Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD583A20A8B11F1A90EB2D5DAE4EC9C.roa
File:                     2BD583A20A8B11F1A90EB2D5DAE4EC9C.roa (raw, json)
Hash identifier:          rqsUKlJbcb81YZiigpJmeBC7RBuY7U2RUCI1b8+rsAg=
Subject key identifier:   EA:68:3F:E8:4F:76:FB:19:46:6F:B7:32:CB:33:56:30:9F:5E:49:CC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B97A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD583A20A8B11F1A90EB2D5DAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 16:27:08 +0000
ROA not before:           Sun 15 Feb 2026 16:27:03 +0000
ROA not after:            Thu 26 Feb 2026 16:27:03 +0000
asID:                     22773
IP address blocks:        154.82.2.0/24 maxlen: 24
                          154.90.141.0/24 maxlen: 24
                          154.90.144.0/24 maxlen: 24
                          154.90.145.0/24 maxlen: 24
                          154.90.146.0/24 maxlen: 24
                          154.90.147.0/24 maxlen: 24
                          154.90.148.0/24 maxlen: 24
                          154.90.149.0/24 maxlen: 24
                          154.90.150.0/24 maxlen: 24
                          154.90.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113018 (0x1b97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 15 16:27:03 2026 GMT
            Not After : Feb 26 16:27:03 2026 GMT
        Subject: CN=6991f3dc-bbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:3d:bd:49:fe:20:5f:38:85:9a:24:71:aa:
                    a4:ea:82:67:a1:8d:2e:2b:5a:bc:ab:1d:38:ba:11:
                    e5:35:f8:e1:b3:e8:a7:ad:24:51:36:ff:8a:89:18:
                    e8:1d:71:7f:5a:82:99:d1:a2:63:b3:4d:a2:d4:06:
                    3c:b5:6b:cd:a1:a8:70:e1:5b:4e:f6:be:18:84:fe:
                    04:c0:0f:fe:9f:2d:9e:74:b9:f3:bd:28:69:69:47:
                    78:0a:81:da:df:cd:b2:9f:8f:40:43:f7:6f:4b:27:
                    20:7d:8b:2f:2d:49:d5:28:98:c3:eb:64:17:08:53:
                    31:cf:3f:62:cd:ba:c7:a8:f4:f2:26:c2:c9:5f:ef:
                    35:8a:12:69:c8:5f:39:0a:eb:0c:d7:d9:4b:95:bb:
                    d3:6f:ad:37:eb:eb:00:3e:c8:d9:9c:0f:92:4d:25:
                    3f:09:54:6a:b3:35:c8:7e:0d:ea:8a:bc:27:33:87:
                    6c:e4:c0:1b:6f:f5:be:3a:39:4e:c2:b3:3f:f3:19:
                    1c:0b:32:6d:63:33:ca:b3:ef:06:bd:21:e7:3c:5e:
                    a0:95:d9:c8:ca:ea:41:58:5b:b0:30:86:a5:b4:46:
                    32:36:60:61:16:a8:52:80:68:68:88:db:3b:e1:f9:
                    5f:5c:b1:fa:1e:ec:0f:96:06:e6:fa:b3:87:9a:fb:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:68:3F:E8:4F:76:FB:19:46:6F:B7:32:CB:33:56:30:9F:5E:49:CC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD583A20A8B11F1A90EB2D5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.2.0/24
                  154.90.141.0/24
                  154.90.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:9f:22:39:8c:cf:be:2c:8c:7a:52:e8:44:cb:1c:06:c6:
         d1:72:89:ef:c6:cc:1a:b8:93:d4:e3:86:04:20:cc:a2:99:0c:
         e0:41:2c:4a:1c:a9:7d:a6:41:03:88:79:7c:96:c0:6b:45:3c:
         75:29:ce:e2:57:5c:05:06:eb:ab:fa:76:65:73:00:47:26:79:
         5a:d1:04:93:2a:ea:fd:e1:30:90:36:9d:3d:86:47:48:b0:8b:
         e5:96:cf:9c:f7:73:80:6c:b8:1d:1e:ca:2a:a9:3a:47:d9:23:
         d6:33:8c:3e:ea:a3:7b:a5:25:d6:16:1b:b4:a4:c8:26:80:2e:
         c7:b2:68:75:94:bd:14:f3:8a:7d:d4:99:86:f4:0a:56:49:c2:
         01:0b:db:81:da:93:5f:3b:5c:94:4a:f7:78:23:f9:a8:aa:2a:
         7b:8a:41:43:54:40:db:44:bb:ba:c9:2f:6f:53:10:c8:29:76:
         f9:e3:39:0f:30:1f:fe:49:e5:56:86:e6:4f:d5:bc:8f:6a:54:
         eb:0c:04:1e:ed:df:9b:f0:ff:a6:df:59:b1:40:03:27:3a:6c:
         80:7d:0a:89:2a:b2:92:1f:2c:aa:eb:2b:9d:ff:45:c6:d4:ea:
         b1:18:d3:e1:19:b9:81:d0:85:02:61:18:37:5a:53:73:d4:af:
         c8:b7:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:57:03 2026 by rpki-client