Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F60DD40A9411F18AB7308DDAE4EC9C.roa
File:                     77F60DD40A9411F18AB7308DDAE4EC9C.roa (raw, json)
Hash identifier:          9ISDfQxDPER/+LxymvUOGE99OQwKBKw62WevR4OGERI=
Subject key identifier:   71:CD:5E:52:C5:1E:40:00:A1:88:4D:EA:AD:AA:60:AC:F5:B1:83:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B992
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F60DD40A9411F18AB7308DDAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 17:33:41 +0000
ROA not before:           Sun 15 Feb 2026 17:33:36 +0000
ROA not after:            Thu 26 Feb 2026 17:33:36 +0000
asID:                     22773
IP address blocks:        154.202.24.0/24 maxlen: 24
                          154.202.25.0/24 maxlen: 24
                          154.202.26.0/24 maxlen: 24
                          154.202.27.0/24 maxlen: 24
                          154.202.28.0/24 maxlen: 24
                          154.202.29.0/24 maxlen: 24
                          154.213.218.0/24 maxlen: 24
                          154.213.219.0/24 maxlen: 24
                          154.213.221.0/24 maxlen: 24
                          154.213.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113042 (0x1b992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 15 17:33:36 2026 GMT
            Not After : Feb 26 17:33:36 2026 GMT
        Subject: CN=69920375-4392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:de:34:cd:6b:06:15:3f:b5:b0:5d:03:37:
                    04:cb:dd:fc:b0:e3:52:6e:5f:8e:b4:da:d3:b0:ef:
                    7f:ab:ea:3a:de:5e:1e:d4:04:99:1d:d2:ff:95:e6:
                    2b:80:c2:3a:c2:f7:4d:51:39:23:de:3b:00:49:2f:
                    90:21:ff:96:af:7d:a8:a3:25:bc:32:78:f0:15:3e:
                    00:fa:87:32:bf:44:e6:ae:90:b5:7e:71:9f:83:01:
                    1d:32:5b:c9:02:80:1d:b9:4f:ea:29:f0:a3:db:1c:
                    a2:81:73:86:a1:65:20:9c:09:22:14:eb:88:ff:5f:
                    62:31:1a:ce:79:2f:41:77:6b:f6:37:32:f5:43:8d:
                    a5:7c:3a:d2:ca:14:b2:ec:bf:e9:9f:fd:19:b8:b1:
                    80:bb:0a:ea:25:d6:59:21:d5:0e:bf:cf:04:bd:42:
                    56:b0:39:e4:ae:d0:14:90:96:6d:fa:20:81:2f:d5:
                    88:89:a8:c2:53:70:12:85:80:bb:b8:0f:03:ce:67:
                    58:fa:b1:22:dd:cb:e6:4a:1b:33:18:9e:cc:03:e9:
                    78:b2:fd:0c:2a:74:7f:01:9f:be:34:a9:0a:e2:22:
                    78:04:55:92:0c:77:89:61:75:b1:d1:ba:5a:c1:e4:
                    ed:9c:4b:8a:66:fa:82:b0:76:77:d1:a6:c2:86:fc:
                    5d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CD:5E:52:C5:1E:40:00:A1:88:4D:EA:AD:AA:60:AC:F5:B1:83:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F60DD40A9411F18AB7308DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.24.0-154.202.29.255
                  154.213.218.0/23
                  154.213.221.0-154.213.222.255

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:7f:00:61:83:b7:e6:ff:4f:1d:03:ab:49:09:46:47:13:
         db:43:24:41:c3:71:e2:dd:51:40:f0:c2:c3:27:e0:b0:07:62:
         9b:d3:ca:4a:13:e5:7f:54:e1:e8:78:45:05:80:c1:47:ad:7c:
         c9:cb:86:97:f6:39:a4:75:34:06:91:99:2e:5c:40:b0:e7:22:
         82:90:51:ac:93:f5:0a:b5:51:af:85:bb:18:f6:59:73:ee:bf:
         3c:69:d3:b2:2a:77:74:6d:ca:5c:92:bd:4a:1e:30:81:14:34:
         dd:f3:06:20:cf:90:b8:0b:76:82:51:7d:55:a6:50:82:88:4b:
         a2:ce:24:a4:18:6c:c1:5a:f8:74:22:8e:56:80:6b:9c:3e:ef:
         38:17:a2:f4:48:fd:7a:70:1c:2f:7e:40:1e:04:81:ff:76:39:
         4b:f8:3c:ce:05:d4:ae:b6:c4:75:25:a4:51:58:3c:29:95:6e:
         59:db:49:5f:da:03:04:ba:f8:23:65:64:d9:80:e4:de:ca:17:
         9e:62:a2:36:d4:ac:81:78:79:35:3c:7a:9a:51:7a:12:c8:2f:
         b7:57:98:e8:5a:8f:c1:fe:a6:f4:00:39:e8:57:35:2f:e0:17:
         d8:a6:64:9b:45:c4:e8:df:8b:a9:d8:91:e4:88:31:ee:c6:7d:
         7a:ab:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:26 2026 by rpki-client