Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE966732068211F197359B94DAE4EC9C.roa
File: FE966732068211F197359B94DAE4EC9C.roa (raw, json)
Hash identifier: PizTmu6zv7qr8Hr6SVU8Naodc4lJbJC0/4n4xjCjhuQ=
Subject key identifier: 32:20:01:BF:88:90:6A:66:E0:1A:EE:DC:1D:BD:ED:C9:29:4A:41:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B915
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE966732068211F197359B94DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 13:18:31 +0000
ROA not before: Tue 10 Feb 2026 13:18:27 +0000
ROA not after: Tue 17 Mar 2026 13:18:27 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112917 (0x1b915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 10 13:18:27 2026 GMT
Not After : Mar 17 13:18:27 2026 GMT
Subject: CN=698b3027-2620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:ae:be:a9:00:90:81:2f:48:de:5f:12:32:
f3:4c:51:85:a3:1e:48:9d:de:c3:f9:08:7f:f4:ef:
34:65:e1:b4:d7:06:53:b3:9b:a3:d3:94:7d:1b:03:
fd:8d:a0:aa:72:06:cc:fd:97:09:4a:f9:41:68:ff:
58:07:f0:f3:76:d5:02:4f:07:f2:7e:a7:3a:9c:d9:
10:89:85:af:77:5e:ea:a5:5e:80:b6:90:5a:2c:db:
26:f1:67:2d:ea:f4:ba:94:13:49:bf:28:13:d3:d6:
e3:0f:fc:ee:42:83:a7:21:39:5b:47:6c:08:d9:3e:
d3:36:0f:37:ca:36:e0:f2:a5:6a:e1:9e:88:c1:2f:
a9:30:25:ce:cc:f9:61:ef:05:1f:0e:82:52:f5:7a:
15:8d:bf:41:95:cb:ca:30:18:56:39:8d:65:6e:5a:
88:9c:a6:6e:1b:31:a7:81:97:3c:91:cc:d2:3b:72:
73:5b:89:48:8c:1b:1b:30:30:b1:88:d6:32:91:5d:
da:d9:97:e1:fa:61:9b:11:45:da:79:95:3c:52:7d:
2b:c7:ec:8a:aa:de:11:0c:3d:05:6a:fa:0b:bb:ec:
c8:7f:2e:f5:b1:ff:7d:a7:44:87:b6:1a:09:8f:09:
71:97:c9:2e:06:8e:1b:90:b8:16:c4:9a:e3:2e:45:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:01:BF:88:90:6A:66:E0:1A:EE:DC:1D:BD:ED:C9:29:4A:41:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE966732068211F197359B94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:22:0a:43:33:c2:42:09:05:08:ee:0a:98:fd:11:31:c6:2b:
2d:ca:90:74:46:5b:84:bd:af:42:de:1c:5e:32:5f:52:4e:e6:
24:78:80:fb:7b:a9:da:cf:b2:ae:f1:31:f8:a8:14:05:f3:86:
9f:c4:d7:33:cf:f3:a3:6e:71:a5:f3:73:d6:a4:74:a9:45:76:
46:bf:fd:fe:91:c0:04:f3:af:d5:37:f3:68:19:18:cd:5f:1e:
44:ab:e3:73:5b:6d:98:5c:91:6e:41:2b:76:f3:7e:a3:83:c8:
fd:a9:f6:98:26:31:66:e7:3e:01:e1:a2:c7:5e:b4:fd:1b:67:
50:12:34:e2:34:fa:2e:30:f6:84:be:b6:90:76:a7:84:fc:52:
7d:a1:ec:12:33:67:7d:a0:bd:d3:a2:66:81:d0:0b:52:1a:f5:
b3:a4:41:79:b4:dc:3d:85:0b:cb:75:39:6c:55:cc:a3:32:52:
32:0f:af:f2:00:81:41:a4:bd:57:60:48:54:84:16:22:82:cf:
ce:d6:bd:5d:35:85:28:54:94:0a:4a:49:67:dd:05:e9:51:d9:
46:aa:73:bf:59:5d:32:a0:42:5f:ba:cb:a4:45:eb:2e:46:54:
5d:49:98:cc:29:73:48:0d:a6:1c:21:65:a2:df:53:ba:6c:b5:
f8:b6:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 20:23:17 2026 by rpki-client