Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BBC35B40A9711F1BB8D7A9DDAE4EC9C.roa
File:                     0BBC35B40A9711F1BB8D7A9DDAE4EC9C.roa (raw, json)
Hash identifier:          157rIYPJNFxBrH5TwTv5rA+r2VW2yCKM2LOmdzgg5UM=
Subject key identifier:   1F:A9:EA:F4:B1:20:CF:6A:12:6B:FE:71:D1:A9:6B:3B:2C:31:DC:F6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019DEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BBC35B40A9711F1BB8D7A9DDAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 17:52:08 +0000
ROA not before:           Sun 15 Feb 2026 17:52:03 +0000
ROA not after:            Fri 27 Feb 2026 17:52:03 +0000
asID:                     22773
IP address blocks:        45.192.4.0/22 maxlen: 24
                          45.192.24.0/21 maxlen: 24
                          45.194.72.0/23 maxlen: 24
                          45.194.75.0/24 maxlen: 24
                          45.194.76.0/23 maxlen: 24
                          45.194.84.0/24 maxlen: 24
                          45.194.121.0/24 maxlen: 24
                          45.196.116.0/22 maxlen: 24
                          45.202.106.0/24 maxlen: 24
                          45.207.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105963 (0x19deb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 15 17:52:03 2026 GMT
            Not After : Feb 27 17:52:03 2026 GMT
        Subject: CN=699207c8-e18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1d:71:73:9c:44:38:16:60:bc:44:0a:36:10:
                    28:30:c0:72:77:01:3b:34:47:4f:6f:91:c8:27:33:
                    6f:a2:ee:37:5f:80:6b:a8:4e:41:3b:71:7c:44:5a:
                    62:15:3a:c4:b5:94:9f:42:68:58:d9:1e:8e:d7:76:
                    bd:bc:38:c9:41:7d:12:f4:1c:69:3a:2b:75:bf:90:
                    53:96:9a:c2:01:63:0a:d7:c8:08:f7:cf:8d:4e:e9:
                    f4:c8:7d:1a:c3:9e:48:04:8c:dc:1d:08:93:a1:da:
                    ac:10:08:3b:c9:d8:be:ba:d0:b2:ff:c5:2e:16:f0:
                    3d:e5:3f:a0:46:9d:b6:96:c6:2c:1f:d9:c4:64:ff:
                    79:47:c6:a2:a9:35:59:1d:37:bd:e5:ef:11:0d:97:
                    81:9d:f7:18:83:31:8c:22:fc:a6:ef:5d:a8:79:1b:
                    36:3c:b3:03:55:94:d6:2f:7d:3c:fa:b5:0e:55:47:
                    8e:65:d3:e3:1a:f1:b7:3a:9c:76:70:24:ec:92:71:
                    d3:4d:bf:60:73:2b:65:7f:94:2f:cf:8e:bc:21:46:
                    e2:e6:a7:f7:7b:48:f6:4b:61:27:23:83:5a:34:57:
                    1c:c2:9a:ce:9b:7a:96:2c:7a:a9:f3:c3:cc:4a:9a:
                    dd:92:98:b6:2c:8f:74:93:88:87:af:5f:51:67:d0:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:EA:F4:B1:20:CF:6A:12:6B:FE:71:D1:A9:6B:3B:2C:31:DC:F6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BBC35B40A9711F1BB8D7A9DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.4.0/22
                  45.192.24.0/21
                  45.194.72.0/23
                  45.194.75.0-45.194.77.255
                  45.194.84.0/24
                  45.194.121.0/24
                  45.196.116.0/22
                  45.202.106.0/24
                  45.207.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:52:ff:2c:bd:a8:73:2b:f8:76:c1:9b:d8:d9:7f:e9:34:
         81:6d:1c:25:a5:70:96:fa:80:99:a5:3a:15:c0:b4:df:87:e9:
         38:6d:f2:f4:1e:3f:47:82:9f:d7:b6:ec:6c:59:67:fb:2c:0c:
         54:06:fe:3e:72:f1:52:80:a0:28:e9:37:64:ce:ec:7e:27:3e:
         5b:54:37:e9:db:a3:82:c7:f4:f0:a8:cc:5f:75:49:aa:a7:cb:
         b7:a4:68:c1:8c:20:f5:d0:50:ff:0d:2e:8a:45:59:a2:9c:48:
         3c:2d:8b:3b:b9:51:d2:89:8d:cb:1b:3b:f6:bd:15:33:e4:11:
         9b:96:02:33:f2:b3:b5:fd:ee:b1:a6:f7:93:1a:df:a4:9d:a4:
         b1:28:7e:97:93:1e:56:c6:40:ee:9e:a5:f7:78:55:f6:26:c1:
         84:7e:31:f3:db:b3:c7:e6:91:ac:d2:6f:ec:bb:0c:6c:3e:91:
         b8:98:4d:dd:8d:fd:dd:c1:bd:e6:28:49:4d:5f:77:8c:9f:64:
         17:88:19:76:40:b1:38:e0:b9:00:96:63:e4:2e:a6:7c:12:ca:
         aa:f7:a8:8d:43:ac:55:ca:ef:a4:d0:40:21:b8:43:b9:54:40:
         b0:15:78:ed:9d:35:7a:8c:2f:fa:a2:ad:7e:10:e8:8c:7d:a6:
         76:6a:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:42 2026 by rpki-client