Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567958C89AD111F189EB271ECF1D38B0.roa
File:                     567958C89AD111F189EB271ECF1D38B0.roa (raw, json)
Hash identifier:          r5YL2IPcpxH0bYpmFIzhyxWzWXsj64IpcM/1BwoPZQ4=
Subject key identifier:   7A:90:10:EA:2F:DF:02:AA:4D:52:0F:2C:55:96:D9:5C:01:F3:CC:F0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567958C89AD111F189EB271ECF1D38B0.roa
Signing time:             Tue 18 Aug 2026 06:52:12 +0000
ROA not before:           Tue 18 Aug 2026 06:52:08 +0000
ROA not after:            Sun 03 Dec 2028 06:52:08 +0000
asID:                     17561
IP address blocks:        154.196.141.0/24 maxlen: 24
                          154.200.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122742 (0x1df76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 18 06:52:08 2026 GMT
            Not After : Dec  3 06:52:08 2028 GMT
        Subject: CN=6a84011c-3c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:3c:1b:fd:91:b3:80:36:8c:58:48:a5:61:
                    21:9b:2d:37:2a:13:4a:a4:ef:aa:69:ee:dd:eb:1d:
                    01:b7:42:4b:a5:8e:11:17:a8:8f:dd:6a:95:9f:e9:
                    8d:7a:91:9f:15:b7:27:3d:92:00:12:2e:96:e9:70:
                    5d:d1:23:31:4d:72:b5:9d:05:ed:5e:d0:6e:b2:41:
                    a2:fc:38:3a:3b:d2:c3:25:dc:43:6a:92:62:62:3a:
                    f9:ce:6d:fa:34:cd:3b:49:db:30:cd:fd:3e:64:d2:
                    4e:12:61:82:c1:d3:6b:16:99:3c:cb:58:38:ec:24:
                    3c:e2:3c:67:f0:e1:c7:b2:68:65:c1:02:df:35:3a:
                    74:de:eb:f5:db:da:fe:19:20:d8:3d:1e:c1:f4:64:
                    73:37:98:5d:e0:45:86:55:95:61:46:81:22:5d:0e:
                    a5:91:ff:76:a8:38:87:1e:ac:98:18:da:ca:ff:bb:
                    4b:13:b0:96:5b:20:f4:92:ed:37:21:63:65:80:dd:
                    8f:92:5d:93:07:23:aa:fb:f1:5f:aa:2b:77:af:9a:
                    97:44:aa:6c:13:a8:ab:6a:54:cd:00:97:f8:19:bc:
                    64:2d:45:bf:01:81:92:91:a1:bd:68:3e:be:92:a4:
                    16:05:63:37:ca:49:c7:99:4b:12:3d:2c:19:0f:c7:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:10:EA:2F:DF:02:AA:4D:52:0F:2C:55:96:D9:5C:01:F3:CC:F0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567958C89AD111F189EB271ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.141.0/24
                  154.200.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:3a:65:f1:13:76:e5:5a:db:c4:94:91:61:97:c2:29:78:
         27:e1:45:7a:44:8f:07:54:73:bc:0e:1f:00:4b:af:d8:02:7e:
         89:43:0f:cd:0f:99:81:3d:d9:5c:db:6c:1b:ed:6d:a3:0c:27:
         b8:64:b6:b3:70:2f:0a:0f:93:1f:c4:84:69:81:8f:77:48:9e:
         ac:df:a1:b8:fb:a4:79:74:4e:a7:25:e4:e2:26:6a:1b:3c:48:
         84:ac:3e:c3:8d:66:3b:76:cc:77:2d:a8:fb:82:f8:68:cc:8e:
         2e:c8:ce:df:91:26:d8:8c:fd:38:1d:07:e3:5d:59:be:26:61:
         06:51:bb:7d:ec:60:6b:48:8f:ab:52:cf:c9:56:80:2f:c5:4e:
         1b:f4:23:ad:58:7b:6c:aa:85:19:e7:b4:70:7a:2b:90:ee:e3:
         33:40:8f:25:ee:f9:c3:b7:33:6f:74:e6:2e:a9:50:30:3c:c6:
         82:17:5b:12:61:8b:47:37:73:7d:b8:7c:2e:c0:36:fe:02:18:
         67:5e:94:41:92:12:95:4d:e9:c7:f8:15:d2:52:2a:1b:33:7c:
         91:3d:93:2d:b3:b2:b6:38:94:4d:e4:c9:9b:89:d6:ac:91:4b:
         df:dd:b0:2a:2c:a0:f9:87:ab:c9:8c:ec:1d:6c:4d:c2:97:af:
         f4:ad:d0:fe
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAd92MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODE4MDY1MjA4WhcNMjgxMjAzMDY1MjA4WjAYMRYw
FAYDVQQDEw02YTg0MDExYy0zYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0CE8G/2Rs4A2jFhIpWEhmy03KhNKpO+qae7d6x0Bt0JLpY4RF6iP3WqV
n+mNepGfFbcnPZIAEi6W6XBd0SMxTXK1nQXtXtBuskGi/Dg6O9LDJdxDapJiYjr5
zm36NM07Sdswzf0+ZNJOEmGCwdNrFpk8y1g47CQ84jxn8OHHsmhlwQLfNTp03uv1
29r+GSDYPR7B9GRzN5hd4EWGVZVhRoEiXQ6lkf92qDiHHqyYGNrK/7tLE7CWWyD0
ku03IWNlgN2Pkl2TByOq+/Ffqit3r5qXRKpsE6iralTNAJf4GbxkLUW/AYGSkaG9
aD6+kqQWBWM3yknHmUsSPSwZD8c7uQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHqQ
EOov3wKqTVIPLFWW2VwB88zwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Njc5NThDODlBRDExMUYxODlFQjI3MUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsSNAwQAmsgAMA0GCSqG
SIb3DQEBCwUAA4IBAQBFDzpl8RN25VrbxJSRYZfCKXgn4UV6RI8HVHO8Dh8AS6/Y
An6JQw/ND5mBPdlc22wb7W2jDCe4ZLazcC8KD5MfxIRpgY93SJ6s36G4+6R5dE6n
JeTiJmobPEiErD7DjWY7dsx3Laj7gvhozI4uyM7fkSbYjP04HQfjXVm+JmEGUbt9
7GBrSI+rUs/JVoAvxU4b9COtWHtsqoUZ57RweiuQ7uMzQI8l7vnDtzNvdOYuqVAw
PMaCF1sSYYtHN3N9uHwuwDb+AhhnXpRBkhKVTenH+BXSUiobM3yRPZMts7K2OJRN
5MmbidaskUvf3bAqLKD5h6vJjOwdbE3Cl6/0rdD+
-----END CERTIFICATE-----