Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E865E486026011F1BADA99B7DAE4EC9C.roa
File: E865E486026011F1BADA99B7DAE4EC9C.roa (raw, json)
Hash identifier: S+UTAuE7pHeoTbBJ1JoE3Dg+gof9stnLOsxsufHf2ss=
Subject key identifier: 4A:29:F7:2B:BD:E8:CD:8D:19:0C:1D:23:97:DB:94:7B:65:FF:13:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B89C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E865E486026011F1BADA99B7DAE4EC9C.roa
Signing time: Thu 05 Feb 2026 07:04:27 +0000
ROA not before: Thu 05 Feb 2026 07:04:19 +0000
ROA not after: Mon 23 Mar 2026 07:04:19 +0000
asID: 21859
IP address blocks: 154.198.164.0/24 maxlen: 24
154.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112796 (0x1b89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 5 07:04:19 2026 GMT
Not After : Mar 23 07:04:19 2026 GMT
Subject: CN=698440fb-6727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:8f:7a:73:a0:09:bc:c2:63:0a:c7:5d:fd:
95:36:c9:7c:8f:4c:7a:f1:19:bf:90:e9:df:ba:cf:
82:25:c6:10:3b:cd:bd:41:83:8e:b7:3f:2a:fb:bb:
42:7b:4b:5f:34:1d:5b:45:e9:91:1c:51:99:20:84:
9e:1f:e6:f4:d7:7f:ac:02:87:a0:2d:6e:d5:e9:a2:
d2:cf:59:a0:92:a3:01:af:c1:06:8d:f6:5e:78:20:
40:fe:ae:7c:f5:ff:64:4c:5c:fb:62:26:6f:06:7c:
5e:e3:1c:38:b9:90:ab:9c:13:19:42:b8:8d:03:60:
6f:70:01:e9:13:eb:b5:52:f2:24:55:60:0a:05:5c:
b4:f6:ca:5e:f2:9f:3f:c8:3f:3e:3b:e7:62:db:9a:
08:3c:d4:d9:99:fd:43:c6:be:b5:bf:26:7e:5b:56:
0d:61:1b:08:f4:f0:35:77:13:3f:9a:a7:04:02:fe:
f3:74:9f:89:78:cd:dd:ee:4f:9f:21:b1:42:20:8f:
76:06:c5:04:56:a8:58:81:80:10:7b:16:7a:b4:2e:
67:ef:41:6b:8b:13:56:44:fb:53:e6:c4:7c:72:85:
a1:1f:9f:e9:a0:e7:1e:6c:36:d2:b8:90:f0:e8:1a:
09:76:a2:28:fc:58:db:14:15:3b:5a:5e:4d:bd:38:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:F7:2B:BD:E8:CD:8D:19:0C:1D:23:97:DB:94:7B:65:FF:13:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E865E486026011F1BADA99B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.164.0/24
154.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bc:96:88:fe:43:a2:40:e2:54:cf:f4:3a:de:1b:ce:e7:28:
a2:60:59:14:f6:ad:8e:35:8a:7e:0d:6c:f1:f3:8f:73:f3:c1:
0d:07:c4:c5:e4:a1:41:26:73:de:68:83:37:ff:7c:60:a4:3d:
cf:62:df:50:7c:42:7b:b1:32:2f:e7:60:76:a0:7b:ab:d6:84:
14:95:55:07:e9:43:5a:87:df:77:dc:2a:ce:b1:c9:33:c2:25:
8e:2f:a1:19:f5:a2:c4:ce:bf:1e:9a:14:94:11:b4:99:ad:05:
7b:1e:f0:9a:35:93:a8:bb:b8:ea:21:2f:52:2c:07:52:3c:0d:
70:4a:e1:01:98:8a:9f:75:80:e2:c7:84:87:af:47:d9:11:17:
c3:6e:ca:ed:bb:f7:22:0d:a5:89:8a:f9:dc:81:d6:23:3d:cf:
99:cc:16:62:77:cd:2b:e8:d0:0c:0a:de:de:4a:36:99:ec:ed:
1a:2a:5a:87:e9:6c:f4:82:84:96:28:db:81:8e:0e:9a:84:a3:
59:81:b3:9c:20:dd:56:ce:58:3b:fb:fb:ee:54:e1:a5:12:91:
eb:d8:83:2a:13:83:9e:dc:a5:f5:c8:92:2d:22:ac:67:ca:0a:
bf:a7:33:34:60:27:20:52:3e:6c:69:0d:29:8e:1f:4a:c9:10:
65:4b:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:00 2026 by rpki-client