Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/B311D97E811811ED9059D9F0F1222468.roa
File:                     B311D97E811811ED9059D9F0F1222468.roa (raw, json)
Hash identifier:          T/9/kgIJfkgNm3iGQQTLRPyMN2Fx4H3uoVTcKlpTAn0=
Subject key identifier:   7B:6C:93:02:EE:4F:80:4D:DA:7D:89:3C:A0:E5:1E:9E:C0:CA:6C:95
Certificate issuer:       /CN=F363BB47AF/serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
Certificate serial:       05
Authority key identifier: 9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/B311D97E811811ED9059D9F0F1222468.roa
Signing time:             Wed 21 Dec 2022 10:17:40 +0000
ROA not before:           Wed 21 Dec 2022 10:17:36 +0000
ROA not after:            Tue 21 Dec 2032 10:17:36 +0000
asID:                     37412
IP address blocks:        41.79.180.0/22 maxlen: 24
                          2c0f:fb30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Jun 2024 00:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BB47AF/serialNumber=9BFCBA698B26DD34610C4AFD471E241AD79451A3
        Validity
            Not Before: Dec 21 10:17:36 2022 GMT
            Not After : Dec 21 10:17:36 2032 GMT
        Subject: CN=63a2dd44-7c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:c4:b1:41:67:a4:11:9a:07:ca:f7:e7:00:
                    99:cd:ff:cc:01:83:0f:7d:3d:93:94:cd:95:a0:8d:
                    20:93:9e:5d:b5:7e:39:38:75:a2:98:d8:72:15:82:
                    48:c8:6b:79:c5:39:96:b9:e9:3b:6d:7d:f2:b4:02:
                    6d:47:33:41:9b:a4:89:2a:65:79:76:f7:64:87:90:
                    a6:ba:d0:39:58:ae:83:4e:e5:cb:0e:c3:fd:d1:5e:
                    ab:5c:68:e8:c3:09:a8:35:9f:bd:44:47:2e:96:fa:
                    2b:05:f7:9c:2e:9b:57:5c:dc:d1:6d:df:e8:12:8f:
                    e4:b7:7a:6e:5a:32:95:38:2d:9a:59:6a:cc:61:c7:
                    db:54:5f:7c:73:9e:d2:ad:46:fb:fe:fb:85:5f:ec:
                    86:ec:18:c1:64:81:2f:98:c8:e9:40:6c:9d:96:17:
                    02:55:59:59:b1:98:df:c4:69:bd:d4:0e:20:45:f8:
                    a9:bb:f8:24:c4:78:3b:63:9a:04:fb:9b:7e:bb:67:
                    84:3a:ce:29:7f:b7:60:ee:01:87:95:29:91:b4:01:
                    68:b9:7f:ce:2a:5a:4f:53:65:8f:4b:a2:ef:d7:ba:
                    bd:fe:25:6f:7c:25:0d:b5:b8:59:ec:fe:5c:7c:61:
                    39:ad:6d:d2:8c:c2:0a:a7:57:43:d2:5c:da:2f:38:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:93:02:EE:4F:80:4D:DA:7D:89:3C:A0:E5:1E:9E:C0:CA:6C:95
            X509v3 Authority Key Identifier:
                keyid:9B:FC:BA:69:8B:26:DD:34:61:0C:4A:FD:47:1E:24:1A:D7:94:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/m_y6aYsm3TRhDEr9Rx4kGteUUaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m_y6aYsm3TRhDEr9Rx4kGteUUaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BB47/516A5BAA810511ED9206F6BDF1222468/B311D97E811811ED9059D9F0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.180.0/22
