Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/D5E4C4B84D8911EA8238BE19F8AEA228.roa
File:                     D5E4C4B84D8911EA8238BE19F8AEA228.roa (raw, json)
Hash identifier:          FKv/QtglAnTw9jF+zCmeos4RX948CZGQPTcRuFcLe4M=
Subject key identifier:   18:A8:03:8D:38:4E:B8:AB:D6:2F:AA:67:81:9B:0E:1E:C9:B9:C8:FB
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       015B
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/D5E4C4B84D8911EA8238BE19F8AEA228.roa
Signing time:             Wed 12 Feb 2020 11:21:39 +0000
ROA not before:           Wed 12 Feb 2020 11:21:33 +0000
ROA not after:            Tue 12 Feb 2030 11:21:33 +0000
asID:                     327687
IP address blocks:        2c0f:f6d0:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Feb 12 11:21:33 2020 GMT
            Not After : Feb 12 11:21:33 2030 GMT
        Subject: CN=5e43dfc2-e2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:c8:41:8e:5f:25:9a:e2:4c:fc:ff:fc:24:
                    1f:d3:4b:5c:82:a5:fd:a1:91:ff:d9:81:06:02:5b:
                    0e:5d:06:0c:63:fa:4e:1b:33:07:19:19:ba:7c:7e:
                    f5:0a:61:67:b0:e1:c7:58:1e:10:e9:21:29:1a:7b:
                    1c:31:d0:60:d6:ca:99:b5:e7:fb:70:bd:76:6f:95:
                    3f:e2:3d:bb:4c:95:be:c4:be:1f:18:8a:3c:f9:6c:
                    6a:39:88:87:db:79:40:9e:d3:52:68:97:f6:1d:e1:
                    7a:73:1d:97:5c:eb:ee:de:7c:b8:57:c4:35:33:71:
                    1b:9e:3c:af:27:1b:38:fa:0a:dc:bd:3c:18:cf:d7:
                    e8:34:38:99:8f:fb:ab:04:f6:08:60:48:56:1c:11:
                    e6:fd:67:d8:91:e5:d7:32:3f:be:e7:44:fa:ed:70:
                    c3:74:4d:0b:8c:37:eb:0a:67:95:8e:92:d6:50:16:
                    cc:80:a5:52:2b:e6:53:9f:bc:c7:1b:70:d0:f1:a8:
                    a1:98:96:71:c8:01:3f:14:49:23:29:8c:ce:1f:65:
                    ab:83:62:f8:c9:a5:a3:b0:b7:d9:ee:50:96:57:47:
                    97:2c:20:8c:6f:a6:96:8f:dd:eb:66:bf:07:35:6d:
                    d5:20:0a:c8:21:ce:01:f5:d1:c2:10:a1:92:be:9e:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A8:03:8D:38:4E:B8:AB:D6:2F:AA:67:81:9B:0E:1E:C9:B9:C8:FB
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/D5E4C4B84D8911EA8238BE19F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f6d0:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:bb:69:0b:d8:85:fd:c3:9b:8e:a3:2e:7e:67:5a:29:96:
         7b:89:6c:1a:ac:79:21:96:49:11:27:f6:fb:44:00:cc:c4:e7:
         a5:d3:c7:1c:53:c6:7e:1b:3f:02:26:4f:e9:fd:5a:85:02:d4:
         9e:b2:b8:26:b9:ff:5c:aa:5e:c2:ed:38:f4:a3:5b:14:93:3a:
         7b:06:dc:ad:8f:d1:0d:45:74:c0:13:ea:33:a5:99:f5:c7:8e:
         df:34:66:0b:c7:9f:1f:d5:76:0b:13:aa:26:f3:d0:6b:17:67:
         f9:43:d8:a6:4f:b1:fb:9e:87:b0:54:7e:c8:25:67:82:c5:e2:
         10:92:2d:83:ca:7e:b5:e6:9d:3f:3f:1f:73:85:64:0b:55:bf:
         ce:32:48:3f:5a:97:c9:34:e1:a3:14:e2:e4:ce:22:e8:e6:e5:
         0d:f7:7c:19:e6:44:cd:78:4d:2f:55:2d:ef:35:dd:0b:5c:36:
         c5:be:37:6f:23:c4:6f:f6:42:88:fc:48:bf:5c:80:92:f0:99:
         bf:b0:75:01:c3:60:e8:8b:f5:19:6d:27:99:bb:ad:a9:f9:bc:
         be:cd:f2:a9:aa:1b:8a:8a:1a:00:ee:76:28:5d:e8:d9:a3:1d:
         8c:f7:57:87:1b:7c:01:1d:b7:ba:4c:0c:7b:5b:1c:bb:91:23:
         63:69:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----