Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/A9E94F06CAED11E980367876F8AEA228.roa
File:                     A9E94F06CAED11E980367876F8AEA228.roa (raw, json)
Hash identifier:          VrJL3SQd6C3FUUbw0uhJehHrmjG9Xx4v9iS8CcKGSXY=
Subject key identifier:   15:17:94:4F:B9:BE:37:C5:74:B5:A4:BE:F6:5F:B7:AE:BC:95:55:18
Certificate issuer:       /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial:       05CF
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/A9E94F06CAED11E980367876F8AEA228.roa
Signing time:             Fri 30 Aug 2019 06:16:12 +0000
ROA not before:           Fri 30 Aug 2019 06:16:07 +0000
ROA not after:            Fri 29 Aug 2025 06:16:07 +0000
asID:                     36874
IP address blocks:        196.41.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1487 (0x5cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
        Validity
            Not Before: Aug 30 06:16:07 2019 GMT
            Not After : Aug 29 06:16:07 2025 GMT
        Subject: CN=5d68bf2c-e084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:43:29:88:c6:4d:d5:64:61:ff:5d:83:06:
                    b3:de:69:c7:0d:9f:2f:17:13:ff:d3:4b:a5:88:df:
                    df:ba:0d:0d:92:c2:51:95:28:18:15:d6:16:65:4f:
                    02:75:3c:8a:cf:89:e5:5d:23:41:ff:56:9d:49:ee:
                    8f:88:eb:44:55:63:13:25:74:78:ba:16:0d:8f:19:
                    06:c1:7f:a9:d3:4f:15:bd:ea:59:82:f4:f5:1f:3f:
                    bb:f3:20:95:7e:da:9a:62:41:82:d4:f2:a3:e6:49:
                    5b:08:d7:35:16:e4:96:53:6d:4b:4b:d5:06:3e:2b:
                    e5:a8:90:12:6b:8a:05:46:d1:82:14:2c:db:73:d4:
                    03:71:f9:b6:82:93:96:2d:19:92:f0:f6:31:e2:99:
                    0d:ee:81:66:cf:ee:12:fe:a9:ed:7a:8e:a5:4d:29:
                    7a:3f:cc:d6:56:de:f2:c9:51:3a:45:bb:0d:a3:60:
                    ac:f8:6c:24:d7:a0:b6:08:15:3f:c9:3d:c9:11:4b:
                    84:7c:e8:6f:79:44:ef:fc:9c:1e:a3:93:8d:99:b3:
                    1b:53:08:4c:49:93:2d:39:35:a4:53:a5:ed:7e:c6:
                    ea:b6:2d:33:c8:8c:71:5c:b6:cd:a1:ae:0d:13:0e:
                    5e:36:2c:e2:d3:47:75:e0:4e:27:20:fb:13:c2:e0:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:17:94:4F:B9:BE:37:C5:74:B5:A4:BE:F6:5F:B7:AE:BC:95:55:18
            X509v3 Authority Key Identifier:
                keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/A9E94F06CAED11E980367876F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.41.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:c6:b0:b1:79:08:1f:a6:95:f7:5d:23:4a:34:ef:78:d0:f2:
         ef:4e:1a:c3:39:41:ec:bf:cf:27:b4:7a:eb:6b:e7:c7:15:d0:
         43:62:f4:86:a7:05:5a:1e:92:9f:26:20:e7:38:1e:05:c5:c9:
         f1:ec:a7:90:60:46:f8:00:75:3f:07:30:a3:30:9f:68:e7:78:
         c3:57:02:c5:97:78:03:87:d4:71:2b:53:62:72:62:66:71:23:
         a3:95:40:6c:0f:12:52:2c:22:97:6b:ca:1c:03:df:48:f5:61:
         d1:7f:1d:c9:07:16:e6:80:89:59:ff:14:4b:cd:46:05:d7:66:
         52:1e:21:c7:df:e2:22:87:02:3b:76:ea:9e:bb:c6:bc:84:85:
         8b:18:6c:b5:58:47:5c:d4:3e:8d:ac:a7:1a:d8:14:b5:77:33:
         4c:82:c2:dc:14:bd:f7:1b:b6:3f:43:76:7d:a0:a4:a1:f0:ef:
         60:75:59:31:53:db:c1:8d:ad:b4:74:ca:fa:3f:38:47:d5:94:
         8c:e6:c8:39:cf:29:55:f8:5f:fe:8c:e1:63:3a:f8:6d:6b:5c:
         a5:16:4c:bd:3f:6d:7f:32:fb:a1:5e:f4:7a:01:9b:61:f4:04:
         17:4c:6a:98:74:0f:f0:57:8d:84:a6:f3:db:c2:10:bd:43:a4:
         6c:31:55:a7
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcyRTVBRjExMC8GA1UEBRMoODZGRUQyRUQxOUMyMDY3QTQ4MjIyMUI2NDVENjBD
NDVBNEQ1NkE5RDAeFw0xOTA4MzAwNjE2MDdaFw0yNTA4MjkwNjE2MDdaMBgxFjAU
BgNVBAMTDTVkNjhiZjJjLWUwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjK0MpiMZN1WRh/12DBrPeaccNny8XE//TS6WI39+6DQ2SwlGVKBgV1hZl
TwJ1PIrPieVdI0H/Vp1J7o+I60RVYxMldHi6Fg2PGQbBf6nTTxW96lmC9PUfP7vz
IJV+2ppiQYLU8qPmSVsI1zUW5JZTbUtL1QY+K+WokBJrigVG0YIULNtz1ANx+baC
k5YtGZLw9jHimQ3ugWbP7hL+qe16jqVNKXo/zNZW3vLJUTpFuw2jYKz4bCTXoLYI
FT/JPckRS4R86G95RO/8nB6jk42ZsxtTCExJky05NaRTpe1+xuq2LTPIjHFcts2h
rg0TDl42LOLTR3XgTicg+xPC4He3AgMBAAGjggJuMIICajAdBgNVHQ4EFgQUFReU
T7m+N8V0taS+9l+3rryVVRgwHwYDVR0jBBgwFoAUhv7S7RnCBnpIIiG2RdYMRaTV
ap0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4QUVBMjI4L2h2N1M3
Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2h2N1M3Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4
QUVBMjI4L0E5RTk0RjA2Q0FFRDExRTk4MDM2Nzg3NkY4QUVBMjI4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMQpcDANBgkqhkiG9w0BAQsFAAOCAQEA
TcawsXkIH6aV910jSjTveNDy704awzlB7L/PJ7R662vnxxXQQ2L0hqcFWh6SnyYg
5zgeBcXJ8eynkGBG+AB1PwcwozCfaOd4w1cCxZd4A4fUcStTYnJiZnEjo5VAbA8S
Uiwil2vKHAPfSPVh0X8dyQcW5oCJWf8US81GBddmUh4hx9/iIocCO3bqnrvGvISF
ixhstVhHXNQ+jaynGtgUtXczTILC3BS99xu2P0N2faCkofDvYHVZMVPbwY2ttHTK
+j84R9WUjObIOc8pVfhf/ozhYzr4bWtcpRZMvT9tfzL7oV70egGbYfQEF0xqmHQP
8FeNhKbz28IQvUOkbDFVpw==
-----END CERTIFICATE-----