Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/323326B0072911F189003297DAE4EC9C.roa
File:                     323326B0072911F189003297DAE4EC9C.roa (raw, json)
Hash identifier:          JWQqygNK5pbyQ/LHdF2/xD7W2Om/DY5RsOY8DI9n12k=
Subject key identifier:   66:F2:CF:88:07:BC:81:8F:04:98:A1:FB:77:11:4C:3E:5A:40:F0:C2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019CFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/323326B0072911F189003297DAE4EC9C.roa
Signing time:             Wed 11 Feb 2026 09:08:15 +0000
ROA not before:           Wed 11 Feb 2026 09:08:10 +0000
ROA not after:            Sun 22 Mar 2026 09:08:10 +0000
asID:                     397071
IP address blocks:        45.195.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Feb 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105723 (0x19cfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 11 09:08:10 2026 GMT
            Not After : Mar 22 09:08:10 2026 GMT
        Subject: CN=698c46fe-6f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:8b:ce:ea:5f:4c:52:28:b6:93:fe:ca:21:
                    58:74:c7:f1:ed:f7:ad:25:82:13:f9:0b:e3:52:9f:
                    cf:dc:4d:79:b5:dd:ee:f6:eb:3a:c1:23:c1:bf:bb:
                    df:32:15:d2:e5:af:0d:73:6b:cc:a7:b6:0d:3a:1b:
                    64:7a:bc:1b:18:89:5e:c4:33:4f:51:96:55:af:44:
                    3a:f5:fa:e2:79:2b:a5:66:27:cc:56:35:89:85:8b:
                    fc:22:8f:49:95:34:f9:3e:8f:62:ad:01:ca:37:84:
                    37:82:11:dc:e5:88:a3:b3:71:c4:3f:9d:dc:82:01:
                    48:f2:81:42:64:d0:cf:46:39:e3:ac:37:a0:1b:3e:
                    4a:be:ab:2a:28:cc:2b:36:4c:21:66:1f:ac:94:74:
                    f6:5f:24:7b:d9:65:2c:70:bd:82:a7:56:46:11:08:
                    5a:6c:0f:0a:6d:28:fd:70:c7:37:7b:b6:04:f3:d3:
                    9f:e0:69:d8:6d:af:93:0c:70:31:ba:a7:c6:60:b9:
                    38:77:a8:de:c8:01:ae:66:8b:89:ba:ae:ec:15:35:
                    ef:bd:99:81:ed:d7:93:89:73:0d:be:5b:d6:cf:c8:
                    b1:3b:40:3b:0d:42:f0:25:c5:a2:6e:d3:8e:83:04:
                    71:32:af:34:39:6f:81:76:18:bf:d0:c6:be:61:eb:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F2:CF:88:07:BC:81:8F:04:98:A1:FB:77:11:4C:3E:5A:40:F0:C2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/323326B0072911F189003297DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:92:d9:2d:04:c1:eb:10:e2:4e:ce:f7:25:02:0b:d4:14:9d:
         95:2e:4c:f2:0c:ca:b7:0f:b9:70:9c:bc:34:7d:c2:97:95:f6:
         e9:1e:33:fb:14:78:73:17:f3:11:42:bd:75:2f:d2:5c:16:3c:
         bc:62:fd:da:50:b7:6c:be:be:32:10:76:aa:a1:6a:c7:2f:24:
         72:cf:75:52:7f:35:a7:a9:b4:67:93:25:7f:6f:b6:9b:45:3a:
         20:99:31:eb:85:37:8a:7b:fa:74:8d:3b:a2:08:ec:bf:9e:dd:
         40:70:47:91:e5:46:4b:1b:fc:0f:8f:6a:d7:9b:9e:ad:a6:1f:
         25:43:ef:f7:d7:b2:fb:20:2d:1f:12:a7:6e:0b:fe:13:aa:b4:
         2c:81:f6:af:b9:37:9f:a9:36:c1:dd:8a:94:39:cf:42:67:f5:
         cd:13:a1:db:11:6d:c0:8d:9a:ee:31:f0:fa:3e:eb:22:c0:1f:
         a1:02:e2:af:0b:65:e6:68:e0:84:40:b6:88:2a:4e:79:2e:6c:
         3b:f3:c5:7e:26:a4:e9:5e:ad:80:82:fb:59:18:81:c5:c6:93:
         4b:b6:78:9a:39:33:7f:c1:f4:d1:bf:3b:a0:b2:70:e0:8f:84:
         5a:37:48:fa:2a:74:1e:d3:f1:8d:fc:2f:7b:ed:44:2b:6e:72:
         fe:63:99:0b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZz7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjExMDkwODEwWhcNMjYwMzIyMDkwODEwWjAYMRYw
FAYDVQQDEw02OThjNDZmZS02ZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5sOLzupfTFIotpP+yiFYdMfx7fetJYIT+QvjUp/P3E15td3u9us6wSPB
v7vfMhXS5a8Nc2vMp7YNOhtkerwbGIlexDNPUZZVr0Q69frieSulZifMVjWJhYv8
Io9JlTT5Po9irQHKN4Q3ghHc5Yijs3HEP53cggFI8oFCZNDPRjnjrDegGz5Kvqsq
KMwrNkwhZh+slHT2XyR72WUscL2Cp1ZGEQhabA8KbSj9cMc3e7YE89Of4GnYba+T
DHAxuqfGYLk4d6jeyAGuZouJuq7sFTXvvZmB7deTiXMNvlvWz8ixO0A7DULwJcWi
btOOgwRxMq80OW+Bdhi/0Ma+YevSiQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGby
z4gHvIGPBJih+3cRTD5aQPDCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjMzMjZCMDA3MjkxMUYxODkwMDMyOTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOGMA0GCSqGSIb3DQEBCwUA
A4IBAQAfktktBMHrEOJOzvclAgvUFJ2VLkzyDMq3D7lwnLw0fcKXlfbpHjP7FHhz
F/MRQr11L9JcFjy8Yv3aULdsvr4yEHaqoWrHLyRyz3VSfzWnqbRnkyV/b7abRTog
mTHrhTeKe/p0jTuiCOy/nt1AcEeR5UZLG/wPj2rXm56tph8lQ+/317L7IC0fEqdu
C/4TqrQsgfavuTefqTbB3YqUOc9CZ/XNE6HbEW3AjZruMfD6PusiwB+hAuKvC2Xm
aOCEQLaIKk55Lmw788V+JqTpXq2AgvtZGIHFxpNLtniaOTN/wfTRvzugsnDgj4Ra
N0j6KnQe0/GN/C977UQrbnL+Y5kL
-----END CERTIFICATE-----
Generated at Wed Feb 18 07:33:23 2026 by rpki-client