Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/97EFF9FE41C911E6974C3715F8AEA228.roa
File:                     97EFF9FE41C911E6974C3715F8AEA228.roa (raw, json)
Hash identifier:          PV1x2NuqP503+6sU0r3JzrSccMtiDFB0mgrEAngyzh8=
Subject key identifier:   E0:2A:76:5C:BD:51:AA:DC:35:D2:F3:ED:2C:1B:1E:8F:B0:23:47:7D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       010A
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/97EFF9FE41C911E6974C3715F8AEA228.roa
Signing time:             Mon 04 Jul 2016 09:27:58 +0000
ROA not before:           Mon 04 Jul 2016 09:27:52 +0000
ROA not after:            Fri 31 Jul 2026 09:27:52 +0000
asID:                     327917
IP address blocks:        2001:43f8:b30::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Jul  4 09:27:52 2016 GMT
            Not After : Jul 31 09:27:52 2026 GMT
        Subject: CN=577a2c1d-71ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:64:1b:ac:0f:b1:87:b8:ac:d8:8a:6a:c8:
                    61:72:70:ac:fe:e7:08:4a:e6:85:1a:d8:4e:cf:16:
                    b9:b7:c0:b0:c0:f1:3e:ba:4b:a8:fb:40:75:5b:d5:
                    7c:e6:20:e7:67:6d:a3:75:47:27:36:e9:5e:e3:34:
                    4e:c5:09:03:04:41:4c:ac:db:8d:b6:f9:65:9f:ff:
                    e7:44:30:f8:5a:ce:a3:3c:13:25:84:34:78:e3:60:
                    3f:dd:bb:a5:70:d6:85:2b:a4:f3:dc:bd:1c:be:7b:
                    4c:c5:fd:c9:97:05:f9:e7:0a:a6:ad:4c:2b:f0:cb:
                    eb:2a:cb:3b:af:cb:ea:ff:ac:50:39:b0:db:ec:62:
                    1e:60:f5:51:a7:51:06:30:6f:5b:d7:86:4f:af:37:
                    c0:4c:fe:12:53:19:dd:06:40:ce:96:a1:a8:25:da:
                    7a:5d:ff:04:46:fd:71:d5:77:b7:8d:49:dc:0f:6c:
                    0e:d9:23:d0:dd:89:1c:79:90:31:76:60:4a:0a:64:
                    4d:d3:04:3b:77:22:98:bf:cb:02:2b:27:58:2b:94:
                    f2:6c:28:c5:b1:ff:44:f3:e5:62:6a:f5:a5:9d:c9:
                    e8:dd:28:d1:09:24:c9:8c:34:6f:c6:13:51:61:9e:
                    2f:fc:f1:b9:81:0f:ea:cf:58:f9:33:e8:2b:0f:a7:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2A:76:5C:BD:51:AA:DC:35:D2:F3:ED:2C:1B:1E:8F:B0:23:47:7D
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/97EFF9FE41C911E6974C3715F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:b30::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:89:30:b9:14:78:a0:d8:f8:d7:3b:c1:e7:4f:bd:89:a1:51:
         bb:dd:25:2a:3a:53:24:21:ac:4a:b3:12:96:bc:4a:db:70:92:
         1e:83:aa:4c:70:54:3c:f4:41:04:7c:b7:cc:4e:ce:73:f9:98:
         6d:ff:6b:7a:e7:8c:f8:6c:47:d7:0d:33:a5:11:5e:1a:29:86:
         29:59:20:47:34:b4:d2:b8:e5:e2:64:93:60:86:4f:f2:58:c2:
         4d:46:1f:82:bf:c3:8c:81:ab:55:20:e8:4f:30:85:d0:d8:05:
         fd:15:9e:f2:7e:47:bc:bc:06:11:11:1a:9a:e9:77:b6:c1:ec:
         1a:4d:99:67:80:5d:c7:36:cf:5b:f3:e7:4d:55:b9:8f:cd:87:
         97:ad:3b:8e:af:cb:16:1a:ef:80:d9:7c:f8:4b:de:c1:41:15:
         28:3b:a3:54:20:8f:9a:51:1d:fa:e1:50:ec:0e:24:5e:29:ea:
         71:cc:75:62:9d:d6:b4:65:d7:80:f3:e4:89:6a:e7:7d:7a:a8:
         6d:67:1e:1e:e6:4b:af:48:b9:ca:cc:75:1d:dd:76:2d:04:20:
         ff:fb:83:13:4a:e3:2e:61:8f:32:9b:a6:2f:81:b9:20:44:2a:
         1e:6f:91:cc:9c:5c:82:22:02:37:e7:7b:97:d9:10:0b:52:0f:
         db:1f:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----