Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A1680A60B2211F1AC2CFB81DAE4EC9C.roa
File:                     7A1680A60B2211F1AC2CFB81DAE4EC9C.roa (raw, json)
Hash identifier:          dCRwvCLuLGD2nDcVBZpr9cDNXz8ipgqeMmZ/CSgqv6k=
Subject key identifier:   CD:B8:C9:6C:15:9E:21:4F:CD:E6:DD:75:32:5C:D6:5F:E2:B6:9E:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B9C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A1680A60B2211F1AC2CFB81DAE4EC9C.roa
Signing time:             Mon 16 Feb 2026 10:30:13 +0000
ROA not before:           Mon 16 Feb 2026 10:30:05 +0000
ROA not after:            Mon 16 Mar 2026 10:30:05 +0000
asID:                     22773
IP address blocks:        154.85.107.0/24 maxlen: 24
                          154.85.108.0/24 maxlen: 24
                          154.85.109.0/24 maxlen: 24
                          154.85.110.0/24 maxlen: 24
                          154.85.111.0/24 maxlen: 24
                          154.85.112.0/24 maxlen: 24
                          154.85.113.0/24 maxlen: 24
                          154.85.114.0/24 maxlen: 24
                          154.85.115.0/24 maxlen: 24
                          154.85.116.0/24 maxlen: 24
                          154.85.117.0/24 maxlen: 24
                          154.85.118.0/24 maxlen: 24
                          154.85.119.0/24 maxlen: 24
                          154.90.2.0/24 maxlen: 24
                          154.90.3.0/24 maxlen: 24
                          154.90.4.0/24 maxlen: 24
                          154.90.5.0/24 maxlen: 24
                          154.90.6.0/24 maxlen: 24
                          154.90.7.0/24 maxlen: 24
                          154.90.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113094 (0x1b9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 16 10:30:05 2026 GMT
            Not After : Mar 16 10:30:05 2026 GMT
        Subject: CN=6992f1b5-5013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:d8:c4:e2:e0:0c:1b:ad:3e:52:0c:54:dc:
                    31:cf:f3:b7:af:9a:07:61:b0:77:11:13:46:10:a1:
                    95:34:ba:a2:f5:02:f1:f5:2f:58:e1:cc:e6:48:d2:
                    24:24:f0:ed:ed:c0:1b:bc:d9:9c:9f:65:c5:6b:f9:
                    1c:bf:c5:fd:31:cb:06:6d:ec:df:b6:8a:ee:21:1b:
                    34:5a:88:5f:40:5d:11:22:2f:a3:3a:a9:56:d8:69:
                    30:ad:b3:8d:af:97:ea:66:e8:70:60:e3:c6:bc:23:
                    a5:54:9a:30:e3:09:49:33:29:51:f3:b6:bd:f4:02:
                    78:84:be:6e:e9:ac:5a:73:a6:f8:3d:f5:a7:f9:24:
                    9d:a1:28:e1:6e:7d:e1:f1:11:ad:10:e1:c9:bf:c6:
                    02:f7:8d:02:5d:53:0f:5f:5e:d7:b9:8a:19:36:83:
                    0a:47:8b:ce:96:2c:66:7f:c1:49:88:ea:04:89:bd:
                    90:6d:b1:8e:4f:b3:c9:4c:e6:6e:bc:7c:10:1a:e2:
                    06:1d:5c:08:2c:5a:c6:89:7e:ed:b6:8f:e5:92:07:
                    96:f6:92:8d:37:f7:4f:42:16:d6:1d:d4:89:65:7f:
                    75:ba:1a:45:a7:07:69:ac:d1:f4:db:fb:0d:97:cc:
                    9d:1a:ee:4b:25:13:bf:50:4f:fe:e4:92:27:ac:fb:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:C9:6C:15:9E:21:4F:CD:E6:DD:75:32:5C:D6:5F:E2:B6:9E:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A1680A60B2211F1AC2CFB81DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.107.0-154.85.119.255
                  154.90.2.0-154.90.8.255

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:56:71:d6:97:0f:a8:54:e2:15:5a:55:7a:87:2d:e5:80:
         37:43:ea:fc:f0:ad:7c:5e:86:a1:a1:e7:dd:b2:2b:7b:45:78:
         f8:47:a8:e6:94:bd:51:90:2c:22:1b:22:b6:be:b1:db:b4:ba:
         8c:6c:f9:b3:ab:2f:c4:78:ac:80:28:e2:ba:b9:3f:7d:a4:e1:
         4d:96:91:ab:7a:fc:42:eb:d6:d4:3c:c2:02:c8:6b:3d:12:97:
         51:65:22:48:4f:d1:1f:70:bd:94:d0:35:21:a4:96:25:1b:86:
         6d:97:7e:f0:b2:eb:10:7a:b4:b3:60:a4:2f:d0:0b:91:28:a6:
         f3:75:65:93:28:91:49:2c:72:8f:9d:77:d2:85:7b:9f:a6:17:
         6f:b4:8e:b1:83:fd:37:70:3a:d9:c7:22:85:c0:b0:0b:ef:8a:
         fb:02:59:a9:00:82:71:ad:39:dd:dd:e8:a8:d1:cf:cc:a1:b8:
         c3:5c:0d:5c:ff:8f:3b:4d:ef:ba:f6:e9:bb:6b:2d:e0:2f:17:
         d4:33:05:4e:94:24:94:b3:39:20:fb:ad:3c:db:83:51:62:d7:
         77:31:cc:f5:bb:ff:9a:7d:5f:ab:f6:bf:b4:7a:96:d0:5b:8e:
         71:39:80:7c:20:de:ec:b6:7e:e3:ac:c9:65:db:f2:22:54:69:
         5f:67:97:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:40 2026 by rpki-client