Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E430440B2911F1A1D14CABDAE4EC9C.roa
File: A7E430440B2911F1A1D14CABDAE4EC9C.roa (raw, json)
Hash identifier: 9z59yXMfABGKgtLwply6+BFRHXn6ktX/JkThMWPj2IY=
Subject key identifier: 8E:25:9C:EE:87:AC:6C:A1:D7:68:D4:E8:7F:67:AC:E3:05:D4:CA:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E430440B2911F1A1D14CABDAE4EC9C.roa
Signing time: Mon 16 Feb 2026 11:21:55 +0000
ROA not before: Mon 16 Feb 2026 11:21:27 +0000
ROA not after: Tue 17 Mar 2026 11:21:27 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.194.6.0/24 maxlen: 24
154.194.63.0/24 maxlen: 24
154.194.66.0/24 maxlen: 24
154.194.240.0/23 maxlen: 24
154.198.6.0/23 maxlen: 24
154.198.14.0/23 maxlen: 24
154.198.17.0/24 maxlen: 24
154.198.18.0/23 maxlen: 24
154.198.190.0/24 maxlen: 24
154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
154.202.69.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.73.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.99.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
154.202.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113114 (0x1b9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:21:27 2026 GMT
Not After : Mar 17 11:21:27 2026 GMT
Subject: CN=6992fdd3-cb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:7f:3b:f4:07:c2:3d:14:fa:23:be:25:fa:
94:eb:f5:2e:3a:61:6c:d4:bb:07:a2:d9:ac:28:51:
ab:9f:b1:dd:ba:1c:49:03:14:57:69:0f:ae:93:9e:
c3:66:c3:aa:09:68:e8:76:2b:62:78:3a:cf:14:98:
93:b0:d7:c5:8b:9e:09:92:d3:26:e1:22:e1:c2:9d:
a8:83:aa:fb:32:8c:2e:dd:59:99:98:c3:7c:82:c4:
c7:3f:6c:af:e0:87:4c:f4:2f:41:4a:0e:ce:d0:d4:
3c:55:86:3e:95:46:0f:a1:b7:60:18:06:2f:83:09:
90:52:08:9d:ad:cb:b1:13:af:4e:9e:af:11:97:a9:
05:fb:ef:bc:3f:5d:89:15:84:67:84:f6:e4:34:a6:
89:77:cd:d7:3e:b2:bd:45:1a:a8:6d:79:46:db:64:
00:17:6b:08:d3:64:d0:9c:86:1f:6e:d3:04:d5:13:
60:01:c9:bf:ec:ff:90:a6:17:d7:67:8b:e3:e3:7a:
a6:df:46:c2:cb:9d:27:f9:23:85:01:ca:8f:99:72:
5b:1d:9d:21:fc:2c:b5:3a:21:8a:e6:00:e6:76:d7:
cb:ac:34:51:a8:ad:85:70:8c:70:0d:10:4f:ea:79:
14:db:12:38:48:4a:60:09:57:7d:7a:cd:10:b0:a9:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:9C:EE:87:AC:6C:A1:D7:68:D4:E8:7F:67:AC:E3:05:D4:CA:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7E430440B2911F1A1D14CABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.194.6.0/24
154.194.63.0/24
154.194.66.0/24
154.194.240.0/23
154.198.6.0/23
154.198.14.0/23
154.198.17.0-154.198.19.255
154.198.190.0/24
154.202.30.0/23
154.202.69.0/24
154.202.72.0/23
154.202.76.0/23
154.202.99.0/24
154.202.109.0-154.202.110.255
Signature Algorithm: sha256WithRSAEncryption
d1:f0:36:d2:c4:43:42:38:e2:02:ac:8c:e8:a1:a5:90:52:68:
10:78:07:b8:ce:97:e8:23:c1:6c:5c:54:b9:78:d2:94:06:0c:
67:8f:f8:d7:ea:f4:06:13:bd:5a:2e:4a:54:f0:24:58:a0:36:
5b:6d:76:84:8b:d8:fd:da:7b:70:93:f1:e7:f5:d1:2c:e7:a9:
eb:3d:68:ae:2a:c9:8b:20:c1:d9:94:7f:a0:ca:10:a4:80:ba:
b9:b4:04:af:7b:5b:3e:1e:7d:b8:26:b9:d0:35:09:19:11:f5:
67:d5:d3:b7:e2:98:4f:5a:2d:54:c4:06:91:93:cb:cd:d5:da:
9f:90:72:9a:0c:68:c9:d7:55:36:76:94:02:aa:79:a6:46:d2:
e0:ff:2a:c7:b4:a1:14:6d:07:18:36:ae:a7:cb:74:38:c2:d3:
7a:2e:18:63:0f:e4:7a:59:bf:97:3b:d5:19:d8:f1:ff:ca:74:
d5:b5:68:24:f1:b5:4d:23:7b:e5:19:39:be:f5:e6:13:17:4c:
dc:98:ba:7c:5e:f3:6b:40:29:1f:4b:7b:5b:7e:51:18:2e:be:
ce:77:93:53:bb:d1:25:2d:c4:e9:df:e8:87:a8:43:7b:15:81:
cb:ac:f0:ec:93:8e:2c:02:8e:bf:18:d2:6a:2b:98:83:65:b7:
39:3e:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:56:56 2026 by rpki-client