Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57207AA40A8F11F1B5104EEEDAE4EC9C.roa
File:                     57207AA40A8F11F1B5104EEEDAE4EC9C.roa (raw, json)
Hash identifier:          rh4E/Y6XR2kGBYmvbc9y0jpInSKmAqJxtL3OK61m38o=
Subject key identifier:   6D:28:C6:85:9D:88:0A:32:ED:70:68:FD:DB:47:9C:20:58:39:F6:F1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B986
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57207AA40A8F11F1B5104EEEDAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 16:56:59 +0000
ROA not before:           Sun 15 Feb 2026 16:56:54 +0000
ROA not after:            Thu 26 Feb 2026 16:56:54 +0000
asID:                     22773
IP address blocks:        154.198.20.0/24 maxlen: 24
                          154.198.21.0/24 maxlen: 24
                          154.198.22.0/24 maxlen: 24
                          154.198.23.0/24 maxlen: 24
                          154.198.24.0/24 maxlen: 24
                          154.198.25.0/24 maxlen: 24
                          154.198.26.0/24 maxlen: 24
                          154.198.27.0/24 maxlen: 24
                          154.198.28.0/24 maxlen: 24
                          154.202.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113030 (0x1b986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 15 16:56:54 2026 GMT
            Not After : Feb 26 16:56:54 2026 GMT
        Subject: CN=6991fadb-9177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:f9:66:91:93:74:c2:94:99:91:76:bd:0e:
                    24:76:6c:04:04:12:44:12:64:3d:21:13:f3:70:b3:
                    43:b6:1d:bb:d2:b4:de:2f:52:e1:f2:8b:0e:2f:31:
                    34:44:eb:cb:6b:7a:fd:92:bb:d2:b3:e5:5e:17:05:
                    e0:89:98:3a:a5:80:92:db:fa:39:2c:5a:59:1a:f5:
                    f6:ee:7a:d5:0b:ae:03:09:58:35:40:dd:82:dc:d6:
                    02:b0:b0:b4:9d:0c:43:a8:b0:66:0f:b5:50:53:72:
                    7d:51:8c:a6:95:22:49:9b:69:d6:7a:fb:fa:dd:cb:
                    36:c2:47:2f:37:69:3b:47:d9:70:8b:06:96:91:9c:
                    47:9f:d6:4f:90:23:64:65:32:f4:a0:4b:c3:60:56:
                    d6:1f:66:c4:6b:56:a1:9b:ec:92:8c:46:25:d8:cc:
                    43:3f:55:67:38:c3:0e:59:b8:dc:d7:84:49:96:3d:
                    6f:16:ba:18:97:01:64:59:7f:a4:63:c5:dc:3b:65:
                    bb:9d:e0:ba:f5:17:7f:81:4e:fc:51:36:f4:91:df:
                    d5:05:08:90:76:8b:17:fa:b0:15:06:2d:68:4e:f8:
                    e8:10:1e:7e:37:49:54:b7:9e:1a:6f:d4:b4:0f:f9:
                    de:f2:07:b7:3a:e9:6e:18:ac:60:0c:8e:c0:cf:9a:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:28:C6:85:9D:88:0A:32:ED:70:68:FD:DB:47:9C:20:58:39:F6:F1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57207AA40A8F11F1B5104EEEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.20.0-154.198.28.255
                  154.202.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:9e:32:91:93:36:30:9e:25:93:13:d5:de:01:0f:82:ab:
         ed:cd:00:6b:1e:b5:f0:d9:36:49:15:ff:78:fa:07:16:e9:24:
         7f:53:39:c8:34:88:77:35:66:fe:c5:e5:1e:cc:5a:e8:53:8c:
         19:9a:9e:c0:60:93:6f:4a:ea:39:bc:9b:f4:32:cf:70:f4:a4:
         29:ba:af:8e:30:dd:c1:de:6d:a7:aa:4f:5e:a4:8a:0d:b7:87:
         5b:33:de:ee:73:d8:ab:98:d3:db:83:08:89:12:e7:3a:5d:9b:
         db:71:7a:59:ea:c4:84:76:e7:08:be:0c:3d:71:10:60:b8:78:
         c0:64:60:01:fe:33:d3:3e:21:df:a2:48:c5:4a:9e:d9:d1:f4:
         73:8b:00:40:0c:d9:6a:93:af:81:15:fe:ac:91:77:82:88:63:
         dd:c4:d1:5e:ee:a8:0b:8e:ee:39:40:94:f4:9b:3c:21:74:53:
         3f:17:94:06:ff:45:09:7f:f2:3d:64:b3:f0:f3:a3:97:06:8f:
         42:73:95:89:e6:c0:5d:89:82:22:ed:2c:69:0d:6e:1d:6c:a2:
         d6:4c:9e:62:38:55:11:8c:34:af:a7:a9:e8:20:fe:82:7f:06:
         cd:96:dd:c2:e2:b0:21:eb:a0:d8:f9:fe:e0:bf:ae:eb:57:e7:
         a7:cd:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:57:01 2026 by rpki-client