Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BABF4E9696F811F19A28D9CACE1D38B0.roa
File:                     BABF4E9696F811F19A28D9CACE1D38B0.roa (raw, json)
Hash identifier:          NJEhgdhx7azgJ81OsPtNL3PlaCQ6Ua3hKgq+FIxqBHo=
Subject key identifier:   87:50:90:0A:3A:75:4E:F7:35:C5:F2:AD:67:C9:8A:01:5D:12:A2:64
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BABF4E9696F811F19A28D9CACE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:24:06 +0000
ROA not before:           Thu 13 Aug 2026 09:24:02 +0000
ROA not after:            Mon 21 Sep 2026 09:24:02 +0000
asID:                     214143
IP address blocks:        154.196.214.0/24 maxlen: 24
                          154.197.25.0/24 maxlen: 24
                          154.197.90.0/24 maxlen: 24
                          154.197.127.0/24 maxlen: 24
                          154.200.72.0/21 maxlen: 24
                          154.200.109.0/24 maxlen: 24
                          154.203.196.0/22 maxlen: 24
                          154.203.208.0/22 maxlen: 24
                          154.203.240.0/24 maxlen: 24
                          154.205.248.0/22 maxlen: 24
                          154.206.4.0/22 maxlen: 24
                          154.206.11.0/24 maxlen: 24
                          154.208.72.0/22 maxlen: 24
                          154.208.88.0/22 maxlen: 24
                          154.222.72.0/23 maxlen: 24
                          154.222.80.0/23 maxlen: 24
                          154.222.82.0/23 maxlen: 24
                          154.223.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122601 (0x1dee9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 09:24:02 2026 GMT
            Not After : Sep 21 09:24:02 2026 GMT
        Subject: CN=6a7d8d36-d4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:52:fc:6d:f5:2c:c6:4e:45:7e:dd:f3:18:
                    c7:5d:cc:e7:ce:ab:16:4e:92:13:78:44:6b:e1:9f:
                    07:4d:f3:f9:41:f2:c9:5e:96:d5:de:42:f8:18:8b:
                    c8:08:e9:a5:0f:2c:04:3a:42:c3:0a:30:73:b1:e1:
                    a5:14:72:ae:40:93:19:e6:86:87:f5:69:9c:bb:d0:
                    bf:db:cd:62:96:79:b0:7b:b7:23:7a:0f:66:c6:8e:
                    88:85:63:bc:77:d9:1f:98:6e:76:5f:87:c3:02:ea:
                    9a:f1:ee:41:92:57:f4:e4:70:32:9f:12:eb:0e:a7:
                    e5:f2:f6:7c:c3:34:c3:45:74:4e:40:1a:d0:c4:f8:
                    53:db:be:4c:b4:f7:0f:df:90:aa:37:40:e7:d3:2b:
                    69:42:c6:86:a9:8d:83:01:cc:cf:cb:74:6f:9e:20:
                    58:f6:53:f5:ed:4d:9d:bb:a6:3e:14:46:a2:f9:ac:
                    fc:dd:d6:fd:f3:64:27:0c:09:af:6b:05:1d:5c:41:
                    52:08:22:33:38:5c:c2:df:77:db:cd:fb:51:50:f9:
                    46:6d:4c:68:70:da:7f:d6:bc:73:d8:1a:3a:0a:d1:
                    ca:b6:1e:b1:3f:9b:a0:ba:a8:91:94:d8:bf:25:d1:
                    a2:3c:9d:c6:9d:2a:f8:b0:80:9e:33:4b:d8:93:15:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:50:90:0A:3A:75:4E:F7:35:C5:F2:AD:67:C9:8A:01:5D:12:A2:64
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BABF4E9696F811F19A28D9CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.214.0/24
                  154.197.25.0/24
                  154.197.90.0/24
                  154.197.127.0/24
                  154.200.72.0/21
                  154.200.109.0/24
                  154.203.196.0/22
                  154.203.208.0/22
                  154.203.240.0/24
                  154.205.248.0/22
                  154.206.4.0/22
                  154.206.11.0/24
                  154.208.72.0/22
                  154.208.88.0/22
                  154.222.72.0/23
                  154.222.80.0/22
                  154.223.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:2c:b4:9a:31:32:e6:a8:fd:d0:a3:29:a0:88:3c:d0:6e:
         e3:28:7c:5f:06:d2:3d:2f:a1:15:63:e1:3c:78:79:0f:50:e5:
         54:ba:70:17:e8:8a:73:43:be:e3:f0:20:de:05:ba:25:10:bf:
         09:1a:2f:64:ba:59:03:4b:7d:30:41:06:de:f2:db:34:01:f5:
         59:12:b8:34:89:e9:b5:98:65:69:43:8b:39:ea:76:42:40:46:
         5a:2c:94:0d:a6:ac:67:3a:63:77:26:39:fa:76:93:ed:47:e8:
         73:76:9b:39:35:32:7f:cf:0b:0b:7b:d5:34:20:7b:92:df:db:
         d7:6c:ba:94:83:43:5f:8a:7d:25:02:9f:1c:ec:2f:37:f9:1a:
         51:93:f1:2b:a6:70:e3:9c:3e:fd:1a:31:5b:1a:96:e8:3f:85:
         9d:b1:c4:f9:c6:5e:78:41:50:f8:c6:73:e6:80:2f:70:11:1b:
         07:ff:cc:bb:2b:78:df:a9:c6:52:45:08:0e:2b:7d:ab:17:5d:
         e2:86:0e:1f:40:17:4e:1c:40:1f:f3:ff:37:35:d4:ce:f0:d2:
         74:c6:58:7d:e4:be:0f:30:2d:f8:96:dc:96:4c:4a:33:45:c5:
         31:ce:b3:0a:2f:9a:03:ce:78:da:fe:4a:4c:e5:6a:64:b0:32:
         df:74:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----