Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56BC9E54A87211F1ABE7F0E4CE1D38B0.roa
File:                     56BC9E54A87211F1ABE7F0E4CE1D38B0.roa (raw, json)
Hash identifier:          afaNk9nsHdnPO9SBxKgBIM6AuYOqmOxk4OYzm7CqZV8=
Subject key identifier:   44:F3:31:36:33:70:9A:33:DD:B8:54:BE:24:A3:89:4D:75:6F:F8:17
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       2182
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56BC9E54A87211F1ABE7F0E4CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:07:26 +0000
ROA not before:           Fri 04 Sep 2026 15:07:22 +0000
ROA not after:            Mon 04 Sep 2028 15:07:22 +0000
asID:                     834
IP address blocks:        154.127.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8578 (0x2182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep  4 15:07:22 2026 GMT
            Not After : Sep  4 15:07:22 2028 GMT
        Subject: CN=6a9adeae-d3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d6:3b:ca:2e:26:07:91:c6:85:eb:78:1f:30:
                    53:2e:6f:c2:ea:a4:b1:89:14:c6:5e:30:f5:56:fd:
                    b2:71:77:af:5d:39:6b:12:c3:9b:31:e9:3b:e1:46:
                    9a:9d:dd:71:30:8b:b9:ef:1d:6a:65:a1:8f:8d:ad:
                    2f:f1:4a:63:dd:a6:07:5a:cb:aa:1f:96:53:9a:f9:
                    3b:93:dd:9d:4b:12:18:54:7e:e2:e7:88:62:d3:15:
                    b2:04:15:95:a7:fe:60:22:e5:7b:7d:fd:ce:a8:fc:
                    78:4f:c4:ff:f3:d2:57:2f:19:ee:1e:eb:fa:3b:4f:
                    84:ab:3d:c2:7c:59:f1:9d:d4:0b:03:47:75:0a:77:
                    80:bd:65:12:d6:88:f9:46:c3:f3:5b:45:68:0a:9a:
                    9c:76:9d:61:cc:93:9e:3f:f4:c2:74:f3:cd:96:93:
                    51:5c:8b:9d:f7:b5:03:8a:73:c0:d9:53:2d:03:ed:
                    7d:6a:32:b6:de:f2:a5:07:f2:fd:6f:7c:1d:17:f2:
                    2f:b7:f6:e0:48:31:35:3e:1e:9b:e5:f0:34:f4:41:
                    17:2e:02:09:1d:e2:01:29:45:e8:5a:8e:17:90:01:
                    67:e6:eb:ae:1b:b4:1a:a1:e3:41:8b:d8:b7:73:f1:
                    b9:2c:75:87:a8:3a:a7:57:79:85:36:46:48:f5:97:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:31:36:33:70:9A:33:DD:B8:54:BE:24:A3:89:4D:75:6F:F8:17
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56BC9E54A87211F1ABE7F0E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:ed:eb:40:59:93:d5:a9:d5:04:f6:03:ab:3f:a5:ad:50:
         d8:26:f4:6d:ac:fd:26:af:78:b9:71:fd:e8:61:8b:68:59:94:
         7f:70:55:b4:6e:b8:c9:5f:50:19:90:fd:1d:64:aa:f6:8e:fd:
         2f:30:26:b0:0d:18:ca:6d:15:c1:95:c2:1a:5c:7c:51:33:71:
         98:64:41:dc:1c:70:c1:71:4e:3e:06:42:a0:e5:e1:6f:a6:95:
         01:b6:60:c5:13:73:84:f9:11:40:ad:6d:02:79:ed:6a:8f:cc:
         62:1b:4b:14:3f:95:78:56:5d:56:8a:28:2e:15:81:10:b8:c8:
         b1:70:ca:30:d6:2c:cc:09:22:f3:0b:04:58:8d:f4:13:93:17:
         2f:12:cc:73:9d:e8:a2:7f:28:74:98:ed:93:da:04:35:47:d6:
         be:60:a5:61:c8:57:1b:4e:01:62:1a:d7:70:85:77:66:a4:62:
         21:d0:85:99:1f:92:4b:8c:5d:53:27:c9:9a:17:7a:b3:12:66:
         1a:74:e0:64:9a:e0:b3:5c:6d:de:5d:ad:5f:c7:df:34:a7:89:
         9c:0c:27:7c:b7:70:3b:13:6b:09:53:d2:e2:56:18:2e:d7:b5:
         3f:c0:de:fd:f7:fd:eb:45:46:6b:08:24:d4:c7:bc:55:bd:e6:
         2e:02:2e:3c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIYIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA5MDQxNTA3MjJaFw0yODA5MDQxNTA3MjJaMBgxFjAU
BgNVBAMTDTZhOWFkZWFlLWQzYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDv1jvKLiYHkcaF63gfMFMub8LqpLGJFMZeMPVW/bJxd69dOWsSw5sx6Tvh
Rpqd3XEwi7nvHWploY+NrS/xSmPdpgday6ofllOa+TuT3Z1LEhhUfuLniGLTFbIE
FZWn/mAi5Xt9/c6o/HhPxP/z0lcvGe4e6/o7T4SrPcJ8WfGd1AsDR3UKd4C9ZRLW
iPlGw/NbRWgKmpx2nWHMk54/9MJ0882Wk1Fci533tQOKc8DZUy0D7X1qMrbe8qUH
8v1vfB0X8i+39uBIMTU+Hpvl8DT0QRcuAgkd4gEpRehajheQAWfm664btBqh40GL
2Ldz8bksdYeoOqdXeYU2Rkj1l7tjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQURPMx
NjNwmjPduFS+JKOJTXVv+BcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzU2QkM5RTU0QTg3MjExRjFBQkU3RjBFNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzMwDQYJKoZIhvcNAQEL
BQADggEBADgL7etAWZPVqdUE9gOrP6WtUNgm9G2s/SaveLlx/ehhi2hZlH9wVbRu
uMlfUBmQ/R1kqvaO/S8wJrANGMptFcGVwhpcfFEzcZhkQdwccMFxTj4GQqDl4W+m
lQG2YMUTc4T5EUCtbQJ57WqPzGIbSxQ/lXhWXVaKKC4VgRC4yLFwyjDWLMwJIvML
BFiN9BOTFy8SzHOd6KJ/KHSY7ZPaBDVH1r5gpWHIVxtOAWIa13CFd2akYiHQhZkf
kkuMXVMnyZoXerMSZhp04GSa4LNcbd5drV/H3zSniZwMJ3y3cDsTawlT0uJWGC7X
tT/A3v33/etFRmsIJNTHvFW95i4CLjw=
-----END CERTIFICATE-----