Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB3903F40A4E11F18717CAE8DAE4EC9C.roa
File:                     AB3903F40A4E11F18717CAE8DAE4EC9C.roa (raw, json)
Hash identifier:          NBznX0ODszioeycm1zGtcWwoAriujP9VZezezNYJExU=
Subject key identifier:   0A:87:B8:56:1A:9C:7C:2A:E4:D0:64:35:5D:09:65:1B:E1:5C:70:E1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019DD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB3903F40A4E11F18717CAE8DAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 09:14:02 +0000
ROA not before:           Sun 15 Feb 2026 09:13:57 +0000
ROA not after:            Fri 27 Feb 2026 09:13:57 +0000
asID:                     22773
IP address blocks:        156.233.41.0/24 maxlen: 24
                          156.233.44.0/23 maxlen: 24
                          156.233.47.0/24 maxlen: 24
                          156.233.56.0/24 maxlen: 24
                          156.233.58.0/24 maxlen: 24
                          156.233.60.0/23 maxlen: 24
                          156.233.63.0/24 maxlen: 24
                          156.233.126.0/24 maxlen: 24
                          156.238.188.0/24 maxlen: 24
                          156.238.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105945 (0x19dd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 15 09:13:57 2026 GMT
            Not After : Feb 27 09:13:57 2026 GMT
        Subject: CN=69918e5a-5b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:57:2b:40:e0:28:9a:7f:d2:97:37:e4:dc:
                    72:2a:97:45:02:3c:81:42:92:14:59:69:a8:94:9d:
                    e2:45:c7:fb:f3:2f:00:af:b8:b2:3d:ff:cd:37:52:
                    f8:0a:a5:0f:61:18:e1:80:3d:ba:ef:54:b1:18:48:
                    df:5f:70:15:b2:8f:cf:73:d5:7f:7d:ba:ad:4d:80:
                    ec:df:b2:1f:ea:5d:fa:00:39:b1:ad:8d:18:7a:1a:
                    59:c3:b6:aa:63:1f:cc:69:09:bf:b4:35:69:b3:00:
                    ab:7e:1a:7c:0f:4f:bd:17:ab:49:c1:06:8c:00:e5:
                    76:40:1b:c3:11:12:b2:2b:c7:80:79:d4:fc:b6:2f:
                    3b:15:11:3c:1f:71:f9:92:c2:cd:18:be:ad:ce:a9:
                    e0:13:21:15:36:63:1c:5f:84:99:3f:8c:62:53:de:
                    b4:95:50:1b:37:85:f8:1b:33:a5:27:2a:97:6a:7e:
                    47:9a:70:94:ff:e4:4c:3d:53:8c:3e:a7:5a:cb:2a:
                    05:eb:fb:b7:12:df:b5:9b:ad:f8:df:12:d0:6a:b0:
                    8f:78:81:59:d1:a2:a1:ea:9a:3c:f2:96:90:68:14:
                    03:e4:1f:f9:c5:9d:1f:87:e1:91:78:42:f7:0f:9c:
                    50:84:8b:3d:7f:8f:64:ea:d7:34:7f:52:db:82:1a:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:B8:56:1A:9C:7C:2A:E4:D0:64:35:5D:09:65:1B:E1:5C:70:E1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB3903F40A4E11F18717CAE8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.41.0/24
                  156.233.44.0/23
                  156.233.47.0/24
                  156.233.56.0/24
                  156.233.58.0/24
                  156.233.60.0/23
                  156.233.63.0/24
                  156.233.126.0/24
                  156.238.188.0/24
                  156.238.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:20:7c:80:ad:65:16:ad:9a:15:9b:03:1d:c4:32:85:bf:
         8c:af:0d:b7:c9:f6:ab:29:b9:74:db:8d:4d:f9:39:9f:98:1b:
         b0:6b:f3:81:f1:40:37:00:e8:50:b8:13:bd:78:0b:83:ac:86:
         65:27:07:c1:97:8f:9a:1a:fb:bf:78:d4:91:db:d5:98:f9:d5:
         72:8e:2a:58:a5:af:23:93:34:fa:e8:bc:68:f0:0a:65:12:5b:
         18:cf:ca:47:ad:81:ff:0c:2c:24:b7:b4:9b:38:c7:7a:18:d8:
         44:3d:ba:21:b3:78:a0:c8:ce:18:fb:e4:03:b5:46:35:fe:e3:
         bd:9b:70:c0:ed:4c:57:e9:45:d9:33:34:64:24:a0:bd:7c:cd:
         1c:66:aa:2c:83:53:60:09:a9:84:89:49:9d:b9:f4:9d:34:8c:
         71:f8:b6:57:f2:34:44:8e:d2:d3:c5:14:c8:a8:45:c9:f5:8d:
         f4:46:a5:26:78:6c:61:76:85:b2:24:4a:3d:e5:e3:6a:a7:df:
         7b:d1:b7:0f:25:2f:06:7c:ba:24:d1:d9:78:14:a2:53:52:19:
         52:1c:6b:b7:0e:69:a4:72:59:89:30:90:75:15:97:47:35:84:
         1a:ac:de:d7:a0:93:68:74:96:c2:7f:70:64:65:20:6c:7f:d5:
         ff:7d:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:57:06 2026 by rpki-client