Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6689340BBA11F1A03692A9DAE4EC9C.roa
File:                     AF6689340BBA11F1A03692A9DAE4EC9C.roa (raw, json)
Hash identifier:          YRghUxvVhzRFw3XkdpNpajAXr2/eqOZiKKwPHe+gRHM=
Subject key identifier:   4B:2A:C7:EC:BA:01:0C:F3:43:CF:3F:40:84:80:12:1A:2C:9F:D8:FC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B9E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6689340BBA11F1A03692A9DAE4EC9C.roa
Signing time:             Tue 17 Feb 2026 04:39:46 +0000
ROA not before:           Tue 17 Feb 2026 04:39:41 +0000
ROA not after:            Tue 17 Mar 2026 04:39:41 +0000
asID:                     22773
IP address blocks:        154.82.224.0/19 maxlen: 24
                          154.85.4.0/22 maxlen: 24
                          154.90.9.0/24 maxlen: 24
                          154.90.10.0/24 maxlen: 24
                          154.90.11.0/24 maxlen: 24
                          154.90.12.0/24 maxlen: 24
                          154.90.13.0/24 maxlen: 24
                          154.90.14.0/24 maxlen: 24
                          154.90.15.0/24 maxlen: 24
                          154.90.16.0/24 maxlen: 24
                          154.90.17.0/24 maxlen: 24
                          154.90.18.0/24 maxlen: 24
                          154.90.152.0/24 maxlen: 24
                          154.90.153.0/24 maxlen: 24
                          154.90.154.0/24 maxlen: 24
                          154.90.155.0/24 maxlen: 24
                          154.90.156.0/24 maxlen: 24
                          154.90.157.0/24 maxlen: 24
                          154.90.158.0/24 maxlen: 24
                          154.90.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113123 (0x1b9e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 17 04:39:41 2026 GMT
            Not After : Mar 17 04:39:41 2026 GMT
        Subject: CN=6993f112-b44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:ca:fd:04:3f:c7:2d:f5:31:d1:25:94:35:
                    78:4a:fc:62:db:da:57:43:60:26:ae:05:02:53:19:
                    c8:fe:d3:b1:49:15:63:ae:6d:98:2f:29:33:40:15:
                    2e:bc:63:ec:24:62:98:82:df:68:f9:d2:28:db:ad:
                    79:e2:b4:df:e8:94:22:68:70:64:cf:81:2e:c2:27:
                    ef:12:38:bb:81:c3:9f:96:ce:e8:eb:42:e2:52:e4:
                    24:ad:b2:29:f8:16:4e:99:b7:9b:ba:11:7a:9d:37:
                    05:45:ad:6e:05:0c:c9:0d:09:8a:0b:e8:e5:2f:97:
                    8c:26:7f:c8:cc:ff:d5:fc:11:a5:f8:39:dd:ca:1d:
                    82:e0:39:c0:d2:df:71:0d:bb:68:8b:9e:47:f4:ac:
                    42:71:f0:2d:a2:cc:57:d0:54:ea:b3:6d:7d:80:03:
                    ca:db:70:81:84:20:54:ab:93:0d:d9:99:da:85:62:
                    6c:98:be:5f:b6:ff:c6:4b:94:85:8a:7a:af:b7:4c:
                    54:7a:a5:92:50:25:9b:f7:8a:17:9f:44:57:e7:65:
                    49:cf:6c:b5:26:3e:7c:cb:a4:23:5d:dd:32:5b:d7:
                    a2:2a:18:93:94:51:6c:10:c5:b5:e4:b8:ff:20:8e:
                    ae:03:c9:4a:e7:75:d1:22:c0:fb:17:52:2d:db:6b:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2A:C7:EC:BA:01:0C:F3:43:CF:3F:40:84:80:12:1A:2C:9F:D8:FC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6689340BBA11F1A03692A9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.224.0/19
                  154.85.4.0/22
                  154.90.9.0-154.90.18.255
                  154.90.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:22:75:d8:5a:95:57:a5:50:6a:5c:fa:af:80:b9:27:a1:b9:
         71:df:35:e3:93:d0:40:07:ac:91:77:fd:92:1e:41:ad:32:e5:
         de:73:a4:bd:40:fb:5c:a4:c9:19:ae:71:6e:09:d7:61:cc:62:
         1a:5b:6d:da:30:e6:de:31:86:46:3e:d6:45:27:fb:45:2e:79:
         ab:19:02:66:e3:58:fd:c2:43:06:50:02:2f:64:8e:7d:9c:37:
         b8:f1:d0:8b:45:dd:d6:a8:aa:d7:2f:bc:55:db:9f:47:aa:9c:
         a3:1c:46:5b:c0:43:19:a9:96:e4:42:af:29:5d:5b:61:47:17:
         7e:b3:a6:da:cf:c5:1d:11:fb:70:56:11:fb:01:63:b9:14:fd:
         a9:6a:d3:68:6e:24:03:d1:44:88:da:f5:54:55:76:91:65:4a:
         61:94:ff:5c:14:c9:d8:7f:8f:a4:da:bc:44:0e:6a:6e:89:62:
         0c:45:38:97:e0:6a:0c:3a:65:85:fd:29:7b:b3:53:f1:8b:74:
         cf:8f:b8:ef:db:9a:e6:a6:e2:a0:9f:3a:3b:16:67:4e:98:cf:
         2c:fe:dd:35:24:56:11:70:fc:95:ca:90:7f:65:39:4c:01:be:
         74:87:3b:0f:19:9a:8d:5d:72:12:63:ce:69:80:4f:f6:66:0a:
         2a:b6:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:30 2026 by rpki-client