Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/53ABD5D64D8911EAA1EA3C19F8AEA228.roa
File:                     53ABD5D64D8911EAA1EA3C19F8AEA228.roa (raw, json)
Hash identifier:          6SFWy8rDsNodnxkZdJZYUTZQBnZs3Y2BYL7+jP9wI48=
Subject key identifier:   59:72:07:F5:77:B6:C0:08:E7:C5:81:2B:19:05:61:2E:A9:EF:AE:55
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0157
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/53ABD5D64D8911EAA1EA3C19F8AEA228.roa
Signing time:             Wed 12 Feb 2020 11:18:00 +0000
ROA not before:           Wed 12 Feb 2020 11:17:52 +0000
ROA not after:            Tue 12 Feb 2030 11:17:52 +0000
asID:                     327687
IP address blocks:        2c0f:f6d0:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Feb 12 11:17:52 2020 GMT
            Not After : Feb 12 11:17:52 2030 GMT
        Subject: CN=5e43dee8-75d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:4b:a6:03:90:cc:b2:f2:28:a4:7a:f0:6b:
                    9d:1d:e8:10:6a:f1:1f:0c:64:f9:3f:b4:ed:17:a9:
                    c9:d9:25:da:42:f3:b7:6d:dd:c6:a8:17:61:cb:72:
                    32:ec:0a:fb:3a:cf:b5:53:1f:0b:78:d3:74:34:75:
                    b9:a2:46:73:56:da:b1:16:83:bd:3e:a9:b1:f3:47:
                    bc:a9:ea:dc:b1:b3:76:cb:a8:4d:77:12:d0:8c:12:
                    f2:f0:71:57:06:e5:23:a0:7b:2b:8a:f8:c1:ae:70:
                    f2:47:c3:10:22:1b:ca:5b:61:50:0e:be:d6:a3:d7:
                    d6:b1:2d:2b:d8:69:30:c7:60:cf:f8:63:95:b6:c5:
                    b2:cc:c7:13:75:38:7a:82:e2:11:bd:78:f6:bd:81:
                    07:c9:55:54:8a:77:e9:58:3d:25:d8:ee:08:a4:7a:
                    58:b3:36:cf:47:83:fb:2e:80:ec:bf:0a:35:ae:07:
                    aa:32:eb:77:87:d3:b4:64:72:5d:90:40:42:98:17:
                    c7:39:d8:0a:1e:d3:ec:0c:be:f1:83:67:90:83:79:
                    42:88:90:7d:db:18:d0:f9:e3:3c:3c:bc:31:ad:05:
                    41:c6:65:02:f5:e6:5e:80:4e:f0:44:c3:5a:3e:80:
                    b6:96:4d:bc:3d:2c:68:a1:42:3e:f7:8a:ad:ff:6f:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:72:07:F5:77:B6:C0:08:E7:C5:81:2B:19:05:61:2E:A9:EF:AE:55
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/53ABD5D64D8911EAA1EA3C19F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f6d0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:18:06:3a:32:47:72:be:72:e3:fd:fb:46:ab:41:0a:47:d3:
         b2:00:37:40:33:40:93:55:00:06:24:8b:3d:b2:6e:df:71:b1:
         0e:ab:6b:57:ae:28:90:d6:c6:2a:1d:6a:af:81:16:5c:e2:e4:
         2c:4a:f6:15:3a:f2:70:fb:23:7b:69:17:3b:5c:0d:23:3f:06:
         24:02:a5:c1:1c:a2:e2:e6:5a:e6:ed:58:4c:52:26:b1:6a:09:
         75:9e:5d:cd:3d:cf:a7:ab:31:4d:7c:57:9f:64:44:57:06:67:
         c7:0b:11:51:ca:9b:46:17:66:55:24:5d:b5:76:e0:c2:dd:d6:
         1b:6a:70:79:60:8e:49:43:c4:dd:c3:fa:f9:39:46:b0:eb:30:
         be:43:b2:c4:6d:3a:5c:bd:ec:8a:b3:4a:56:da:29:bc:e1:c7:
         66:a9:9c:a9:87:b4:0d:67:93:14:61:36:3a:0e:9f:b5:15:d2:
         86:77:ef:c6:94:98:39:b8:4b:74:87:b1:07:72:fb:d2:f9:87:
         87:e1:19:c7:e7:ff:47:60:8d:1d:21:bd:2f:5d:bb:23:24:f4:
         2a:ce:23:73:37:6e:18:14:30:fd:83:db:18:ed:84:93:2f:ad:
         75:ef:db:39:98:51:44:0a:b9:24:ce:f5:e0:76:44:f2:97:5d:
         48:7e:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----