Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/D6C5DD44697011ED921888E1F1222468.roa
File:                     D6C5DD44697011ED921888E1F1222468.roa (raw, json)
Hash identifier:          6qobUBR5lY4TVVfXDdQHOyj3miAJRqZDg8CWZOUWKVs=
Subject key identifier:   DA:15:F3:56:DA:5C:49:B5:E8:C6:A3:FB:BA:E7:6C:C8:AA:6C:E8:32
Certificate issuer:       /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial:       88
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/D6C5DD44697011ED921888E1F1222468.roa
Signing time:             Mon 21 Nov 2022 07:48:08 +0000
ROA not before:           Mon 21 Nov 2022 07:48:02 +0000
ROA not after:            Tue 30 Nov 2032 07:48:02 +0000
asID:                     328178
IP address blocks:        2c0f:f1c0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
        Validity
            Not Before: Nov 21 07:48:02 2022 GMT
            Not After : Nov 30 07:48:02 2032 GMT
        Subject: CN=637b2d38-e934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:18:78:b1:a3:8e:b1:82:13:a2:e9:5a:d5:
                    ed:82:36:d9:85:0c:2e:47:f1:d8:26:f2:6c:42:ab:
                    6d:76:a8:56:6b:28:da:12:f8:16:1e:aa:12:7c:f9:
                    0c:4c:2b:4a:30:6a:75:71:14:ac:1c:c0:b9:0e:d0:
                    9d:25:44:4a:67:2c:a4:e1:60:b9:df:f0:c9:30:73:
                    3e:86:02:f6:27:b9:40:7d:37:0f:88:35:76:f4:ae:
                    ca:7e:04:dd:46:f9:7d:67:e5:d8:9c:57:cd:93:7d:
                    2b:74:9a:d2:7b:a3:fb:f0:ed:6d:66:b9:a2:6d:87:
                    fc:a5:12:67:3d:11:84:fb:73:15:d0:d9:08:8f:aa:
                    0b:77:ec:a5:81:b9:c1:6c:86:62:dc:2b:90:fc:df:
                    0a:cd:30:8d:f3:ce:f5:30:17:90:50:0a:64:55:92:
                    a6:55:7b:64:b0:b2:62:a5:e4:33:7a:96:63:be:87:
                    e9:40:8f:b5:61:8b:b0:aa:6b:6f:4a:2f:eb:b3:fc:
                    84:9b:a4:a5:9a:ee:77:ca:06:29:89:23:d8:fe:37:
                    f1:91:4f:87:b8:af:d3:2b:02:2b:72:fe:e5:5a:6b:
                    49:e8:68:26:d1:dd:6d:59:0c:43:62:45:56:a1:53:
                    da:1d:a4:be:e8:49:ad:ae:9b:46:18:25:8e:c5:01:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:15:F3:56:DA:5C:49:B5:E8:C6:A3:FB:BA:E7:6C:C8:AA:6C:E8:32
            X509v3 Authority Key Identifier:
                keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/D6C5DD44697011ED921888E1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:1b:1f:37:7b:b9:36:15:1e:c3:56:a9:e6:87:2d:35:5d:
         03:9e:07:59:67:2f:39:92:89:c0:da:d5:8c:e4:44:dd:5c:1d:
         59:f9:e3:8c:1a:a9:77:7d:cd:6f:bd:df:f3:75:d6:c8:8c:f1:
         05:32:67:f3:da:70:b1:e1:5c:49:91:14:65:8e:20:ac:b0:1c:
         06:68:b9:06:8c:a2:ce:17:77:8c:94:0c:3d:7f:58:c8:dd:9a:
         b8:3a:1e:e7:27:25:97:5a:55:3c:68:04:cd:60:d0:53:d3:4e:
         66:d7:20:c6:dd:c7:e2:20:32:36:ae:83:4f:1d:bd:26:5e:4b:
         32:51:2d:f1:7d:88:89:a9:ac:9a:b2:b7:54:e2:eb:aa:d0:9e:
         0e:6c:de:e3:ba:78:ab:bb:67:b7:ff:45:0e:ab:60:a4:61:5b:
         82:01:a2:62:6d:9a:b1:56:38:60:88:05:3f:42:3a:14:71:2c:
         aa:92:a8:22:33:1e:f7:49:02:0f:23:f6:5b:8b:dd:92:2a:f9:
         b9:bb:46:3f:95:9e:4d:bb:56:85:c7:c9:4b:f2:3d:c2:55:16:
         6a:28:c6:11:e9:93:65:f9:38:dc:aa:a9:46:ce:7f:c1:4f:e8:
         05:dd:e3:c6:8c:38:a3:e1:f9:3d:dc:06:a4:1a:d6:5a:9f:23:
         ef:6c:1a:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjIzNjdBRjExMC8GA1UEBRMoMEJEMDA4NDhGODM4RkQ5MEI5OUVEQzM3NjkwNzIw
OTU1RkIwMDkwNjAeFw0yMjExMjEwNzQ4MDJaFw0zMjExMzAwNzQ4MDJaMBgxFjAU
BgNVBAMMDTYzN2IyZDM4LWU5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCmxh4saOOsYIToula1e2CNtmFDC5H8dgm8mxCq212qFZrKNoS+BYeqhJ8
+QxMK0owanVxFKwcwLkO0J0lREpnLKThYLnf8Mkwcz6GAvYnuUB9Nw+INXb0rsp+
BN1G+X1n5dicV82TfSt0mtJ7o/vw7W1muaJth/ylEmc9EYT7cxXQ2QiPqgt37KWB
ucFshmLcK5D83wrNMI3zzvUwF5BQCmRVkqZVe2SwsmKl5DN6lmO+h+lAj7Vhi7Cq
a29KL+uz/ISbpKWa7nfKBimJI9j+N/GRT4e4r9MrAity/uVaa0noaCbR3W1ZDENi
RVahU9odpL7oSa2um0YYJY7FAY/NAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU2hXz
VtpcSbXoxqP7uudsyKps6DIwHwYDVR0jBBgwFoAUC9AISPg4/ZC5ntw3aQcglV+w
CQYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMzY3L0I0NTA4Q0U4MDgyMDExRUQ4Mjg1ODhGN0YxMjIyNDY4L0M5QUlT
UGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0M5QUlTUGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjYyMzY3L0I0NTA4Q0U4MDgyMDExRUQ4Mjg1ODhGN0Yx
MjIyNDY4L0Q2QzVERDQ0Njk3MDExRUQ5MjE4ODhFMUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/HAMA0GCSqGSIb3DQEB
CwUAA4IBAQCe6xsfN3u5NhUew1ap5octNV0DngdZZy85konA2tWM5ETdXB1Z+eOM
Gql3fc1vvd/zddbIjPEFMmfz2nCx4VxJkRRljiCssBwGaLkGjKLOF3eMlAw9f1jI
3Zq4Oh7nJyWXWlU8aATNYNBT005m1yDG3cfiIDI2roNPHb0mXksyUS3xfYiJqaya
srdU4uuq0J4ObN7juniru2e3/0UOq2CkYVuCAaJibZqxVjhgiAU/QjoUcSyqkqgi
Mx73SQIPI/Zbi92SKvm5u0Y/lZ5Nu1aFx8lL8j3CVRZqKMYR6ZNl+TjcqqlGzn/B
T+gF3ePGjDij4fk93AakGtZanyPvbBoc
-----END CERTIFICATE-----