Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869E15CC0B2811F1BD5B4EA3DAE4EC9C.roa
File: 869E15CC0B2811F1BD5B4EA3DAE4EC9C.roa (raw, json)
Hash identifier: JQ4GUP+O29MPAZEeXX6x/rh4xAn4H0WaugDzxDcZ3zQ=
Subject key identifier: 34:31:0B:0B:72:19:67:AB:06:9B:F3:22:FA:87:D0:60:94:FF:20:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869E15CC0B2811F1BD5B4EA3DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 11:13:31 +0000
ROA not before: Mon 16 Feb 2026 11:13:26 +0000
ROA not after: Mon 16 Mar 2026 11:13:26 +0000
asID: 22773
IP address blocks: 154.202.23.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.202.112.0/24 maxlen: 24
154.202.113.0/24 maxlen: 24
154.202.114.0/24 maxlen: 24
154.202.116.0/24 maxlen: 24
154.202.137.0/24 maxlen: 24
154.213.192.0/24 maxlen: 24
154.213.200.0/24 maxlen: 24
154.213.201.0/24 maxlen: 24
154.213.205.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113110 (0x1b9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:13:26 2026 GMT
Not After : Mar 16 11:13:26 2026 GMT
Subject: CN=6992fbdb-1ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:6d:c4:24:bb:a8:af:6b:3d:25:39:75:d1:
d1:73:46:9f:2b:a6:51:32:51:b2:00:04:20:21:1c:
f5:40:fc:ca:81:b0:90:64:71:90:dd:cc:41:3a:90:
a1:d1:87:b4:29:21:ed:27:38:4a:19:ed:de:e4:ee:
c9:42:86:a7:d7:6a:1d:b9:e6:23:17:e1:fd:34:c5:
ae:da:4d:65:52:fc:48:c9:a9:f4:71:1c:7d:62:de:
7b:1f:ae:13:7a:61:d1:a0:c2:98:15:81:ae:1a:49:
07:44:39:38:df:48:52:7c:c7:05:19:a0:0b:b1:6d:
47:29:7f:f9:b7:b5:36:90:c0:b4:93:50:b0:96:cd:
5c:47:d8:8e:8f:b3:d3:19:eb:ca:d7:8b:db:7f:a1:
ce:35:ba:8f:e9:f8:5a:f1:a3:8d:ef:c2:fe:6f:fb:
2d:cf:0b:22:59:ca:e8:13:1e:7b:78:f6:65:e2:53:
dd:5a:f9:47:79:c8:e4:b9:54:bc:18:c3:5d:5b:8b:
c6:9b:c7:c2:7c:5b:45:23:2c:45:d7:cb:83:83:28:
43:ea:5b:ab:f6:39:5e:58:7e:1c:ec:93:86:f5:1f:
aa:3d:69:9c:e0:23:9c:dc:bd:e0:59:87:ab:5f:dd:
1a:48:4b:7f:a9:a2:a7:66:de:20:f5:c0:42:c3:6b:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:31:0B:0B:72:19:67:AB:06:9B:F3:22:FA:87:D0:60:94:FF:20:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869E15CC0B2811F1BD5B4EA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.23.0-154.202.29.255
154.202.112.0-154.202.114.255
154.202.116.0/24
154.202.137.0/24
154.213.192.0/24
154.213.200.0/23
154.213.205.0/24
154.213.218.0/23
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
5e:0c:cf:8a:8e:26:9d:d1:1d:1f:34:2d:ad:1d:f0:65:d0:ec:
39:1a:93:76:e7:35:6a:52:8e:5d:1d:4d:ce:ae:60:e5:5a:12:
72:6b:24:bc:67:3c:f0:5c:6b:30:4a:d2:59:a7:2f:62:57:b4:
79:c9:a0:a4:7d:b7:20:59:bc:59:68:39:a3:91:71:23:55:c3:
fd:62:5b:54:ca:fa:dc:e4:33:bd:fc:9c:08:00:61:5e:20:15:
9c:b0:68:97:27:31:b4:48:de:10:3d:ee:88:71:b7:ba:fd:d7:
d9:fd:82:5e:19:74:fd:e1:26:23:de:f4:cb:90:94:c9:fc:3c:
01:dc:d6:2f:70:d0:60:ca:3b:21:3e:60:9a:0d:3a:00:49:61:
ac:9b:45:17:d8:45:58:6d:3a:74:22:08:83:39:0f:81:e9:d3:
64:b4:8c:0a:a8:e9:ae:dd:4c:ae:64:87:72:7b:5a:a7:f0:88:
69:a3:89:67:f3:de:e9:88:32:07:fc:7d:45:9c:1d:69:a2:2c:
4b:e3:80:86:cc:62:0b:4f:e3:60:c6:11:13:ac:54:52:c1:bf:
ea:c7:a1:99:c9:bc:17:4d:a8:83:d3:00:9b:b7:15:17:70:bd:
bb:2e:70:8d:5a:c2:19:74:c0:66:35:c9:2e:46:26:9a:10:ef:
62:e7:a3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:56:56 2026 by rpki-client