Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/FC8B2EBE78F211E6870F9E6EF8AEA228.roa
File:                     FC8B2EBE78F211E6870F9E6EF8AEA228.roa (raw, json)
Hash identifier:          hEoaYDq5s+p9BJGFFQ8BOIdkwXKomCvKjmMvCCfXKFU=
Subject key identifier:   11:74:02:78:EA:66:FC:4A:D6:A1:BD:82:07:54:35:A9:AB:91:EE:0A
Certificate issuer:       /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial:       A4
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/FC8B2EBE78F211E6870F9E6EF8AEA228.roa
Signing time:             Mon 12 Sep 2016 14:12:50 +0000
ROA not before:           Mon 12 Sep 2016 14:12:42 +0000
ROA not after:            Wed 30 Sep 2026 14:12:42 +0000
asID:                     37670
IP address blocks:        2c0f:fbc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
        Validity
            Not Before: Sep 12 14:12:42 2016 GMT
            Not After : Sep 30 14:12:42 2026 GMT
        Subject: CN=57d6b7e2-6f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:08:e4:d1:44:4f:22:22:63:2f:a5:2f:5a:
                    0d:a3:d6:ae:72:4f:85:56:35:6f:c0:1e:ef:e0:20:
                    8d:67:ba:46:6b:96:a4:91:98:07:c8:48:cc:72:a3:
                    51:84:12:e1:69:c9:c5:b2:0d:58:1a:e1:64:c9:0b:
                    1b:23:97:91:56:55:c1:80:dd:d1:0f:92:c6:6a:59:
                    e2:2e:5b:ad:8e:52:fb:51:bd:93:f0:b5:6f:20:6e:
                    72:4c:ca:49:71:7b:2b:7e:38:23:02:8a:3a:a7:e4:
                    23:06:67:92:50:cd:a4:fe:ee:ac:69:4f:f7:6b:27:
                    92:43:5d:84:20:c9:63:ea:43:eb:ed:4c:cf:98:86:
                    2a:a7:36:fe:55:bf:d7:84:4c:50:54:3f:3b:d3:73:
                    d7:fb:a5:5a:e5:38:60:c1:91:54:b0:c0:56:24:d1:
                    09:25:03:1a:dc:ac:f6:cd:b8:14:88:ee:67:45:67:
                    16:ea:68:28:2f:de:5a:10:3c:e3:f6:34:05:c7:5e:
                    8b:dd:ba:5e:74:64:89:df:38:5d:f6:e9:20:b2:da:
                    85:2b:86:cb:87:bb:7e:4b:db:2a:9b:f0:0c:19:da:
                    77:98:55:eb:93:7d:de:d1:d4:20:1b:ff:31:cd:24:
                    65:35:e8:a7:08:49:48:e6:6c:03:5e:4a:c9:23:fe:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:74:02:78:EA:66:FC:4A:D6:A1:BD:82:07:54:35:A9:AB:91:EE:0A
            X509v3 Authority Key Identifier:
                keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/FC8B2EBE78F211E6870F9E6EF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:60:94:46:42:71:0f:6e:03:9a:ee:1c:66:1b:4d:ba:8f:f2:
         78:f9:8e:e3:b3:26:0e:bd:6f:fd:81:e7:0c:9e:5e:82:41:1d:
         f0:1d:1b:71:40:50:f3:7f:34:a1:4d:fb:6b:68:39:bb:8a:da:
         64:56:e8:c9:4e:d5:a8:03:2b:f6:3d:16:2f:4e:cc:ac:a0:3b:
         85:bd:af:23:bd:be:95:83:a6:24:e3:74:27:94:19:64:c4:e4:
         7a:65:24:3f:ad:4b:8a:b3:83:f8:76:ee:4e:12:61:ce:0d:f0:
         e7:c6:f2:8a:f4:3e:d2:c4:97:50:ce:84:fe:fe:a7:af:98:c6:
         dc:5c:8d:f2:05:4b:0c:59:ab:90:40:e9:2e:01:31:10:ab:94:
         c0:36:98:95:07:19:fb:04:8a:00:da:e6:8e:1d:b8:97:d4:56:
         28:c6:56:a3:ab:e2:95:2c:06:3e:05:39:28:be:5d:8f:9e:04:
         91:0e:25:41:48:ba:43:64:58:3d:54:3c:44:09:32:af:b7:6e:
         19:cf:57:23:51:0a:39:92:93:bc:62:74:bb:ea:47:74:39:fa:
         b3:2f:22:29:c7:04:58:a9:ca:3f:88:15:51:c0:58:b7:d3:f1:
         a6:6e:65:ea:d2:ac:11:1c:8e:49:57:38:73:e6:b7:d4:87:d4:
         9c:c6:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----