Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/9B7EEEEA1AEF11EC87FF157BD8A014CE.roa
File:                     9B7EEEEA1AEF11EC87FF157BD8A014CE.roa (raw, json)
Hash identifier:          4pkodOTNsC5WrbNmrDSKfckyFAmepGIgRqrWyHnAKrQ=
Subject key identifier:   8F:E4:33:E9:BB:96:F9:4D:30:F6:43:67:55:AC:1B:66:0A:16:A1:4F
Certificate issuer:       /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial:       03
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/9B7EEEEA1AEF11EC87FF157BD8A014CE.roa
Signing time:             Tue 21 Sep 2021 15:21:35 +0000
ROA not before:           Tue 21 Sep 2021 15:21:29 +0000
ROA not after:            Sun 21 Sep 2031 15:21:29 +0000
asID:                     60171
IP address blocks:        102.220.216.0/22 maxlen: 24
                          2c0f:1d00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
        Validity
            Not Before: Sep 21 15:21:29 2021 GMT
            Not After : Sep 21 15:21:29 2031 GMT
        Subject: CN=6149f87f-d2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:78:2e:8c:c1:eb:18:b1:f8:5c:cb:fe:68:
                    17:f3:0b:c0:dd:61:17:55:d7:5f:1b:39:33:a4:64:
                    c0:15:cb:9e:5d:4b:c1:85:12:ea:69:17:21:f3:89:
                    2a:ba:45:ba:4a:8b:e0:9f:e2:da:77:67:19:cc:37:
                    99:95:6e:a8:df:30:ec:12:50:c4:72:8f:07:f9:8f:
                    84:66:84:d2:1d:90:e4:92:64:8e:61:5e:6e:44:c9:
                    2c:ed:8a:4d:1a:ad:f3:84:a3:64:cf:c0:94:f3:5c:
                    e7:bc:09:86:79:d1:8d:ff:2f:9f:1d:77:eb:53:a5:
                    ef:20:21:e0:48:d1:31:2b:5c:fa:3b:6e:86:fa:f9:
                    89:8b:b6:29:cc:61:7f:3d:96:84:84:f6:b6:92:f4:
                    ee:dc:9e:43:c8:3d:47:1a:fa:64:08:c8:11:13:f1:
                    5c:13:cf:11:db:84:57:f3:ad:cd:e0:68:c6:f6:16:
                    29:65:bc:64:91:8c:b9:af:58:64:46:e7:80:61:e4:
                    ad:96:1c:bd:d7:93:b6:01:f9:eb:e4:94:8c:0f:c7:
                    9b:ed:ad:fc:7b:39:ea:2a:06:10:d8:24:f0:ba:2c:
                    f5:a9:ac:d2:3b:97:26:8a:43:a6:9c:3c:34:8f:26:
                    21:17:35:e9:93:ca:26:d2:02:e5:ac:3f:25:1b:5c:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:33:E9:BB:96:F9:4D:30:F6:43:67:55:AC:1B:66:0A:16:A1:4F
            X509v3 Authority Key Identifier:
                keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/9B7EEEEA1AEF11EC87FF157BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.216.0/22
                IPv6:
                  2c0f:1d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:7e:d9:d2:25:bd:39:76:cc:8e:a7:e2:f0:9a:13:b4:90:
         0c:03:69:e0:3f:66:8c:b7:66:9b:00:37:0c:4e:ef:24:c7:20:
         b1:8b:39:7e:68:7f:f3:84:94:70:ae:3c:9f:27:76:ff:8f:09:
         3a:1c:db:00:32:8c:ae:c7:8a:16:93:8a:d6:ca:ae:49:bb:2a:
         58:27:c1:e6:d3:6e:f6:49:a9:ca:28:a0:b0:8e:c1:8c:c3:f8:
         fa:00:83:4e:69:76:2f:06:a6:d2:f1:0b:04:c0:e7:d2:fc:a7:
         31:68:8f:30:c1:71:19:37:92:c5:12:a2:2e:4e:a1:1d:a8:3e:
         ad:44:b0:eb:b2:7d:07:ba:1d:ea:57:05:93:79:5a:2e:be:df:
         5d:8a:ea:68:7d:bc:68:a4:ab:2d:39:51:cf:5c:60:5c:20:56:
         fe:52:55:88:ff:b7:c6:7d:72:a7:8a:8b:39:96:b4:60:82:4e:
         a7:33:1e:5f:25:72:91:03:ad:d4:c7:52:8b:4e:77:d7:e4:53:
         3c:18:45:28:aa:fb:2a:67:77:a9:ec:49:80:5f:e5:44:63:5e:
         6a:ba:7d:95:8f:15:42:45:19:d4:6b:b2:dc:4f:da:33:94:5a:
         95:98:4d:aa:58:98:67:ac:6b:a7:57:5d:e9:ef:02:fc:15:66:
         73:01:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----