Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E35D37C0AA411F193508EECDAE4EC9C.roa
File:                     7E35D37C0AA411F193508EECDAE4EC9C.roa (raw, json)
Hash identifier:          RVLETzvufQOo7/p7NoLZ45m8ENPfChI9P0BTG80ZxT4=
Subject key identifier:   FC:77:58:02:EE:ED:DD:A1:B4:49:4E:3C:E6:08:99:7B:A1:FA:07:38
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B9A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E35D37C0AA411F193508EECDAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 19:28:24 +0000
ROA not before:           Sun 15 Feb 2026 19:28:19 +0000
ROA not after:            Sun 01 Mar 2026 19:28:19 +0000
asID:                     2914
IP address blocks:        154.92.199.0/24 maxlen: 24
                          154.92.206.0/24 maxlen: 24
                          154.92.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 24 Feb 2026 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113060 (0x1b9a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 15 19:28:19 2026 GMT
            Not After : Mar  1 19:28:19 2026 GMT
        Subject: CN=69921e58-6c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:36:c5:17:7e:2c:b0:44:ba:2b:d0:dc:d0:
                    e3:a8:0d:30:8b:72:83:c9:4a:bc:94:83:39:a5:e7:
                    bb:23:fa:4b:dd:42:33:89:e3:f0:46:00:fb:80:3e:
                    bd:82:b5:32:36:0f:a0:31:10:53:44:24:75:4f:cd:
                    44:c9:16:98:a1:46:c7:15:9e:8f:36:2c:57:ca:a0:
                    44:06:ce:bb:68:1a:b4:cf:20:2c:d5:d5:1c:66:74:
                    2e:f8:60:77:f3:3c:79:44:7c:fc:51:0d:64:0c:b8:
                    cb:6f:cb:84:48:f9:e9:2a:2a:ea:d4:84:17:8e:db:
                    ff:92:17:6e:70:79:68:01:bb:85:29:e1:20:56:d3:
                    bb:b4:d1:78:1f:8a:36:b8:71:65:22:14:c8:51:44:
                    93:03:e1:07:d4:f0:47:49:81:97:cd:9c:05:17:71:
                    c4:2b:a4:6f:56:06:fa:56:01:82:01:9b:c9:c3:3e:
                    cb:01:d8:f2:ba:f3:40:19:8a:ce:57:4c:46:0e:2a:
                    a6:bb:7f:c3:b1:1a:24:bc:7a:a3:d6:5e:04:0b:fe:
                    2e:8d:65:51:9f:a2:ff:8e:8d:51:d8:f4:e5:fe:a1:
                    d7:ee:46:39:71:f3:bb:75:61:1b:c7:87:d2:61:a8:
                    e8:b7:c0:02:d8:95:87:02:d5:61:e0:1a:e2:80:82:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:77:58:02:EE:ED:DD:A1:B4:49:4E:3C:E6:08:99:7B:A1:FA:07:38
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E35D37C0AA411F193508EECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.199.0/24
                  154.92.206.0/24
                  154.92.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:9a:67:0d:b6:c8:44:97:f7:9d:a6:6f:4c:e7:07:55:0d:
         eb:b9:8b:a2:2f:8d:31:70:60:c3:e3:f3:70:36:eb:d3:05:5e:
         af:3b:e0:1b:66:cc:c4:fb:74:8e:8d:20:4b:6a:36:4d:f1:dd:
         a9:8e:36:b6:5f:25:21:f9:87:76:44:02:68:6a:ff:f3:09:d6:
         f2:32:3c:05:de:f7:34:12:03:b3:5e:94:02:b8:b2:7b:33:89:
         79:71:b8:31:3d:59:5f:ea:96:bf:8a:48:df:6e:6f:26:cb:7e:
         bc:3c:fe:3b:94:a0:13:05:fa:a5:82:b6:ab:f0:01:ee:c7:1a:
         84:b2:45:fc:a8:a2:40:1a:74:50:80:5a:cf:94:4b:1e:1e:12:
         60:0e:81:a6:10:64:21:1f:94:96:e1:8e:3d:8d:64:8b:e1:b6:
         0d:29:4c:55:d4:12:93:d5:f7:6f:a0:09:b1:c6:0f:0b:bd:b3:
         18:b7:d3:7d:48:59:63:84:d9:d3:f4:dc:8c:80:86:8d:58:58:
         e2:61:64:c1:7e:3f:fe:24:24:52:4e:cc:85:65:5a:54:42:4c:
         ad:03:ff:29:e3:07:69:fb:50:a2:4f:2b:df:c7:4d:e4:b2:b0:
         75:a1:87:ac:5d:4b:0d:2e:9c:f7:5d:5d:1f:e1:e2:07:8b:82:
         a0:32:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:05 2026 by rpki-client