Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75D5A2980D7911F188BB7BE1DAE4EC9C.roa
File: 75D5A2980D7911F188BB7BE1DAE4EC9C.roa (raw, json)
Hash identifier: gKBcOdpOsBnN7Ak3RTEejWOkn13UZrWn+RV/q+rvpoo=
Subject key identifier: DC:A5:6B:70:C1:70:8F:FB:1C:1C:B4:B3:AA:7F:58:84:20:20:7C:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75D5A2980D7911F188BB7BE1DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 09:57:55 +0000
ROA not before: Thu 19 Feb 2026 09:57:49 +0000
ROA not after: Sat 28 Mar 2026 09:57:49 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113197 (0x1ba2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 19 09:57:49 2026 GMT
Not After : Mar 28 09:57:49 2026 GMT
Subject: CN=6996dea3-52ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:b0:9a:26:5e:52:f4:ee:75:94:84:9e:cc:
6d:37:5f:2e:cb:1f:49:a9:3b:97:56:26:55:25:bb:
94:d5:8c:a6:52:2b:36:49:31:bc:1a:37:44:a2:6a:
e7:93:f2:72:f3:14:89:a8:4d:a0:c6:41:3a:71:73:
fb:e8:19:e8:e9:57:61:fe:f1:16:7c:6f:5e:5c:03:
0a:95:21:bb:f4:af:a9:13:fe:4d:6b:cc:23:3c:64:
29:d3:4f:1e:8b:6f:6c:fd:cc:a1:90:9d:a5:5e:fd:
99:70:de:90:2c:35:ea:33:e1:8e:b3:5f:0a:50:ce:
51:a8:d3:23:f5:74:d8:34:c8:dc:78:1b:80:80:dd:
53:08:35:b4:1b:c5:f5:2d:4c:62:d8:d3:97:d3:23:
c1:07:1f:ab:2a:e9:b7:1e:63:e6:46:72:69:7d:47:
5d:d6:d2:ed:75:c1:71:12:cf:e5:4b:d0:7d:38:2a:
f5:05:93:0b:ce:4a:2d:65:3d:ad:81:6f:9e:1a:cb:
fa:59:57:8e:67:6f:98:65:9d:8c:41:1b:41:fc:a0:
b6:3c:08:9c:6d:ed:d5:95:6e:d7:c2:a1:a9:02:85:
cf:c9:a1:fe:f3:06:e6:d0:83:f5:32:68:20:a2:ef:
56:08:e7:1e:6a:be:35:49:4e:ec:f4:be:05:0a:dc:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:6B:70:C1:70:8F:FB:1C:1C:B4:B3:AA:7F:58:84:20:20:7C:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75D5A2980D7911F188BB7BE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d7:25:1c:e3:a2:7a:15:c9:8c:9a:f6:fc:dc:11:b5:d0:19:
c5:38:06:74:e3:ac:8b:76:e5:bd:79:23:f1:63:1c:c2:56:ae:
35:bd:84:e9:35:8c:98:3c:84:87:63:85:88:a3:1d:77:07:db:
0f:8d:3e:9f:60:db:68:f2:f5:0e:5e:b2:8f:65:f7:df:9e:31:
c0:bd:f1:1d:9d:84:b5:32:ef:e3:59:53:68:60:12:d7:15:4e:
eb:6e:a5:4a:9f:96:31:91:b2:00:00:ce:57:7a:93:62:07:86:
83:a3:88:da:52:8d:d0:f0:db:17:66:fe:d0:5e:1b:3a:c1:20:
c4:d9:7b:13:e7:9d:e7:53:8e:f5:2a:8c:15:a9:3f:35:a6:0a:
a5:eb:b1:2f:bd:0f:00:a6:7d:a1:49:d1:a1:a2:36:37:81:7e:
17:73:92:9c:e6:fe:b2:18:ea:ae:fa:cb:57:9f:f9:28:f9:cf:
68:5e:93:fe:45:05:bc:b9:62:39:56:43:ef:12:72:bc:76:81:
c4:39:51:80:98:51:88:9d:9b:31:4c:6c:74:55:31:74:b9:f3:
01:02:74:c8:90:d1:3e:e5:8d:a2:8c:d2:fa:c1:ce:01:c0:e2:
e2:fd:76:bc:9a:bb:a7:e4:7a:d6:b0:b8:90:14:56:30:b0:6b:
cc:be:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:46 2026 by rpki-client