Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/7DB93F0EC8C711E9BC304257F8AEA228.roa
File:                     7DB93F0EC8C711E9BC304257F8AEA228.roa (raw, json)
Hash identifier:          UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=
Subject key identifier:   B0:67:99:91:42:1E:56:76:86:BE:14:B0:F3:E2:6D:69:F7:04:45:4F
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       043D
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/7DB93F0EC8C711E9BC304257F8AEA228.roa
Signing time:             Tue 27 Aug 2019 12:37:55 +0000
ROA not before:           Tue 27 Aug 2019 12:37:50 +0000
ROA not after:            Mon 27 Aug 2029 12:37:50 +0000
asID:                     328032
IP address blocks:        2c0f:f238::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 12 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Aug 27 12:37:50 2019 GMT
            Not After : Aug 27 12:37:50 2029 GMT
        Subject: CN=5d652423-4884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:92:da:45:7a:61:05:2b:c6:3e:22:45:d2:
                    b9:4e:49:be:a7:72:79:40:11:c1:0f:35:91:6d:7e:
                    a3:fc:94:3c:e9:fe:96:18:28:b1:d3:35:47:d7:c4:
                    63:a3:5d:c2:b7:39:b4:b6:8a:ae:a2:c9:e6:0d:c1:
                    c3:af:25:2e:af:00:62:ec:ab:f8:3f:81:15:a5:4e:
                    11:b5:21:e4:5c:9e:2a:36:cb:8a:12:49:5e:ef:d4:
                    dd:2a:d4:ca:dc:93:b7:82:73:c9:d9:e7:ba:fc:f5:
                    a7:f3:42:90:61:6c:e9:65:7c:2a:bd:df:68:b8:9d:
                    6b:da:e0:e6:3f:49:a6:e4:1d:c9:d8:5c:1a:ae:f5:
                    8e:70:48:92:17:f1:e1:df:fd:e1:d8:67:b2:49:68:
                    fd:c7:d0:e7:82:e8:91:53:4a:93:0f:57:2b:60:28:
                    2a:81:e9:37:26:4c:6a:2c:5c:22:80:33:59:be:78:
                    8e:17:34:f3:8a:cc:ec:89:c1:29:93:60:79:c2:3a:
                    f6:4a:b1:4a:ad:b0:ea:0a:85:f6:96:21:45:66:f7:
                    2f:26:13:b1:1e:42:43:eb:e0:cf:e7:4d:43:47:7d:
                    20:c3:94:c6:5d:07:2c:63:5b:be:c5:94:fc:75:18:
                    66:83:63:f8:a2:cf:75:f4:f5:f0:93:28:91:74:ec:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:67:99:91:42:1E:56:76:86:BE:14:B0:F3:E2:6D:69:F7:04:45:4F
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/7DB93F0EC8C711E9BC304257F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f238::/33

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:51:88:88:09:10:30:36:e4:9a:79:a9:25:11:a0:7c:54:
         8b:38:6b:26:91:45:a2:6e:3d:81:96:25:b4:f8:d4:b6:63:67:
         13:b1:ea:6f:4e:9f:9f:6c:f4:7e:06:96:d8:5b:6f:20:a0:48:
         73:4b:39:f2:e8:93:6c:0d:e3:26:23:3a:72:07:94:c4:db:6d:
         d1:03:f0:56:39:85:87:45:d4:89:3f:23:5c:83:84:3c:52:2e:
         e1:2e:15:62:48:bd:db:a9:92:c8:14:9c:83:21:95:f4:56:26:
         1b:68:e9:2c:bf:53:5d:5a:88:19:11:e6:ce:90:07:3c:91:76:
         e1:9a:f2:2e:fe:3d:63:75:25:cc:6e:ef:ff:bb:e0:52:a3:c1:
         92:6a:c5:da:e0:d3:3a:40:7e:60:07:b2:24:01:5c:79:35:98:
         97:3f:f7:64:e9:98:84:74:73:45:f5:3b:2c:73:aa:e1:04:aa:
         9b:f9:aa:70:5c:24:69:e5:3d:6a:e9:17:85:64:2c:e3:14:a1:
         f2:57:1f:49:ce:5c:23:af:b1:27:3c:7d:7d:6e:1b:f7:f8:5d:
         8a:bb:df:c6:56:6b:db:e8:8e:14:bf:7a:50:50:e6:8f:28:ff:
         ab:35:97:bf:72:82:da:a2:a7:79:92:19:08:25:c4:6e:84:a9:
         7d:af:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----