                IPv6:
                  2c0f:fb30::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:5b:14:aa:3c:a2:04:ea:ea:15:43:bc:71:be:e9:d9:f3:ab:
         62:1a:92:6f:5f:ed:a5:2f:35:f0:d8:23:e6:f6:08:e1:be:a1:
         c7:da:e8:11:5d:7c:e4:71:d8:33:48:12:c5:9e:88:ea:5a:75:
         04:cc:10:c6:4c:d1:f0:de:a6:ab:47:6b:d7:fe:1a:14:8f:c3:
         2b:d7:79:c7:d7:e5:a6:23:63:5e:4f:1f:62:f4:34:9c:0e:5d:
         be:32:47:3a:17:b2:b1:7c:fe:2a:80:ca:be:22:7c:18:8f:b9:
         5f:ea:b2:68:42:57:a3:8a:d9:9f:7d:5d:07:77:30:b6:79:77:
         e3:8d:7e:e9:11:93:ee:29:09:fd:fd:88:2c:6e:da:d3:57:38:
         03:49:5d:4f:91:e8:f4:5b:97:4a:2c:aa:e5:46:6e:14:70:a8:
         33:54:49:cb:09:bb:69:22:ca:1b:d9:17:37:fb:e1:ca:c4:7c:
         fb:97:1a:3f:3f:fd:52:f2:9b:79:f7:b0:c9:d4:42:98:3a:fb:
         b3:cd:44:af:71:e6:8c:7c:01:0a:c3:a1:62:7a:d5:61:8f:ef:
         e1:85:61:6b:8b:90:0b:9f:8c:df:f1:be:0a:8b:48:af:c4:70:
         40:96:a7:38:29:32:3c:5c:ac:8e:65:81:36:9b:76:ac:28:71:
         26:28:12:1f
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYz
QkI0N0FGMTEwLwYDVQQFEyg5QkZDQkE2OThCMjZERDM0NjEwQzRBRkQ0NzFFMjQx
QUQ3OTQ1MUEzMB4XDTIyMTIyMTEwMTczNloXDTMyMTIyMTEwMTczNlowGDEWMBQG
A1UEAwwNNjNhMmRkNDQtN2MyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALBgxLFBZ6QRmgfK9+cAmc3/zAGDD309k5TNlaCNIJOeXbV+OTh1opjYchWC
SMhrecU5lrnpO2198rQCbUczQZukiSpleXb3ZIeQprrQOViug07lyw7D/dFeq1xo
6MMJqDWfvURHLpb6KwX3nC6bV1zc0W3f6BKP5Ld6bloylTgtmllqzGHH21RffHOe
0q1G+/77hV/shuwYwWSBL5jI6UBsnZYXAlVZWbGY38RpvdQOIEX4qbv4JMR4O2Oa
BPubfrtnhDrOKX+3YO4Bh5UpkbQBaLl/zipaT1Nlj0ui79e6vf4lb3wlDbW4Wez+
XHxhOa1t0ozCCqdXQ9Jc2i84iZcCAwEAAaOCArQwggKwMB0GA1UdDgQWBBR7bJMC
7k+ATdp9iTyg5R6ewMpslTAfBgNVHSMEGDAWgBSb/LppiybdNGEMSv1HHiQa15RR
ozAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0JCNDcvNTE2QTVCQUE4MTA1MTFFRDkyMDZGNkJERjEyMjI0NjgvbV95NmFZ
c20zVFJoREVyOVJ4NGtHdGVVVWFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbV95NmFZc20zVFJoREVyOVJ4NGtHdGVVVWFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0JCNDcvNTE2QTVCQUE4MTA1MTFFRDkyMDZGNkJERjEy
MjI0NjgvQjMxMUQ5N0U4MTE4MTFFRDkwNTlEOUYwRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAilPtDANBAIAAjAHAwUALA/7
MDANBgkqhkiG9w0BAQsFAAOCAQEAKFsUqjyiBOrqFUO8cb7p2fOrYhqSb1/tpS81
8Ngj5vYI4b6hx9roEV185HHYM0gSxZ6I6lp1BMwQxkzR8N6mq0dr1/4aFI/DK9d5
x9flpiNjXk8fYvQ0nA5dvjJHOheysXz+KoDKviJ8GI+5X+qyaEJXo4rZn31dB3cw
tnl3441+6RGT7ikJ/f2ILG7a01c4A0ldT5Ho9FuXSiyq5UZuFHCoM1RJywm7aSLK
G9kXN/vhysR8+5caPz/9UvKbefewydRCmDr7s81Er3HmjHwBCsOhYnrVYY/v4YVh
a4uQC5+M3/G+CotIr8RwQJanOCkyPFysjmWBNpt2rChxJigSHw==
-----END CERTIFICATE-----