Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/1509545CC33311E8B6F81A75F8AEA228.roa
File:                     1509545CC33311E8B6F81A75F8AEA228.roa (raw, json)
Hash identifier:          BZLjmQCkm/nPBfOVw4E72cBSB2eeB8o/IDROqLoeTwc=
Subject key identifier:   B3:22:AD:EB:05:A5:7D:B2:8B:7A:8D:F6:D6:6F:1A:40:F9:DF:0B:0A
Certificate issuer:       /CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Certificate serial:       17
Authority key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/1509545CC33311E8B6F81A75F8AEA228.roa
Signing time:             Fri 28 Sep 2018 15:28:00 +0000
ROA not before:           Fri 28 Sep 2018 15:27:55 +0000
ROA not after:            Sun 28 Sep 2025 15:27:55 +0000
asID:                     37721
IP address blocks:        2c0f:ee00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
        Validity
            Not Before: Sep 28 15:27:55 2018 GMT
            Not After : Sep 28 15:27:55 2025 GMT
        Subject: CN=5bae4880-0a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:59:6b:69:3b:20:ca:55:46:e2:e4:36:12:
                    df:91:8f:66:53:da:0e:11:df:34:b7:cc:80:93:a2:
                    bb:42:f3:01:a3:40:c6:fe:2e:fb:9d:3a:c9:8f:66:
                    8e:24:7b:86:a3:94:70:c4:a8:b0:35:78:2b:00:48:
                    2c:e0:35:4d:d6:ee:fd:58:69:95:44:3d:88:01:30:
                    8c:35:f8:4c:76:d9:9f:7f:17:1d:9d:75:be:04:9b:
                    a4:f8:9b:88:ee:c8:fb:d3:80:92:9a:c9:d8:cf:29:
                    de:2f:db:9d:48:d2:20:2a:54:ab:e1:cd:25:3e:89:
                    27:6b:9b:4e:a7:4f:80:e8:2c:c7:0a:22:43:36:36:
                    08:9b:8a:9c:c0:32:bc:a2:9a:58:59:99:60:d9:1a:
                    4a:ff:58:84:6e:41:20:19:94:c2:ac:0e:29:b7:97:
                    78:1b:3f:1b:e2:c7:c5:e0:86:76:60:f5:59:1a:dc:
                    bc:73:06:e2:b0:4e:c8:9d:32:68:6a:6b:81:81:65:
                    c9:41:5e:9b:10:0a:a7:e4:94:a0:fa:1f:1a:dc:99:
                    65:0b:2e:9d:05:21:42:6e:72:1f:7e:bd:a2:28:1d:
                    03:78:9a:b4:c2:ea:0a:3f:f6:9e:cf:75:1d:eb:02:
                    01:97:b7:41:66:9a:67:78:1c:50:3c:e8:9a:a5:fe:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:22:AD:EB:05:A5:7D:B2:8B:7A:8D:F6:D6:6F:1A:40:F9:DF:0B:0A
            X509v3 Authority Key Identifier:
                keyid:56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/1509545CC33311E8B6F81A75F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ee00::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:db:82:bb:b7:af:6b:7e:9e:35:16:2f:d9:c7:d2:e7:57:f9:
         6a:61:98:0d:b4:bf:af:cf:df:d6:db:37:81:ed:ac:1e:8b:a9:
         a0:31:07:c8:d8:77:8f:c6:40:d8:52:d2:5e:bf:8f:f2:71:d5:
         ec:c1:e6:d7:1a:83:d3:fa:58:51:42:1f:88:26:5a:51:f3:5a:
         dd:9a:41:bf:69:62:1d:2a:81:24:23:9a:9b:21:08:af:42:de:
         5b:26:a2:6b:4c:17:d9:cc:12:d4:00:bc:25:97:46:1e:81:4f:
         46:9b:1c:7e:36:0d:d4:d6:38:66:57:32:e1:b1:79:b7:f4:e4:
         b5:8e:5a:54:a1:47:27:74:79:36:a7:2b:7a:22:08:21:1f:f3:
         28:ab:27:5c:aa:83:27:ac:51:a9:27:b4:40:12:5d:08:f7:41:
         bc:6e:95:c8:65:3b:aa:07:d8:d5:fa:04:1c:e9:5e:ce:67:48:
         15:99:0e:16:7f:22:6c:92:97:00:a9:72:bb:a2:db:18:ad:ea:
         d2:06:06:6f:4e:b6:88:9b:92:ff:df:2a:06:d6:2a:d5:ab:b7:
         40:00:89:c9:ef:a4:38:2c:9a:3b:f9:37:b5:50:12:e1:1f:47:
         8f:2e:86:66:92:4f:46:b0:ef:51:d2:05:a9:f7:61:ec:fd:fc:
         cb:55:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----