Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B61E0520A5311F1B14B2087DAE4EC9C.roa
File:                     1B61E0520A5311F1B14B2087DAE4EC9C.roa (raw, json)
Hash identifier:          T0TuhLnNMfdBReY5aIyHr9coj10Ja3fCwADJiqjaemQ=
Subject key identifier:   08:CA:15:33:EA:87:59:4A:91:E3:A4:DE:D6:5B:BF:2E:49:5F:9B:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B970
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B61E0520A5311F1B14B2087DAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 09:45:49 +0000
ROA not before:           Sun 15 Feb 2026 09:45:43 +0000
ROA not after:            Thu 26 Feb 2026 09:45:43 +0000
asID:                     22773
IP address blocks:        154.82.12.0/24 maxlen: 24
                          154.82.13.0/24 maxlen: 24
                          154.82.14.0/24 maxlen: 24
                          154.82.15.0/24 maxlen: 24
                          154.85.12.0/24 maxlen: 24
                          154.85.22.0/24 maxlen: 24
                          154.85.23.0/24 maxlen: 24
                          154.85.104.0/24 maxlen: 24
                          154.85.105.0/24 maxlen: 24
                          154.85.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113008 (0x1b970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 15 09:45:43 2026 GMT
            Not After : Feb 26 09:45:43 2026 GMT
        Subject: CN=699195cc-92c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:c4:a6:40:39:47:36:2e:7b:b8:e4:9a:e2:
                    b7:f5:41:1f:13:d5:76:e2:df:50:c0:4b:23:06:f5:
                    0b:0a:c1:12:62:fb:97:0f:57:10:8c:00:4b:0e:d9:
                    00:f8:12:9b:0e:0b:87:be:71:de:ff:3a:30:b4:18:
                    8f:de:18:ce:63:03:7a:8e:bb:12:85:e9:54:ea:b5:
                    ed:03:bf:2d:14:6f:14:76:7a:4c:2a:50:86:42:5b:
                    02:79:d0:ad:4e:30:b1:ab:99:57:5c:5a:87:be:b3:
                    04:45:3c:94:5f:3a:13:9f:c4:ec:62:39:75:e4:2b:
                    88:e1:b5:b7:ef:3b:10:38:79:ad:aa:71:41:c0:f7:
                    32:7c:02:00:d2:14:b0:33:b2:77:e1:f4:81:ee:1b:
                    d9:4e:04:4b:d9:9b:c0:3b:e0:95:7c:a7:bb:ed:99:
                    5e:a9:30:15:b5:69:40:d2:3f:c7:d8:55:68:dd:de:
                    67:19:94:10:f4:35:09:81:a2:5c:2f:27:3a:b4:a1:
                    c5:4c:bf:51:41:12:c9:56:da:04:fd:ba:a9:a0:17:
                    bb:a8:13:c9:0e:4b:5f:de:7c:6b:46:88:5f:69:7b:
                    8f:14:29:cb:cc:57:3a:15:13:46:31:a1:7d:c7:01:
                    b2:26:24:58:e3:93:30:8e:a4:9d:b9:d1:42:06:06:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CA:15:33:EA:87:59:4A:91:E3:A4:DE:D6:5B:BF:2E:49:5F:9B:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B61E0520A5311F1B14B2087DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.12.0/22
                  154.85.12.0/24
                  154.85.22.0/23
                  154.85.104.0-154.85.106.255

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:5c:42:22:d4:78:75:13:92:eb:8a:23:68:b7:0b:0d:24:
         2d:d9:b7:ad:42:aa:dd:fc:7f:b0:e1:f6:c5:a6:68:1e:4a:f0:
         c8:84:f2:9f:16:49:21:11:62:04:77:c4:e6:8f:88:0c:21:c6:
         07:d1:3e:55:dc:8b:2b:f0:4a:8e:44:8e:55:a2:e1:71:5e:ad:
         c9:b1:91:df:de:5c:4d:bd:2c:52:2f:5a:eb:41:34:e2:9e:5e:
         1f:28:67:f1:ca:e9:fd:1d:67:8f:43:3f:86:e9:f9:0d:99:9e:
         38:a2:9a:54:e2:e9:e1:be:22:e0:03:5f:54:67:50:7b:7c:80:
         57:2a:74:65:69:f5:a3:6e:69:36:c9:5b:bc:09:07:0a:79:75:
         aa:32:c7:25:16:f3:24:0c:39:f2:88:74:a5:5f:e3:99:81:43:
         f2:6c:48:b4:72:22:4d:7e:65:4f:ae:43:b9:b8:c4:55:7d:ac:
         6d:06:11:5d:04:74:8d:aa:b7:9d:b7:5f:da:dc:a2:bc:c9:85:
         12:8c:6e:61:2f:8d:41:81:d1:e9:26:25:bd:01:8e:5d:17:9b:
         98:59:95:fd:e0:31:53:7d:e7:5a:c3:66:8f:c5:75:66:b2:fb:
         1a:aa:f6:5a:d6:0e:c1:82:0d:bc:ec:f8:a9:91:23:79:6b:80:
         de:f6:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:58:35 2026 by rpki-client