Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AB0F6F20A8E11F18B9612EADAE4EC9C.roa
File:                     7AB0F6F20A8E11F18B9612EADAE4EC9C.roa (raw, json)
Hash identifier:          PXFV+YEZov7rSOATjBZmjBTlotd9fFXbFqN6ZbQR/AI=
Subject key identifier:   6F:D0:7D:1F:F1:53:A3:BF:93:16:5B:7B:91:7A:0B:BC:C4:DA:48:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B984
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AB0F6F20A8E11F18B9612EADAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 16:50:49 +0000
ROA not before:           Sun 15 Feb 2026 16:50:44 +0000
ROA not after:            Thu 26 Feb 2026 16:50:44 +0000
asID:                     22773
IP address blocks:        154.202.78.0/24 maxlen: 24
                          154.202.79.0/24 maxlen: 24
                          154.202.80.0/24 maxlen: 24
                          154.202.81.0/24 maxlen: 24
                          154.202.82.0/24 maxlen: 24
                          154.202.83.0/24 maxlen: 24
                          154.202.84.0/24 maxlen: 24
                          154.202.85.0/24 maxlen: 24
                          154.202.88.0/24 maxlen: 24
                          154.202.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113028 (0x1b984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 15 16:50:44 2026 GMT
            Not After : Feb 26 16:50:44 2026 GMT
        Subject: CN=6991f969-142c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:27:00:b0:df:d8:04:8e:49:8c:85:39:71:af:
                    5b:09:7f:0a:17:4e:85:7d:ae:05:e2:5a:c4:11:5f:
                    7a:bc:bb:04:74:a7:e4:33:00:bd:ee:ba:c5:79:4d:
                    74:14:92:fb:c8:31:7d:6f:3b:05:f4:27:02:2f:4b:
                    53:0c:da:01:59:0d:90:4f:a6:19:22:a2:ab:8e:05:
                    a9:74:65:53:2b:96:c1:30:5a:1c:ab:03:c5:f1:fa:
                    fa:ea:2d:d5:23:13:3c:0e:de:95:85:1e:e5:e8:37:
                    31:10:22:42:72:92:be:71:72:3e:9c:22:6c:14:13:
                    20:5f:46:1f:8f:6a:a1:21:ae:52:e4:af:72:21:f9:
                    20:d6:52:fb:d4:a3:75:34:f0:03:79:e9:12:78:d4:
                    82:54:31:b1:52:9c:8a:19:e0:a0:4a:43:1e:2f:d0:
                    c8:c2:92:83:87:63:d8:fe:b3:bf:91:a2:dd:ff:10:
                    11:1a:18:02:76:32:ea:d6:a7:7d:b4:7c:a3:fe:fd:
                    54:e4:32:62:18:ec:13:b7:c7:10:af:49:76:71:78:
                    af:3e:cd:9c:b6:72:a0:3d:c9:61:c6:c3:69:dd:69:
                    a1:e4:ab:35:e4:bc:07:41:92:46:db:3b:ac:fd:87:
                    2b:91:dc:7d:d5:2d:7e:a6:7a:30:e1:0d:91:a6:44:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D0:7D:1F:F1:53:A3:BF:93:16:5B:7B:91:7A:0B:BC:C4:DA:48:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AB0F6F20A8E11F18B9612EADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.78.0-154.202.85.255
                  154.202.88.0/24
                  154.202.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:11:86:be:d2:28:ee:c4:06:18:88:bb:b3:37:53:63:dc:56:
         9a:90:1e:31:02:53:0d:54:7c:5c:69:8f:2f:2e:42:12:c5:20:
         24:98:70:fe:cf:59:fe:87:f1:52:5c:5b:8a:88:8a:23:86:45:
         bc:1d:e1:9d:2b:b8:8f:32:1c:3b:c6:06:99:b1:c1:2f:5d:77:
         bb:55:50:9f:50:08:a8:d4:8f:54:f2:2f:d1:32:89:78:6f:34:
         15:49:13:a1:6f:7f:71:8d:37:7e:56:58:e7:f1:17:eb:19:a7:
         0c:4b:e0:cb:0f:4f:cd:c3:cd:81:63:ed:cb:a5:df:81:d3:5a:
         c4:ca:57:fc:e9:28:d5:ef:88:5c:37:99:94:7e:d6:01:34:aa:
         e8:2e:b9:1e:e2:6b:cd:ba:05:41:ec:c5:7d:11:e8:1d:33:22:
         a6:12:9b:90:93:b8:b6:94:4b:7e:e2:0d:7b:ef:50:c1:02:45:
         df:0a:d2:3f:4a:e1:0b:1c:8b:38:2f:7f:a0:4d:0f:9e:4b:9e:
         80:02:33:31:cc:df:4b:0b:96:e7:c3:47:4c:49:5c:1d:b9:48:
         a4:0c:42:74:60:c1:b2:f1:5b:39:26:7f:20:a0:f2:48:76:c0:
         f7:7b:20:04:31:17:a4:97:74:90:5f:cc:ef:2d:65:57:bc:f5:
         78:d3:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:41 2026 by rpki-client