Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7861F0E40B2511F188B0AF92DAE4EC9C.roa
File: 7861F0E40B2511F188B0AF92DAE4EC9C.roa (raw, json)
Hash identifier: roLcDicJVwkyu8Tv43Bum8X38Eu00gEo8WR7Zhb7uZk=
Subject key identifier: BD:1B:83:0C:C8:96:26:5B:91:BC:E2:78:A3:FD:C0:31:0A:DF:4F:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7861F0E40B2511F188B0AF92DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 10:51:39 +0000
ROA not before: Mon 16 Feb 2026 10:51:34 +0000
ROA not after: Mon 16 Mar 2026 10:51:34 +0000
asID: 22773
IP address blocks: 154.198.20.0/24 maxlen: 24
154.198.21.0/24 maxlen: 24
154.198.22.0/24 maxlen: 24
154.198.23.0/24 maxlen: 24
154.198.24.0/24 maxlen: 24
154.198.25.0/24 maxlen: 24
154.198.26.0/24 maxlen: 24
154.198.27.0/24 maxlen: 24
154.198.28.0/24 maxlen: 24
154.202.78.0/24 maxlen: 24
154.202.79.0/24 maxlen: 24
154.202.80.0/24 maxlen: 24
154.202.81.0/24 maxlen: 24
154.202.82.0/24 maxlen: 24
154.202.83.0/24 maxlen: 24
154.202.84.0/24 maxlen: 24
154.202.85.0/24 maxlen: 24
154.202.88.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
154.202.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113100 (0x1b9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:51:34 2026 GMT
Not After : Mar 16 10:51:34 2026 GMT
Subject: CN=6992f6bb-9b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:b4:91:b2:8c:03:b8:eb:53:80:5d:12:0f:
b0:70:93:0a:ac:bd:6c:7e:bc:bb:d1:59:93:7b:80:
e5:20:f0:e7:93:cb:7f:c5:bd:e9:95:a3:59:48:cc:
f6:44:3f:d9:e7:0e:80:fd:30:05:53:8a:d1:fb:d8:
8b:5d:78:02:b4:20:93:d8:18:c4:93:35:7c:1f:f8:
17:94:d1:b7:83:61:45:06:29:16:9e:c2:80:0d:21:
0a:be:5c:31:03:f7:9a:8e:5e:2e:58:cf:9d:48:07:
2a:aa:ad:43:80:5e:f0:82:dd:0e:22:6f:fd:55:40:
19:7d:18:ea:73:55:a2:71:02:b4:49:8c:1c:5a:eb:
5e:72:92:fe:97:d0:51:3d:a7:f1:34:41:b7:8f:dd:
b5:52:45:c4:99:65:27:35:b4:70:d6:83:1b:54:0d:
76:3f:2f:8e:04:48:85:af:92:fc:4e:3a:09:4c:a7:
61:cb:dd:38:b1:d4:42:cd:f1:55:3d:90:d2:ae:65:
70:12:6a:a9:12:40:fc:e6:ae:a5:af:c8:6a:bb:9a:
e6:c7:13:f1:d8:8b:6a:bc:71:71:5f:55:f3:e9:90:
4e:1b:bb:88:b3:93:e2:ac:d9:77:7f:ff:2c:e7:e1:
ab:1d:c2:f6:77:e4:f5:76:e3:74:00:63:17:4c:1f:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1B:83:0C:C8:96:26:5B:91:BC:E2:78:A3:FD:C0:31:0A:DF:4F:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7861F0E40B2511F188B0AF92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0-154.198.28.255
154.202.78.0-154.202.85.255
154.202.88.0/24
154.202.108.0/24
154.202.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:cf:a6:46:36:ef:bf:c8:45:25:3c:20:71:b4:be:ca:66:0e:
f7:85:49:4f:82:8d:3f:16:8a:a1:a8:76:69:32:e4:c0:b8:97:
b2:f5:49:c8:c8:f7:a3:29:ac:cf:fb:da:50:f8:32:58:be:30:
e4:93:a0:81:63:46:64:2c:8e:7d:fe:52:6f:7d:87:90:ae:12:
4b:a0:30:cf:71:b8:d2:1b:c2:a4:83:6b:43:9a:af:61:3c:2d:
71:56:d5:81:3d:45:97:5b:36:b9:8d:bc:1c:19:67:65:57:95:
bc:bf:4b:9d:6f:8b:3a:4b:fb:a9:97:c4:98:29:b7:e2:ec:7d:
29:29:56:a3:d5:cb:49:06:95:47:34:bb:67:c7:25:f4:2e:20:
b8:54:b3:ad:f8:38:d4:a4:61:06:81:f7:ea:2c:59:76:43:93:
0d:85:9c:32:32:de:04:f4:e4:da:e2:f9:43:db:4d:85:a7:f9:
c5:02:17:d7:5e:05:db:4f:94:52:b3:ae:07:da:b0:13:b1:c0:
ec:04:14:f6:0a:68:79:a7:c3:94:6a:79:79:87:62:d9:bb:b9:
cc:15:ba:b4:f1:84:df:75:db:67:0d:47:cd:7a:e5:d0:82:dc:
3f:c3:5a:8a:63:cc:3a:50:e3:64:31:60:7f:79:e1:36:4a:42:
0a:2c:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:41 2026 by rpki-client