Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/653C9AA074DB11EFBADDB69E762E951A.roa
File:                     653C9AA074DB11EFBADDB69E762E951A.roa (raw, json)
Hash identifier:          29Tl1qn/Uain4MhwRocZy2PFbVTKXBbVbDJYu8ZXsyM=
Subject key identifier:   05:A6:C1:97:9E:90:AA:0B:BF:57:88:B0:9E:37:28:C2:F5:95:DF:63
Certificate issuer:       /CN=F36539AEAF/serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Certificate serial:       02
Authority key identifier: 5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/653C9AA074DB11EFBADDB69E762E951A.roa
Signing time:             Tue 17 Sep 2024 09:58:32 +0000
ROA not before:           Tue 17 Sep 2024 09:58:28 +0000
ROA not after:            Sun 17 Sep 2034 09:58:28 +0000
asID:                     329260
IP address blocks:        102.213.177.0/24 maxlen: 24
                          2001:43fd:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36539AEAF/serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
        Validity
            Not Before: Sep 17 09:58:28 2024 GMT
            Not After : Sep 17 09:58:28 2034 GMT
        Subject: CN=66e952c8-bab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:c9:d1:54:00:74:74:54:b4:6c:c1:41:e6:
                    2f:ac:98:dd:e4:63:dd:af:1e:5a:93:00:bf:39:b0:
                    f1:3e:45:d1:f6:9c:69:04:11:ff:9f:db:eb:75:84:
                    0f:dd:74:d7:54:ab:88:71:a5:c0:b8:ff:aa:e2:4c:
                    41:5d:df:e8:c1:52:9e:b1:8f:dd:10:54:6a:ba:ab:
                    db:f4:ef:78:37:60:d5:56:e2:e6:19:c5:14:0d:1f:
                    07:a9:4a:35:2a:1a:5f:91:71:1b:52:6b:99:b8:b3:
                    d3:83:91:7a:56:ac:12:7a:ba:fa:60:51:df:8f:e8:
                    d8:ce:1c:5c:1d:bd:cc:50:54:be:8f:7b:1b:3f:4f:
                    a8:1d:4e:70:71:51:29:c7:12:6e:a8:65:c1:f9:30:
                    63:83:33:49:28:a8:93:b5:17:26:cc:9e:dc:ec:14:
                    84:06:eb:36:67:ab:f9:2a:65:36:06:35:cb:43:2c:
                    75:c4:5b:6f:d4:f2:a2:e4:e3:7d:d8:77:d8:20:53:
                    91:0e:f4:d4:8f:a8:14:ae:41:b8:7c:d0:e5:69:f2:
                    f2:74:cb:f3:df:cb:15:6f:87:7c:3c:f0:82:58:d4:
                    fa:b8:68:08:a7:6e:7a:3e:f1:c1:f1:a0:7b:ba:cf:
                    9d:16:62:4e:78:64:ab:8c:22:19:fa:1d:31:5c:4f:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A6:C1:97:9E:90:AA:0B:BF:57:88:B0:9E:37:28:C2:F5:95:DF:63
            X509v3 Authority Key Identifier:
                keyid:5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/653C9AA074DB11EFBADDB69E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.177.0/24
                IPv6:
                  2001:43fd:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:ce:9d:7d:45:76:a8:96:6e:f4:2d:21:5d:10:7a:25:12:
         30:03:89:66:93:37:47:6c:bc:cc:5b:9f:b0:da:26:ec:ae:cf:
         04:5f:0c:3d:97:41:cd:22:b9:74:bb:b6:83:d6:8f:8d:c5:89:
         e1:67:75:15:60:3d:ae:83:71:24:1f:70:9e:48:a7:fa:b2:d8:
         51:e3:6d:c8:00:41:09:67:f5:26:1d:b1:3e:f3:1e:0b:d0:07:
         67:40:74:ce:37:ff:54:e3:27:a0:75:00:6c:c4:e9:9d:1e:fe:
         af:46:c2:71:52:11:db:c6:57:32:35:8b:bf:33:78:c1:46:19:
         ab:5c:c3:33:bc:03:0c:47:0f:04:25:26:e5:d2:f3:b9:61:85:
         19:f1:54:ee:b0:56:85:79:f1:70:d8:2e:1a:b3:48:77:cf:de:
         38:bf:9e:10:79:d4:2b:6e:90:f5:2a:46:ad:84:87:9c:a0:61:
         63:6d:34:53:54:35:72:39:9d:af:2e:29:61:b1:7f:a1:3d:1e:
         e3:3e:4a:39:f0:9a:5d:a6:ae:7c:aa:17:82:06:c6:c5:05:c8:
         f4:e0:a9:49:6a:f8:3a:1f:31:1e:52:09:be:82:56:1e:15:da:
         a9:e4:f1:95:e0:03:27:51:bd:83:4b:a0:f7:1d:4e:48:8c:88:
         6d:1e:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----