Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A200360C0A4611F1970A79BADAE4EC9C.roa
File:                     A200360C0A4611F1970A79BADAE4EC9C.roa (raw, json)
Hash identifier:          Mf22XPU+lL69HItV7G0gOOWS/w5+WTgNRxpoP67c910=
Subject key identifier:   B9:02:DB:DB:3A:A6:0C:81:C7:7F:A6:05:66:81:02:10:4E:63:DA:39
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019DC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A200360C0A4611F1970A79BADAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 08:16:31 +0000
ROA not before:           Sun 15 Feb 2026 08:16:26 +0000
ROA not after:            Thu 26 Feb 2026 08:16:26 +0000
asID:                     22773
IP address blocks:        156.238.154.0/24 maxlen: 24
                          156.238.155.0/24 maxlen: 24
                          156.238.156.0/24 maxlen: 24
                          156.238.157.0/24 maxlen: 24
                          156.238.158.0/24 maxlen: 24
                          156.238.159.0/24 maxlen: 24
                          156.238.160.0/24 maxlen: 24
                          156.242.17.0/24 maxlen: 24
                          156.242.18.0/24 maxlen: 24
                          156.242.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105927 (0x19dc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 15 08:16:26 2026 GMT
            Not After : Feb 26 08:16:26 2026 GMT
        Subject: CN=699180df-5956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:41:31:df:06:ad:63:d9:46:8f:6d:78:1c:
                    24:0c:d7:cd:43:30:af:ed:2e:02:ea:d6:72:50:85:
                    e7:32:3f:8c:44:8e:5d:2d:a2:87:24:e7:df:31:d1:
                    59:ee:95:13:2e:10:9e:fc:f1:77:99:50:c5:96:c6:
                    97:76:f2:f2:ae:6e:9b:f2:ea:c4:ac:b9:2a:c5:7a:
                    22:3e:d1:b6:db:29:b7:45:7d:b9:77:32:2c:1d:92:
                    ad:fe:34:3e:73:4e:f4:08:b9:64:aa:db:c6:05:27:
                    19:9e:69:8b:d6:e6:45:ba:28:16:99:f2:ee:e9:dd:
                    ee:56:74:a2:10:f9:f7:ab:ad:60:a4:e3:76:27:56:
                    e7:08:14:5d:66:c3:67:33:76:a4:52:10:2b:2d:ea:
                    f6:49:23:da:7e:1c:14:2d:28:70:e9:ac:7b:44:51:
                    20:e0:b9:f9:25:64:d5:c7:78:bf:9f:af:75:a2:e9:
                    38:07:60:26:f1:df:6a:fb:9e:b1:ee:97:4f:ca:a8:
                    c4:ff:d8:87:40:5b:dc:a3:b1:4d:e9:2c:a2:67:a7:
                    80:0f:2b:80:ac:b2:d4:20:34:8a:99:1b:77:8f:fd:
                    a8:82:80:f7:b8:79:6e:c3:2e:65:c4:ac:c9:9f:3c:
                    d5:29:49:61:30:54:04:2f:1f:12:5e:89:b2:b1:75:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:02:DB:DB:3A:A6:0C:81:C7:7F:A6:05:66:81:02:10:4E:63:DA:39
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A200360C0A4611F1970A79BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.154.0-156.238.160.255
                  156.242.17.0-156.242.18.255
                  156.242.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:93:71:e1:3b:dc:25:4d:d9:29:67:6f:61:69:b5:18:5e:b7:
         2c:c2:22:aa:81:7e:b7:36:75:40:4e:e0:e7:1f:5a:8d:16:e1:
         c5:1f:0d:ee:91:b7:0d:7c:2e:8b:f9:d4:38:26:4a:34:06:52:
         e3:df:89:5f:d0:8a:ad:07:93:3b:cb:75:3a:42:01:7d:3c:89:
         c8:59:82:e2:ee:23:50:25:5b:cf:08:95:f8:d1:f7:fe:d4:12:
         2e:22:7d:97:f1:78:40:3e:97:6b:38:ff:ed:14:f0:79:61:38:
         2b:10:5d:a3:a0:e7:5c:50:0a:8e:0f:e6:d8:59:56:a3:1e:25:
         30:d2:03:3e:fe:2f:ae:f7:d9:48:19:e6:5f:9f:37:cc:5d:37:
         d8:56:87:17:f4:bc:7c:f8:2b:b6:2e:cb:45:c6:91:dd:aa:a5:
         7a:91:bc:1e:29:72:6b:25:ba:5b:58:8f:37:db:69:08:df:c4:
         e1:cc:0c:c1:b9:f1:8f:93:74:79:b1:f3:f9:60:58:a9:a5:6f:
         c7:47:13:98:64:74:e1:9b:b9:1c:f2:d3:6a:fd:26:8e:e2:79:
         97:e7:8f:18:17:94:80:67:c7:9e:f3:f0:15:54:94:46:d5:45:
         1a:4c:56:20:fc:8b:d9:23:fc:83:51:85:7e:08:15:d6:38:3d:
         bf:ea:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:57:06 2026 by rpki-client