Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1145FA960A4311F19567FBA5DAE4EC9C.roa
File:                     1145FA960A4311F19567FBA5DAE4EC9C.roa (raw, json)
Hash identifier:          IQS0eM251PnKa53OCDJaB8+B2WfUZ4gbQ4PassIR44o=
Subject key identifier:   0D:34:02:BE:7D:1C:CF:C7:5F:29:29:6E:DF:62:A1:05:55:FF:0B:10
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019DBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1145FA960A4311F19567FBA5DAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 07:51:00 +0000
ROA not before:           Sun 15 Feb 2026 07:50:55 +0000
ROA not after:            Thu 26 Feb 2026 07:50:55 +0000
asID:                     22773
IP address blocks:        156.238.142.0/24 maxlen: 24
                          156.238.143.0/24 maxlen: 24
                          156.238.145.0/24 maxlen: 24
                          156.238.146.0/24 maxlen: 24
                          156.238.147.0/24 maxlen: 24
                          156.238.148.0/24 maxlen: 24
                          156.238.149.0/24 maxlen: 24
                          156.238.150.0/24 maxlen: 24
                          156.238.151.0/24 maxlen: 24
                          156.238.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105919 (0x19dbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 15 07:50:55 2026 GMT
            Not After : Feb 26 07:50:55 2026 GMT
        Subject: CN=69917ae4-9f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:0b:9a:eb:32:45:42:ef:88:96:71:37:33:
                    09:d2:2b:3d:f7:2c:3e:be:2d:23:97:03:b9:ae:15:
                    81:61:7e:e1:28:65:e8:27:f2:90:2f:8e:37:99:41:
                    06:48:6f:a2:f0:18:49:82:ac:37:00:09:03:0c:76:
                    8c:26:21:6c:4b:23:9b:a1:8f:e5:00:a7:81:82:4d:
                    d4:6b:74:74:ec:f0:97:1a:11:80:d3:e5:d2:1a:c9:
                    ca:de:11:5a:d5:fc:ae:cc:63:f7:12:2a:82:11:ca:
                    74:69:63:93:99:44:34:d7:3a:44:55:63:44:e9:34:
                    cc:0f:bb:d1:8c:dc:4f:95:74:47:f2:85:6e:35:8f:
                    af:96:63:42:9c:de:e6:a1:1f:79:b3:42:5c:50:2d:
                    ed:7a:d9:17:1f:33:23:2d:e4:b3:4e:a8:c0:e3:9f:
                    d1:ce:f5:10:15:e5:d0:93:a1:49:32:59:2d:ec:1a:
                    af:69:69:56:43:7b:ab:45:02:14:fb:1f:03:f1:dd:
                    f5:2e:f6:f4:25:3a:38:b8:a0:1b:27:60:68:c4:b4:
                    f4:0b:73:c6:97:d4:e4:3e:6d:67:74:e1:64:ef:f1:
                    27:00:03:ef:6b:9d:19:f0:25:c8:75:b5:e9:f0:84:
                    48:eb:5d:0c:99:46:6c:49:10:d7:a2:77:19:73:85:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:34:02:BE:7D:1C:CF:C7:5F:29:29:6E:DF:62:A1:05:55:FF:0B:10
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1145FA960A4311F19567FBA5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.142.0/23
                  156.238.145.0-156.238.152.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:15:73:a6:0f:b0:60:bd:cf:90:1c:69:a5:38:8d:73:fc:
         25:96:4e:7a:cc:17:80:b2:d6:ad:16:dd:fe:97:43:c5:aa:00:
         d9:3a:14:fe:3c:a0:5b:08:ec:ba:1e:0c:0c:04:71:41:11:31:
         b5:d1:e7:ee:9d:0d:bc:6c:fc:a1:60:af:83:8e:94:d1:41:15:
         8b:56:66:de:91:8e:d6:a0:c5:e5:6f:47:58:55:8d:17:4d:f0:
         cd:26:85:45:10:8e:3d:a1:1e:8e:04:e5:0b:70:0a:e5:d8:a1:
         cb:f2:72:98:ec:e4:93:19:c3:68:df:cf:1c:4c:a1:79:f0:c9:
         63:e7:b4:66:86:9c:c9:22:47:93:09:ed:8b:28:62:56:bc:24:
         fe:66:fc:63:80:21:74:d0:9d:f5:b2:d6:99:e0:d3:75:b8:75:
         05:44:24:a7:2a:e3:75:ac:a1:b6:54:73:d7:89:38:f9:c6:21:
         6f:49:de:29:e9:7b:69:72:c1:15:3f:80:9a:55:3e:f2:5b:50:
         b6:a3:d3:b7:dc:8b:0d:be:04:69:0b:64:ae:f0:3a:15:e8:b8:
         f9:3c:ad:9c:43:34:80:8d:c9:6b:13:f2:1a:c5:66:65:f7:17:
         6c:c7:86:44:35:ab:d8:46:b2:8b:aa:37:20:9e:65:5d:9e:8a:
         76:9e:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:56:56 2026 by rpki-client