Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87852D420B2611F1AC5DC298DAE4EC9C.roa
File: 87852D420B2611F1AC5DC298DAE4EC9C.roa (raw, json)
Hash identifier: UR09oGa8LUjnTdRsNQuSoz+t7dMP6Qv/Gj83j8Phe64=
Subject key identifier: BF:1F:95:5D:1A:62:7F:5C:75:A3:7C:51:B3:B1:40:65:3F:6E:6E:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87852D420B2611F1AC5DC298DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 10:59:14 +0000
ROA not before: Mon 16 Feb 2026 10:59:06 +0000
ROA not after: Mon 16 Mar 2026 10:59:06 +0000
asID: 22773
IP address blocks: 154.198.29.0/24 maxlen: 24
154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.198.44.0/24 maxlen: 24
154.198.45.0/24 maxlen: 24
154.198.46.0/24 maxlen: 24
154.198.47.0/24 maxlen: 24
154.202.2.0/24 maxlen: 24
154.202.5.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
154.202.90.0/24 maxlen: 24
154.202.92.0/24 maxlen: 24
154.202.93.0/24 maxlen: 24
154.202.94.0/24 maxlen: 24
154.202.95.0/24 maxlen: 24
154.202.96.0/24 maxlen: 24
154.202.97.0/24 maxlen: 24
154.202.98.0/24 maxlen: 24
154.202.102.0/24 maxlen: 24
154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113102 (0x1b9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:59:06 2026 GMT
Not After : Mar 16 10:59:06 2026 GMT
Subject: CN=6992f882-a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:46:ff:c5:c3:d2:d3:68:18:83:e8:91:73:
33:a5:91:89:9a:53:e6:74:68:e0:b9:2a:e7:3c:0a:
b7:a7:b7:15:7f:f6:1a:b1:68:d9:8a:ee:46:e0:2f:
d1:f2:32:6e:1f:e6:82:4d:a6:d9:3a:4f:8e:af:5f:
4d:4b:ac:8e:cf:d8:9b:ac:72:2c:98:fb:6f:82:a9:
11:d7:3a:7d:71:64:bb:04:8c:2d:32:5d:ca:97:c0:
ff:4c:51:f4:59:1a:13:b0:13:34:87:25:d7:c4:69:
f4:31:9e:f0:8a:9d:d8:f2:a7:6a:ae:a5:37:21:06:
3b:69:39:93:63:5d:ae:89:10:97:4f:3f:fb:1c:95:
f7:c0:18:a5:3e:39:10:d1:c9:0c:0c:d3:ba:11:61:
eb:9c:77:f6:57:0a:ed:df:b4:4d:38:a2:b6:af:f2:
41:52:15:f8:d8:aa:a4:4c:7d:69:bb:66:19:bb:83:
af:88:74:45:e4:0c:09:b4:c7:dc:d2:21:83:73:78:
ea:93:de:26:ae:fd:10:fa:89:df:3f:09:d5:03:cf:
5b:6a:0b:53:36:12:50:1a:5e:94:a7:f3:c8:c5:1a:
17:84:69:73:fb:83:c8:67:5d:35:70:0c:11:2a:9a:
ca:34:0e:4c:2b:b1:30:a1:1d:91:ca:a7:37:d5:04:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1F:95:5D:1A:62:7F:5C:75:A3:7C:51:B3:B1:40:65:3F:6E:6E:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87852D420B2611F1AC5DC298DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.29.0-154.198.31.255
154.198.44.0/22
154.202.2.0/24
154.202.5.0/24
154.202.12.0/24
154.202.90.0/24
154.202.92.0-154.202.98.255
154.202.102.0/24
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f2:75:db:50:4a:cc:cf:bd:f0:ff:f3:a5:b0:17:76:b3:72:
e2:0c:a6:ef:e6:33:27:ef:17:3b:56:23:7e:2f:cf:ab:62:4b:
64:9a:2a:6d:0f:31:8f:78:44:bf:4d:fb:e2:a8:d0:e9:ec:d6:
80:93:94:0b:89:e7:a6:8f:46:1c:fe:d9:72:2a:9d:60:1f:1f:
46:db:83:b6:ea:22:21:c2:76:00:5e:d5:6f:37:e8:08:83:7a:
cf:55:52:20:2b:2e:e5:77:51:d7:0f:74:ca:b0:d0:a3:c4:55:
7c:71:27:3e:9e:07:39:0b:f3:a5:31:b3:c1:b9:1d:0e:3b:1c:
ba:27:f3:f7:07:96:ba:11:ae:43:85:9b:77:44:27:ff:11:79:
4a:ae:7d:bb:5b:b1:4e:a8:e3:d5:9e:1a:28:d2:37:47:08:3e:
1e:9c:18:b6:83:cb:2b:d1:ab:da:90:cc:81:c5:7d:bf:2b:22:
b0:c7:b9:d9:38:23:1a:93:d6:a2:98:7d:76:28:c5:94:7a:61:
e4:b4:3f:23:84:48:d7:68:9c:33:28:61:70:ca:3f:a6:29:21:
cd:e3:0c:db:f5:29:cb:ab:8f:79:03:e6:19:48:eb:e4:65:27:
7e:83:3f:9c:f2:e3:fd:41:7e:ce:09:ec:52:fe:d6:6d:85:47:
a2:e9:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:57:02 2026 by rpki-client