98:6e:68:14:ba:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:BE:DF:F6:8B:9C:52:CC:E4:C1:9F:02:1D:47:65:4A:3F:2D:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BA391C00B2411F1A5BC8C8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.13.0/24
154.85.121.0-154.85.122.255
154.94.32.0/24
154.94.36.0/23
154.94.40.0/24
154.94.43.0-154.94.44.255
154.94.47.0/24
154.94.51.0-154.94.53.255
154.94.56.0/24
154.94.59.0/24
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:af:11:5c:d4:c6:31:7c:15:e4:ac:9d:56:7f:3a:e7:42:46:
9f:d3:8e:9a:3f:b5:ea:6a:b4:31:b6:c4:82:00:26:b0:55:d5:
77:02:eb:ea:01:ca:95:77:24:dc:5c:34:65:ec:ae:37:21:53:
db:00:60:14:03:29:37:c4:f4:e6:98:47:a6:b8:9e:fa:6b:54:
40:56:30:f9:c3:8d:ef:f6:fc:b9:21:40:1c:26:39:a9:96:f9:
24:f5:40:a4:25:11:48:ea:3f:63:f4:e4:94:d0:f2:8a:cb:cc:
ad:e1:b4:94:3b:f3:4b:5f:72:93:09:7d:a0:e3:12:a3:f2:c9:
d7:1a:b1:d7:04:a3:1f:0a:67:b1:1c:c3:4a:c1:1f:00:18:5d:
c5:cb:71:f7:1e:82:9f:00:92:bb:12:70:1a:fd:08:2c:4b:19:
96:1b:28:73:5a:b0:ad:ea:e0:62:29:dd:7e:c9:03:88:da:db:
81:50:40:00:16:34:e1:ac:2b:dc:3b:2e:b1:e2:72:f7:03:e4:
ed:3b:40:9c:9d:26:89:f7:c2:11:97:21:ed:33:f6:37:89:8d:
aa:23:08:0a:97:e1:8a:fd:23:07:0b:38:81:ac:c5:0a:aa:65:
a2:3d:ba:0f:e8:cc:6c:b4:7c:87:e7:d8:9c:be:51:7a:4a:58:
07:ee:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:56:57 2026 by rpki-client