Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/393244FCCAED11E9B99FF875F8AEA228.roa
File:                     393244FCCAED11E9B99FF875F8AEA228.roa (raw, json)
Hash identifier:          4xNbES12DfxpVPkV3v2uKcMGkgu9iGiVU5CNykYBjGs=
Subject key identifier:   3E:F6:3E:70:5B:8B:44:47:C1:0A:9F:AE:4E:42:46:FE:30:27:B9:5C
Certificate issuer:       /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial:       05C9
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/393244FCCAED11E9B99FF875F8AEA228.roa
Signing time:             Fri 30 Aug 2019 06:13:03 +0000
ROA not before:           Fri 30 Aug 2019 06:12:58 +0000
ROA not after:            Fri 29 Aug 2025 06:12:58 +0000
asID:                     36874
IP address blocks:        41.177.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36472E5AF
        Validity
            Not Before: Aug 30 06:12:58 2019 GMT
            Not After : Aug 29 06:12:58 2025 GMT
        Subject: CN=5d68be6f-dee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:f0:46:de:11:b4:46:b6:59:92:9f:0b:67:
                    d8:b9:a0:54:c4:32:c1:37:2b:b6:fb:04:ec:8f:df:
                    e6:6f:aa:d7:2d:1f:b3:a5:74:a0:5a:a4:12:a9:93:
                    78:3a:f8:7e:f5:2f:ac:bd:71:81:71:cd:e8:a9:82:
                    df:24:49:67:cc:fe:a0:8b:39:e1:c1:e6:a6:7f:b4:
                    04:9a:32:22:e5:a7:03:fa:98:13:6c:52:79:68:88:
                    24:e1:d6:8f:9d:1d:75:fd:97:ed:79:d7:53:4c:4f:
                    94:77:e5:77:8e:79:46:d4:3a:24:53:83:6e:cf:16:
                    4b:79:13:eb:05:b7:d6:5d:23:1f:94:24:39:c2:a1:
                    43:7f:f7:dc:f5:e1:88:de:9e:83:48:21:ac:91:ac:
                    c8:a7:1a:71:ef:50:69:37:47:38:15:d6:da:dc:e2:
                    47:1a:cc:ea:91:7a:f1:9c:0c:6f:ca:25:99:e5:e6:
                    b8:48:ac:1c:4f:95:db:a7:79:c1:48:cd:4d:d7:fc:
                    8b:19:30:fb:09:13:5c:d3:fa:89:2a:ec:06:d6:42:
                    30:5d:c8:22:11:3a:53:f0:96:cb:cd:65:dd:e1:1c:
                    25:58:64:4c:c2:d8:a7:6e:c5:c8:1d:d5:cd:f7:36:
                    d5:f7:5c:b6:78:ae:58:a7:a7:4f:c6:6b:a2:60:d8:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:3E:70:5B:8B:44:47:C1:0A:9F:AE:4E:42:46:FE:30:27:B9:5C
            X509v3 Authority Key Identifier:
                keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/393244FCCAED11E9B99FF875F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.177.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:f2:2b:36:e8:25:20:ea:58:88:d7:01:c6:57:8e:e8:e1:
         49:b6:7e:36:58:ef:6d:d8:0e:50:4f:0a:29:9f:3c:7a:0e:9a:
         22:49:07:d2:1c:62:06:26:6d:e9:36:e8:b9:74:ae:74:d3:bd:
         a4:c9:2d:8c:18:e3:2c:32:52:08:a2:a3:8e:c2:1f:2b:5c:05:
         3d:74:a5:3d:19:3e:f4:f7:fe:6d:14:63:f8:4a:0f:b8:c7:44:
         b1:0c:f7:19:45:a4:46:a8:d5:37:8c:16:15:59:7a:80:4a:88:
         eb:73:64:2a:63:16:5c:02:67:0f:9d:64:a5:aa:5d:53:ce:f5:
         79:dd:4d:0e:e3:4a:43:1d:36:5a:81:aa:27:67:c0:80:20:af:
         b3:d6:5e:a8:f4:eb:39:27:15:3e:20:f1:43:2f:d6:72:05:94:
         3f:ab:99:e9:3d:5e:fa:28:ac:6a:76:6f:e4:3a:24:e1:cf:c5:
         a1:36:15:36:55:97:95:50:07:16:cc:49:af:a0:3e:e0:8b:3a:
         9b:f6:25:2b:9c:8a:33:07:87:2b:81:75:d5:42:b9:d0:67:3b:
         60:59:b3:04:b0:55:72:e2:b7:9c:32:77:c3:1d:5c:4c:7e:15:
         78:52:f1:23:8b:90:de:3e:2c:ea:51:41:50:7a:aa:98:9d:3c:
         45:9a:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----