Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/2EFA614ECAEE11E98511EC76F8AEA228.roa
File:                     2EFA614ECAEE11E98511EC76F8AEA228.roa (raw, json)
Hash identifier:          2zLMI8rOWrZ63E40k/ceZtOXzw9Rmk5l8voPk4gGNgk=
Subject key identifier:   B3:5A:2E:84:E4:D4:82:0F:86:B3:CF:4C:05:04:55:76:B2:D9:B0:90
Certificate issuer:       /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial:       05D3
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/2EFA614ECAEE11E98511EC76F8AEA228.roa
Signing time:             Fri 30 Aug 2019 06:19:55 +0000
ROA not before:           Fri 30 Aug 2019 06:19:51 +0000
ROA not after:            Fri 29 Aug 2025 06:19:51 +0000
asID:                     36874
IP address blocks:        105.233.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
        Validity
            Not Before: Aug 30 06:19:51 2019 GMT
            Not After : Aug 29 06:19:51 2025 GMT
        Subject: CN=5d68c00b-2ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:e0:3d:78:a5:72:51:f1:4c:57:bb:22:f3:
                    a4:b6:9c:c2:37:e1:e5:c3:36:a2:4f:96:9a:37:bb:
                    4c:26:5e:0c:40:7a:77:79:fa:e6:54:84:ef:6e:89:
                    c9:d9:a2:5a:4e:1c:80:83:fe:b2:5c:e9:5f:e0:7d:
                    e0:e0:15:d2:8f:47:cb:a7:83:4a:89:0b:c2:ca:3d:
                    17:12:ee:5b:62:1a:99:d7:42:41:c7:4f:50:87:61:
                    40:06:c9:81:99:76:12:08:05:5b:5a:b9:53:b7:54:
                    04:4c:30:6e:7d:9f:24:8b:00:53:8d:38:9f:c5:74:
                    23:78:29:54:32:47:3d:bc:58:0c:a7:85:0e:7b:32:
                    f9:c3:ce:1e:7d:1d:40:5b:02:54:ce:fc:46:86:2c:
                    6f:92:09:30:1e:2e:c7:ad:5d:da:6a:19:06:b3:21:
                    00:2d:6c:fd:c2:fc:74:b4:fe:c6:d1:6e:4e:b0:e7:
                    f3:9e:fd:48:f3:3f:b5:e8:3a:cc:37:40:5b:7b:83:
                    39:e1:bb:03:8f:14:52:a8:c4:e2:9f:5c:ca:5f:ab:
                    6b:de:bd:57:db:e5:06:25:c1:52:cb:01:57:9d:3d:
                    5d:0a:44:bd:f2:ca:da:71:a3:53:93:2e:a8:ad:e9:
                    46:d2:17:75:65:bc:79:9d:f5:35:e4:ba:46:e6:42:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:2E:84:E4:D4:82:0F:86:B3:CF:4C:05:04:55:76:B2:D9:B0:90
            X509v3 Authority Key Identifier:
                keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/2EFA614ECAEE11E98511EC76F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.233.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:b1:d2:c6:e9:7a:df:43:66:e0:3b:72:5a:69:e9:b0:ed:05:
         9b:7e:e2:59:81:bd:b5:92:60:14:d7:f2:55:60:34:ed:c0:c9:
         3f:6a:61:9d:33:c7:75:11:23:3e:57:c9:d1:a6:72:ca:eb:2e:
         d0:62:fa:db:0a:9f:8a:88:fe:70:46:49:77:80:ad:99:1f:43:
         89:e7:56:67:fb:dd:58:91:a0:36:5c:63:97:67:34:5e:1e:bf:
         8c:5d:98:42:58:d1:78:d6:19:f9:49:46:4c:0f:cc:84:35:fc:
         b1:38:96:f3:34:6f:71:7f:2d:0e:1d:0c:51:1d:10:6a:21:bc:
         32:53:03:8e:c1:03:fc:bd:49:e6:52:19:c2:25:68:9b:d5:0b:
         0e:1e:4c:be:3a:61:84:60:ed:55:8e:fb:fe:5d:30:dc:ad:85:
         f4:e2:60:45:47:03:43:ae:78:0d:3c:9d:1e:88:c4:48:e9:6d:
         be:fe:d2:d5:b3:9d:5a:1b:3b:0a:93:c5:2c:a1:e1:41:20:24:
         a2:b6:fe:7e:96:a0:bf:78:5b:b0:2b:ea:d7:9b:2b:c0:59:d3:
         c6:3e:46:11:77:2b:ba:5d:65:17:90:be:eb:7f:d4:60:94:07:
         e0:00:78:b6:b0:aa:8f:ef:12:78:01:12:1a:02:b0:06:b1:8d:
         0d:ef:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----