Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B9F3AD20B2111F1AEAABF79DAE4EC9C.roa
File:                     6B9F3AD20B2111F1AEAABF79DAE4EC9C.roa (raw, json)
Hash identifier:          8m4PAUZGuBYVneAaP77LsIyY+VY/wGpSK2T7h8QnpEE=
Subject key identifier:   31:B0:25:FE:5C:B3:80:A4:F6:78:7B:4F:15:2B:AC:E6:0F:D8:05:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B9C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B9F3AD20B2111F1AEAABF79DAE4EC9C.roa
Signing time:             Mon 16 Feb 2026 10:22:40 +0000
ROA not before:           Mon 16 Feb 2026 10:22:33 +0000
ROA not after:            Mon 16 Mar 2026 10:22:33 +0000
asID:                     22773
IP address blocks:        154.82.2.0/24 maxlen: 24
                          154.90.19.0/24 maxlen: 24
                          154.90.20.0/24 maxlen: 24
                          154.90.21.0/24 maxlen: 24
                          154.90.22.0/24 maxlen: 24
                          154.90.23.0/24 maxlen: 24
                          154.90.24.0/24 maxlen: 24
                          154.90.25.0/24 maxlen: 24
                          154.90.26.0/24 maxlen: 24
                          154.90.27.0/24 maxlen: 24
                          154.90.132.0/24 maxlen: 24
                          154.90.141.0/24 maxlen: 24
                          154.90.144.0/24 maxlen: 24
                          154.90.145.0/24 maxlen: 24
                          154.90.146.0/24 maxlen: 24
                          154.90.147.0/24 maxlen: 24
                          154.90.148.0/24 maxlen: 24
                          154.90.149.0/24 maxlen: 24
                          154.90.150.0/24 maxlen: 24
                          154.90.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113092 (0x1b9c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 16 10:22:33 2026 GMT
            Not After : Mar 16 10:22:33 2026 GMT
        Subject: CN=6992efef-18de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1c:7d:7c:b6:89:cc:70:64:2e:ee:cc:17:5b:
                    ae:1b:f0:a8:07:05:46:b4:62:53:63:36:5d:42:8e:
                    bb:f4:30:19:1f:08:31:07:8e:ca:49:80:6b:ad:51:
                    6c:99:ab:f6:41:af:f5:d8:16:46:8a:d3:14:47:a4:
                    4b:ae:66:43:67:5a:25:03:1d:a4:1d:91:b0:f5:c8:
                    58:71:86:75:bf:12:47:03:83:29:b6:a0:bc:ec:c8:
                    a1:db:e5:64:e4:29:f2:61:32:a4:b0:e0:ec:28:df:
                    f1:0f:00:12:02:8e:fd:ad:29:70:b3:43:97:4a:66:
                    7f:12:ca:ab:6c:e9:13:5a:77:b8:4c:f1:33:35:81:
                    a1:e9:cc:c2:c5:24:06:0e:c5:79:1e:7b:62:3f:e2:
                    90:0f:4b:da:6b:ef:75:46:36:15:f4:5c:3e:3c:87:
                    25:7d:54:4d:00:0b:34:13:e4:2e:d0:19:50:3b:cc:
                    37:2a:84:f0:ac:01:f5:67:dc:aa:0c:62:b5:4c:ea:
                    ca:d6:40:b3:92:74:ab:99:fa:5c:75:a4:8b:35:45:
