Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCFE651A0A4511F191863EB6DAE4EC9C.roa
File:                     BCFE651A0A4511F191863EB6DAE4EC9C.roa (raw, json)
Hash identifier:          XKZmDqz5RsdTa2ljpIMtxcbnS8my2zrHc5guXRRlxM0=
Subject key identifier:   8D:93:38:39:67:3C:EF:FF:49:4C:C0:F7:A1:A3:F1:FD:FD:05:68:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019DC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCFE651A0A4511F191863EB6DAE4EC9C.roa
Signing time:             Sun 15 Feb 2026 08:10:07 +0000
ROA not before:           Sun 15 Feb 2026 08:10:02 +0000
ROA not after:            Thu 26 Feb 2026 08:10:02 +0000
asID:                     22773
IP address blocks:        156.229.4.0/24 maxlen: 24
                          156.229.5.0/24 maxlen: 24
                          156.229.6.0/24 maxlen: 24
                          156.229.7.0/24 maxlen: 24
                          156.233.208.0/24 maxlen: 24
                          156.233.209.0/24 maxlen: 24
                          156.233.210.0/24 maxlen: 24
                          156.233.211.0/24 maxlen: 24
                          156.233.212.0/24 maxlen: 24
                          156.242.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105925 (0x19dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 15 08:10:02 2026 GMT
            Not After : Feb 26 08:10:02 2026 GMT
        Subject: CN=69917f5f-b255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:e4:7a:b8:24:44:4d:a2:dd:88:90:c8:a8:
                    e2:ae:7a:7a:ac:5d:a1:79:19:7f:1e:69:88:06:0b:
                    b0:10:c8:f7:d8:75:c1:60:c5:d7:4d:77:af:ce:69:
                    f9:ae:0a:5f:0d:36:e5:42:cc:11:ec:01:45:43:d9:
                    a2:d9:bd:b6:b0:29:65:cc:0a:25:4c:6e:32:4a:3a:
                    4d:22:b7:b3:1f:7b:51:c0:3c:c2:91:b6:d5:cb:7b:
                    23:a9:5b:5f:e3:3a:1c:14:4d:ec:f6:c4:46:fe:c3:
                    cc:79:2d:e8:28:ad:a5:47:35:7a:f7:79:23:e0:1d:
                    b6:c6:f2:f0:57:eb:eb:0e:3f:f0:eb:9c:f2:50:18:
                    c3:d4:4d:53:b7:19:5f:36:0a:4a:ad:b7:2b:25:80:
                    3f:9a:ce:6c:a5:27:ca:82:57:c2:12:8e:da:76:6b:
                    0e:90:51:f5:b1:38:f7:c4:01:f6:02:12:8e:83:ea:
                    cf:8d:c1:95:8b:39:f2:e4:8a:4f:f2:48:c0:67:59:
                    94:4c:6a:11:8c:3d:8b:46:ea:d4:29:3e:7d:e1:42:
                    fe:82:bf:21:36:e9:f0:d8:73:bf:84:f4:b5:27:39:
                    b5:1d:b7:8f:6d:ec:2f:97:16:25:10:cb:0f:fc:10:
                    78:da:b5:04:d4:39:08:ea:e1:7d:20:00:ea:17:67:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:93:38:39:67:3C:EF:FF:49:4C:C0:F7:A1:A3:F1:FD:FD:05:68:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCFE651A0A4511F191863EB6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.4.0/22
                  156.233.208.0-156.233.212.255
                  156.242.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:55:44:17:c0:44:cf:2c:97:06:32:06:c8:9c:dc:f6:8c:
         59:34:91:4f:d5:63:6a:f6:40:41:6a:4e:84:e8:38:78:e0:80:
         b7:63:79:52:36:07:f4:99:a5:34:a2:c4:d4:d1:2f:98:ad:36:
         66:21:cc:4c:92:9d:29:e1:b6:25:f5:6d:71:48:94:95:49:e0:
         a4:fe:23:8c:82:f9:47:1d:2e:e2:44:2d:24:88:b9:76:a9:24:
         0e:0b:4e:e8:05:33:3a:61:1c:23:14:d2:1f:e7:64:33:c0:d2:
         81:5a:09:1d:08:30:e0:d2:4d:dc:77:ce:58:27:3f:d2:3f:e5:
         d7:f4:07:90:24:2c:a2:e1:6f:7a:70:84:f3:da:0a:1e:35:bf:
         a9:68:6e:ad:36:96:90:07:63:5a:ba:40:18:0b:75:d4:38:61:
         f2:b4:40:33:02:9c:e9:9f:3c:c6:5d:9e:ca:eb:ba:4c:4d:a6:
         18:8b:a0:ca:55:86:ba:ee:d4:5b:c5:bf:de:46:24:6b:ec:d0:
         f0:52:39:61:97:91:94:62:f4:8c:e8:44:95:dd:0e:39:dc:e7:
         e6:07:0a:be:17:55:0c:9f:51:05:47:cd:94:40:e3:9d:f2:11:
         71:e2:38:3f:fc:3d:3e:50:24:e4:91:a4:6f:6c:ed:78:0f:94:
         6c:31:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:56:57 2026 by rpki-client