Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F31D7CF20B1D11F1B13DBBE3DAE4EC9C.roa
File:                     F31D7CF20B1D11F1B13DBBE3DAE4EC9C.roa (raw, json)
Hash identifier:          hHJWAf06tZLCt97wCVzw2G00kcNqVHRV3DzVRP8xnwM=
Subject key identifier:   E0:40:1D:66:06:AB:E9:24:7B:5C:9B:09:B7:74:1B:28:A8:B6:98:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019E50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F31D7CF20B1D11F1B13DBBE3DAE4EC9C.roa
Signing time:             Mon 16 Feb 2026 09:57:49 +0000
ROA not before:           Mon 16 Feb 2026 09:57:44 +0000
ROA not after:            Tue 17 Mar 2026 09:57:44 +0000
asID:                     22773
IP address blocks:        156.229.55.0/24 maxlen: 24
                          156.229.61.0/24 maxlen: 24
                          156.229.63.0/24 maxlen: 24
                          156.233.41.0/24 maxlen: 24
                          156.233.42.0/24 maxlen: 24
                          156.233.44.0/23 maxlen: 24
                          156.233.47.0/24 maxlen: 24
                          156.233.56.0/24 maxlen: 24
                          156.233.58.0/24 maxlen: 24
                          156.233.60.0/23 maxlen: 24
                          156.233.63.0/24 maxlen: 24
                          156.233.126.0/24 maxlen: 24
                          156.238.188.0/24 maxlen: 24
                          156.238.190.0/23 maxlen: 24
                          156.239.57.0/24 maxlen: 24
                          156.239.58.0/23 maxlen: 24
                          156.239.61.0/24 maxlen: 24
                          156.239.62.0/23 maxlen: 24
                          156.239.141.0/24 maxlen: 24
                          156.239.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106064 (0x19e50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 09:57:44 2026 GMT
            Not After : Mar 17 09:57:44 2026 GMT
        Subject: CN=6992ea1d-a2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:7b:52:ab:f4:d2:3f:a2:b5:f9:c8:20:aa:
                    52:7a:aa:3a:6d:ed:35:51:97:14:c0:cc:c6:8a:8d:
                    20:10:98:a0:0a:82:40:d9:1a:94:6e:25:e6:5b:97:
                    ab:04:30:77:1b:22:b5:c6:01:f9:86:e5:43:7b:59:
                    6b:2a:7a:94:50:1c:3b:ac:44:a5:62:a3:e0:41:e4:
                    57:55:7d:79:00:a3:a4:f2:60:b0:20:86:17:01:86:
                    38:3e:b7:24:16:be:65:ec:97:55:cf:fc:fb:a9:4f:
                    58:ae:e8:94:13:48:a8:00:3b:37:36:91:0b:7b:d0:
                    d0:85:d0:b1:50:52:8f:fe:cd:ad:23:e2:5d:75:2c:
                    e9:6c:09:51:a8:60:de:41:75:91:9f:f8:2a:44:f0:
                    9b:12:3e:4c:4d:68:b1:f9:b9:4d:e9:12:60:30:21:
                    ae:bd:04:e4:9e:18:a3:bd:98:ad:7c:03:fd:6c:1f:
                    92:b7:f5:bb:58:70:21:46:14:ae:ab:e4:19:49:d3:
                    60:df:fc:88:f4:b4:ad:96:a6:e6:cd:a3:60:41:66:
                    f1:5e:77:f8:1f:d9:d3:13:ef:80:41:3a:a5:05:3d:
                    6a:e4:a9:67:39:89:54:a0:cf:b8:da:72:d3:2a:34:
                    84:d9:15:7d:c0:b9:df:a7:99:c7:57:28:1c:91:05:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:40:1D:66:06:AB:E9:24:7B:5C:9B:09:B7:74:1B:28:A8:B6:98:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F31D7CF20B1D11F1B13DBBE3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.55.0/24
                  156.229.61.0/24
                  156.229.63.0/24
                  156.233.41.0-156.233.42.255
                  156.233.44.0/23
                  156.233.47.0/24
                  156.233.56.0/24
                  156.233.58.0/24
                  156.233.60.0/23
                  156.233.63.0/24
                  156.233.126.0/24
                  156.238.188.0/24
                  156.238.190.0/23
                  156.239.57.0-156.239.59.255
                  156.239.61.0-156.239.63.255
                  156.239.141.0/24
                  156.239.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:4f:7d:b0:2a:18:0d:53:7d:37:b2:96:0f:9a:29:01:9b:c5:
         ad:de:6d:4a:cf:2c:00:fa:05:65:43:93:62:a7:59:b4:3e:1b:
         35:e0:59:1d:36:8b:e0:78:a4:26:40:4d:3f:5d:d0:63:43:97:
         da:30:d1:48:a0:91:3a:e8:95:29:6f:c4:ff:74:1c:3c:0e:ac:
         06:fe:ce:51:43:f0:26:de:04:85:97:2d:4d:4a:9a:b9:b9:d5:
         b1:53:68:e9:47:b0:ca:3a:67:5c:20:33:b5:50:be:a5:c3:1d:
         3d:eb:4c:25:25:8b:8f:64:dd:bb:60:ac:e7:6d:b4:f4:83:71:
         39:c8:4d:7e:7a:37:48:68:45:9c:8b:f7:f4:2c:83:e3:01:6b:
         00:6c:91:dd:16:6a:8b:59:21:d8:f9:95:1d:da:0d:fb:66:16:
         49:b3:54:71:77:96:6d:4b:59:76:6e:70:97:96:67:fd:97:6d:
         2a:e1:a0:10:2a:e4:2d:7c:13:ac:1f:a9:83:75:ff:1e:d0:27:
         5d:1a:81:76:e7:47:14:ed:79:c5:9f:e6:d2:2a:04:26:ab:09:
         b0:5c:0e:b0:26:15:35:90:8a:4b:20:19:cd:d0:d6:16:f5:bb:
         07:52:01:54:3a:3b:f4:f9:bd:c7:67:3d:bc:fb:73:33:26:24:
         67:a5:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:56:57 2026 by rpki-client