Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E9A59A0A4711F19807C2BEDAE4EC9C.roa
File:                     87E9A59A0A4711F19807C2BEDAE4EC9C.roa (raw, json)
Hash identifier:          nCPSGAU+jEuiJZW8YSxKA9hnEFoWWzlAttsOgT+aygU=
Subject key identifier:   84:FD:EE:60:47:8D:09:3C:EE:30:B4:98:CC:E9:0D:C9:E4:AB:05:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019DC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E9A59A0A4711F19807C2BEDAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 08:22:57 +0000
ROA not before:           Sun 15 Feb 2026 08:22:51 +0000
ROA not after:            Thu 26 Feb 2026 08:22:51 +0000
asID:                     22773
IP address blocks:        156.242.54.0/24 maxlen: 24
                          156.242.55.0/24 maxlen: 24
                          156.242.56.0/24 maxlen: 24
                          156.242.57.0/24 maxlen: 24
                          156.242.58.0/24 maxlen: 24
                          156.242.59.0/24 maxlen: 24
                          156.242.60.0/24 maxlen: 24
                          156.242.61.0/24 maxlen: 24
                          156.242.62.0/24 maxlen: 24
                          156.243.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105929 (0x19dc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 15 08:22:51 2026 GMT
            Not After : Feb 26 08:22:51 2026 GMT
        Subject: CN=69918261-72b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:d6:ab:44:7a:b7:04:4b:45:9d:b8:86:29:
                    8e:86:0c:4b:12:13:40:40:55:10:11:85:9a:c6:3e:
                    93:4c:0b:9e:12:9d:87:b3:b7:75:2d:89:da:22:a1:
                    0c:67:d7:05:2d:4e:7b:24:01:93:b7:ee:66:8f:7b:
                    5e:a0:61:7e:fa:7d:06:71:c1:ce:09:60:74:75:80:
                    1c:98:e1:4b:d4:ea:0c:9b:1e:1e:b9:11:32:38:c2:
                    a7:e4:e4:47:43:62:0d:f8:5d:4f:dc:8f:59:19:b9:
                    4a:a5:4c:ee:cb:af:1e:78:38:1e:73:89:a2:91:16:
                    1d:e4:6d:9d:13:30:ff:55:70:2d:a9:41:ac:b7:a5:
                    f7:3c:06:4e:ae:ee:69:61:ac:be:2f:80:3c:66:04:
                    ca:6f:4a:4f:00:0a:11:7c:e5:0e:35:bf:2d:53:34:
                    93:55:a2:3b:00:13:ff:6f:9c:a3:b3:fa:bc:fc:57:
                    f0:8e:8f:e3:74:42:3f:ba:98:0a:1c:81:b7:d7:67:
                    e7:b5:77:21:56:84:8f:b8:df:bb:f6:8f:74:90:4c:
                    14:91:0f:93:34:13:7e:0c:56:d2:30:af:b3:aa:56:
                    92:9b:d8:28:89:e4:19:d8:70:fe:a1:d7:ce:6d:50:
                    3c:ec:9f:1a:9f:0c:62:ab:4e:33:07:14:2f:18:3b:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FD:EE:60:47:8D:09:3C:EE:30:B4:98:CC:E9:0D:C9:E4:AB:05:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87E9A59A0A4711F19807C2BEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.54.0-156.242.62.255
                  156.243.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:2d:44:27:7c:6f:70:6b:d0:3d:f9:8a:54:37:23:12:a1:
         fb:e8:3b:2c:5c:b8:00:4f:f8:59:a9:8e:2a:a2:33:34:7c:9c:
         cf:f6:0d:59:99:bd:1c:cf:3f:00:d3:9e:76:07:2e:d8:85:2a:
         92:84:4d:4a:88:e7:fd:81:27:ea:b3:44:71:6b:1f:61:ca:75:
         77:82:34:09:77:98:ea:83:ec:32:1e:e7:5b:8b:03:70:44:93:
         86:03:a6:eb:15:9d:e2:38:8a:99:d0:3c:f8:13:51:46:5b:1f:
         a1:d0:f8:92:07:4b:2d:2b:2b:de:c2:ea:37:d1:8f:e3:5b:26:
         c2:f1:8a:4a:ff:20:ed:eb:a8:b7:33:bc:b8:2d:ef:23:8c:df:
         1d:78:48:b6:5a:0e:4d:69:22:74:03:6f:52:0f:f4:d6:a9:ff:
         b2:da:60:52:7c:73:5a:41:92:72:7f:74:03:5f:56:df:d1:a2:
         c5:44:a8:3f:58:92:d6:83:4f:07:b5:99:6d:4c:32:69:89:52:
         67:86:5e:dd:36:61:93:0a:f0:14:e0:3f:5b:92:f5:4f:26:79:
         17:a0:d2:d6:86:48:de:0b:1c:6c:c1:56:e0:d8:98:3a:c0:de:
         2d:51:ca:89:70:2f:03:4c:04:be:01:9a:bc:f8:fb:86:ab:6a:
         8a:e5:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:58:22 2026 by rpki-client