                    da:21:88:60:c1:6e:2b:32:98:55:b5:ae:e3:56:db:
                    aa:f2:63:07:07:34:7f:ef:f3:ff:7e:b5:c5:7c:dd:
                    da:c9:4d:83:da:fb:b4:76:f9:ee:9b:0a:16:05:e4:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B0:25:FE:5C:B3:80:A4:F6:78:7B:4F:15:2B:AC:E6:0F:D8:05:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B9F3AD20B2111F1AEAABF79DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.2.0/24
                  154.90.19.0-154.90.27.255
                  154.90.132.0/24
                  154.90.141.0/24
                  154.90.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:83:cc:cf:d3:11:10:7f:c3:54:92:57:d8:bf:97:8c:2d:
         96:d6:8e:4e:f6:4b:aa:5a:d3:c0:16:67:47:40:3d:de:45:22:
         15:a3:5b:2d:cc:6b:06:fd:74:47:77:f7:9d:59:d8:ee:54:a1:
         01:f8:7e:aa:55:d1:6b:b2:49:61:ef:08:cd:52:4a:c3:28:a3:
         74:e6:35:05:a8:63:c0:2a:fb:63:b7:75:26:db:6b:c2:5e:d2:
         f3:25:85:1a:ac:e4:50:dc:94:ed:b8:ac:79:e2:94:72:86:67:
         cc:30:c9:61:7a:b1:bd:02:e0:ae:9e:3d:23:14:99:f8:37:2a:
         f5:e4:5c:ef:11:28:c7:74:af:2c:ab:ac:f4:b2:7b:c3:a8:2a:
         70:92:ae:30:6b:c4:c3:00:64:c4:06:f8:fd:b5:3c:8e:28:0a:
         75:26:82:9e:80:f5:90:21:6b:1d:57:a0:89:a7:9d:34:91:fc:
         09:1b:44:a4:c8:86:26:f0:ee:b9:bb:42:ec:33:ae:f2:1c:1c:
         57:b9:bc:6f:51:94:87:27:df:8d:98:02:ca:f4:cc:f4:64:7f:
         54:bf:dc:47:35:b9:ef:65:9f:94:d5:2b:99:1c:82:63:c2:8a:
         a5:78:cd:10:aa:04:0a:9e:30:8f:6e:e5:f5:7d:1b:5e:06:aa:
         63:1f:ef:33
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAbnEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjE2MTAyMjMzWhcNMjYwMzE2MTAyMjMzWjAYMRYw
FAYDVQQDEw02OTkyZWZlZi0xOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8Bx9fLaJzHBkLu7MF1uuG/CoBwVGtGJTYzZdQo679DAZHwgxB47KSYBr
rVFsmav2Qa/12BZGitMUR6RLrmZDZ1olAx2kHZGw9chYcYZ1vxJHA4MptqC87Mih
2+Vk5CnyYTKksODsKN/xDwASAo79rSlws0OXSmZ/EsqrbOkTWne4TPEzNYGh6czC
xSQGDsV5HntiP+KQD0vaa+91RjYV9Fw+PIclfVRNAAs0E+Qu0BlQO8w3KoTwrAH1
Z9yqDGK1TOrK1kCzknSrmfpcdaSLNUXaIYhgwW4rMphVta7jVtuq8mMHBzR/7/P/
frXFfN3ayU2D2vu0dvnumwoWBeQPtQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFDGw
Jf5cs4Ck9nh7TxUrrOYP2AW4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjlGM0FEMjBCMjExMUYxQUVBQUJGNzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAmlICMAwDBACaWhMDBAKa
WhgDBACaWoQDBACaWo0DBAOaWpAwDQYJKoZIhvcNAQELBQADggEBALJyg8zP0xEQ
f8NUklfYv5eMLZbWjk72S6pa08AWZ0dAPd5FIhWjWy3Mawb9dEd3951Z2O5UoQH4
fqpV0WuySWHvCM1SSsMoo3TmNQWoY8Aq+2O3dSbba8Je0vMlhRqs5FDclO24rHni
lHKGZ8wwyWF6sb0C4K6ePSMUmfg3KvXkXO8RKMd0ryyrrPSye8OoKnCSrjBrxMMA
ZMQG+P21PI4oCnUmgp6A9ZAhax1XoImnnTSR/AkbRKTIhibw7rm7QuwzrvIcHFe5
vG9RlIcn342YAsr0zPRkf1S/3Ec1ue9ln5TVK5kcgmPCiqV4zRCqBAqeMI9u5fV9
G14GqmMf7zM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:36 2026 by rpki-client