Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/796D59340B1511F19E2E53B1DAE4EC9C.roa
File:                     796D59340B1511F19E2E53B1DAE4EC9C.roa (raw, json)
Hash identifier:          /h9ZcBPqsHWgKVHprYzVLNKud+ThlKEhkpn8txVXRcg=
Subject key identifier:   5B:68:8C:7A:F8:5D:D0:41:3B:68:6F:EC:8F:0E:7B:C7:B5:0F:D3:6E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019E36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/796D59340B1511F19E2E53B1DAE4EC9C.roa
Signing time:             Mon 16 Feb 2026 08:57:09 +0000
ROA not before:           Mon 16 Feb 2026 08:57:04 +0000
ROA not after:            Mon 16 Mar 2026 08:57:04 +0000
asID:                     22773
IP address blocks:        156.242.49.0/24 maxlen: 24
                          156.242.50.0/24 maxlen: 24
                          156.242.52.0/24 maxlen: 24
                          156.242.53.0/24 maxlen: 24
                          156.242.95.0/24 maxlen: 24
                          156.242.121.0/24 maxlen: 24
                          156.242.122.0/24 maxlen: 24
                          156.242.224.0/24 maxlen: 24
                          156.242.225.0/24 maxlen: 24
                          156.242.226.0/24 maxlen: 24
                          156.242.227.0/24 maxlen: 24
                          156.242.228.0/24 maxlen: 24
                          156.242.229.0/24 maxlen: 24
                          156.242.230.0/24 maxlen: 24
                          156.242.250.0/24 maxlen: 24
                          156.242.251.0/24 maxlen: 24
                          156.242.252.0/24 maxlen: 24
                          156.242.253.0/24 maxlen: 24
                          156.242.254.0/24 maxlen: 24
                          156.242.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106038 (0x19e36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 08:57:04 2026 GMT
            Not After : Mar 16 08:57:04 2026 GMT
        Subject: CN=6992dbe5-2c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:de:d1:d3:92:92:9a:06:c2:56:1d:99:be:46:
                    a9:c2:d8:2a:44:07:e1:33:45:f3:29:43:a6:48:2b:
                    66:20:b4:59:d3:00:3d:4a:a2:1f:90:5c:d2:a1:b0:
                    e6:3c:7d:53:ad:cc:e8:3b:30:82:16:6f:c7:29:88:
                    da:db:80:f4:ba:09:c6:24:39:f1:13:75:8a:3b:ac:
                    f0:73:96:63:c4:18:9a:47:dd:7a:7e:3e:87:d7:d7:
                    73:68:4e:5e:02:71:e6:61:e0:ff:29:19:0d:5b:19:
                    cf:c8:3f:d3:a1:d5:ca:da:c0:ca:1c:d0:fa:9a:4a:
                    15:a9:4a:da:b4:57:6d:bb:4f:60:4c:2f:9f:4f:04:
                    c2:96:7d:f8:b3:8d:fa:ef:27:3c:28:15:28:21:c4:
                    c5:ca:29:0a:20:78:49:6c:b3:c2:46:9c:13:d0:7e:
                    e6:f3:e7:91:c5:1f:80:f5:dd:17:a1:33:53:b4:5c:
                    bb:ca:6b:8f:cb:2c:c4:0f:05:3d:5c:bb:29:28:3e:
                    3e:41:3e:2c:f6:81:19:0d:1a:d1:f7:52:84:ab:0a:
                    04:1c:9c:6c:e3:70:4e:a8:e6:e6:8f:48:c8:d6:91:
                    b8:b9:df:d5:d3:d2:ed:e3:95:40:e0:16:44:36:66:
                    6d:b6:2a:00:42:42:06:a3:4e:36:87:31:d4:97:19:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:68:8C:7A:F8:5D:D0:41:3B:68:6F:EC:8F:0E:7B:C7:B5:0F:D3:6E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/796D59340B1511F19E2E53B1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.49.0-156.242.50.255
                  156.242.52.0/23
                  156.242.95.0/24
                  156.242.121.0-156.242.122.255
                  156.242.224.0-156.242.230.255
                  156.242.250.0-156.242.255.255

    Signature Algorithm: sha256WithRSAEncryption
         af:4b:b3:16:9e:7c:fa:1d:ca:1b:87:f8:c9:07:da:fe:ca:e9:
         40:04:0b:48:a2:4f:29:5f:b3:2f:2c:cd:a1:a2:e6:35:39:d6:
         8d:82:50:f1:51:82:80:56:5d:d3:f9:55:b8:75:27:2d:30:45:
         d6:ed:e8:58:3d:ad:34:1a:ce:fd:98:fd:8a:17:f8:de:06:a7:
         35:5c:22:04:b3:4d:b4:e7:40:cc:ac:72:5e:37:17:b5:76:33:
         28:24:28:d0:d7:77:b4:96:87:11:28:e8:49:ed:88:66:c6:16:
         dc:c3:07:0e:f1:c0:37:5a:09:e8:ad:24:be:a4:33:b1:f1:24:
         93:1c:1c:90:cd:f2:d7:1b:53:47:85:b3:5c:7f:f6:e0:78:88:
         23:fe:68:3c:9a:82:bc:a9:bd:b2:27:81:dc:4f:61:ae:5b:6c:
         c0:28:a7:7c:69:38:25:a5:1f:cc:8b:cc:d6:fc:2c:ca:2b:83:
         fc:82:e3:04:4a:ae:1e:b9:6f:9a:36:a2:7d:40:bf:dc:7d:d5:
         4f:82:bd:09:57:fb:05:8d:8f:42:e2:42:37:8b:61:0a:d3:5b:
         61:61:83:18:ff:64:5b:41:f9:2d:78:3b:a9:a4:76:02:49:ad:
         e3:a2:c1:ea:fb:d5:9d:fd:93:6f:6c:0d:96:d4:9f:50:44:5c:
         ee:3d:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:58:22 2026 by rpki-client