Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/99C2D1746B9011E7A18C6069F8AEA228.roa
File:                     99C2D1746B9011E7A18C6069F8AEA228.roa (raw, json)
Hash identifier:          xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=
Subject key identifier:   21:B3:0C:BB:CD:D5:60:FD:D9:C4:BD:F3:80:ED:1E:CD:C0:38:17:DD
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       02
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/99C2D1746B9011E7A18C6069F8AEA228.roa
Signing time:             Tue 18 Jul 2017 08:10:49 +0000
ROA not before:           Tue 18 Jul 2017 08:10:38 +0000
ROA not after:            Tue 20 Jul 2027 08:10:38 +0000
asID:                     36924
IP address blocks:        2c0f:f0f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Jul 18 08:10:38 2017 GMT
            Not After : Jul 20 08:10:38 2027 GMT
        Subject: CN=596dc289-75bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:47:70:66:78:50:83:9f:29:6d:18:a4:c7:
                    93:d0:3f:e0:b0:c6:83:5d:20:66:d3:cf:7e:29:95:
                    78:0c:87:13:90:8f:9d:43:c2:44:c8:ec:30:11:88:
                    d2:e4:27:cf:75:41:52:58:95:aa:2b:92:3e:ac:75:
                    5f:56:f6:e0:34:65:8d:00:03:58:1d:2d:ff:5a:ae:
                    b0:6b:38:9a:a7:5e:6c:90:c0:f5:d8:d9:f0:75:a1:
                    d6:6a:33:d5:14:ba:86:8d:3c:75:b0:06:68:11:96:
                    83:38:46:48:4f:4f:8a:a1:3a:fb:ca:55:43:6b:a4:
                    ca:1f:9a:1a:71:3e:fe:fa:7f:c9:b5:e6:d0:f2:57:
                    b2:e4:b3:42:31:ea:a8:f6:3d:b9:d5:44:3a:98:97:
                    fe:4d:8c:a7:5d:e8:43:73:15:0e:9a:36:0e:a0:8d:
                    cc:d4:47:3b:e9:a6:b3:07:db:18:1a:04:86:a9:35:
                    73:fb:0a:0d:2f:65:f6:e2:38:c8:8a:6b:ea:67:e8:
                    31:a2:47:86:e6:38:cb:4c:3b:13:15:93:6e:b3:19:
                    5f:32:04:ab:09:59:7e:dd:8e:7a:89:de:7a:9c:4a:
                    55:a5:d5:d3:3f:4b:e9:01:7d:db:a3:65:73:3b:a7:
                    0d:e0:0e:36:c2:47:b4:a9:e6:2a:49:19:ad:f6:69:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B3:0C:BB:CD:D5:60:FD:D9:C4:BD:F3:80:ED:1E:CD:C0:38:17:DD
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/99C2D1746B9011E7A18C6069F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f0f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:b7:87:dd:9d:81:c7:a7:9d:1e:8e:ed:6c:44:fd:54:79:27:
         f6:9d:90:5a:0a:2f:cb:b2:bf:a7:31:02:63:04:c6:ec:96:a1:
         9d:ad:25:3f:1b:42:1b:a4:7f:e7:00:c5:e3:9c:2e:79:73:1e:
         19:e8:e6:f5:b7:d2:76:4c:1a:17:79:47:64:89:81:8e:d9:3b:
         10:84:9a:9e:6f:65:cb:29:46:d4:a4:b1:d2:b0:3b:eb:21:8e:
         be:fa:29:75:69:8a:c1:48:8f:07:c2:45:ea:16:e1:a2:34:07:
         63:da:d3:b5:a4:ec:e4:ce:aa:39:b6:45:b7:69:b9:4a:be:41:
         8b:ae:6b:8c:36:89:f1:a1:d3:89:1a:6d:85:7d:02:92:9e:44:
         e0:98:09:a7:05:65:30:54:75:bb:8d:60:f3:ee:47:b8:96:99:
         8f:d7:f8:36:3b:fb:88:d7:81:f1:c3:f2:39:17:b2:87:b9:b7:
         c8:fc:90:d8:99:ca:23:10:e4:d7:b9:43:3e:bc:f6:41:c3:2d:
         08:17:af:a0:90:84:3d:5f:e3:61:a0:48:db:bd:11:e2:32:8b:
         f3:cd:ef:04:5f:29:6a:bd:2a:0d:32:cf:92:0a:c4:62:bc:ff:
         66:70:e6:77:3d:fb:a5:a8:a6:f9:0a:40:18:e5:a9:71:91:c5:
         fd:24:d6:d9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
ODIzMUFGMTEwLwYDVQQFEygxODFFRjcxQTM0RjkyQ0Y2MkRDRDExRDc5MDA3QzU4
NTQ4MzlDMUFCMB4XDTE3MDcxODA4MTAzOFoXDTI3MDcyMDA4MTAzOFowGDEWMBQG
A1UEAxMNNTk2ZGMyODktNzViZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANU5R3BmeFCDnyltGKTHk9A/4LDGg10gZtPPfimVeAyHE5CPnUPCRMjsMBGI
0uQnz3VBUliVqiuSPqx1X1b24DRljQADWB0t/1qusGs4mqdebJDA9djZ8HWh1moz
1RS6ho08dbAGaBGWgzhGSE9PiqE6+8pVQ2ukyh+aGnE+/vp/ybXm0PJXsuSzQjHq
qPY9udVEOpiX/k2Mp13oQ3MVDpo2DqCNzNRHO+mmswfbGBoEhqk1c/sKDS9l9uI4
yIpr6mfoMaJHhuY4y0w7ExWTbrMZXzIEqwlZft2OeoneepxKVaXV0z9L6QF926Nl
czunDeAONsJHtKnmKkkZrfZprQECAwEAAaOCAm8wggJrMB0GA1UdDgQWBBQhswy7
zdVg/dnEvfOA7R7NwDgX3TAfBgNVHSMEGDAWgBQYHvcaNPks9i3NEdeQB8WFSDnB
qzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjgyMzEvM0FBOEJBMjA2QjhFMTFFNzkzQzFDNTY1RjhBRUEyMjgvR0I3M0dq
VDVMUFl0elJIWGtBZkZoVWc1d2FzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvR0I3M0dqVDVMUFl0elJIWGtBZkZoVWc1d2FzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjgyMzEvM0FBOEJBMjA2QjhFMTFFNzkzQzFDNTY1RjhB
RUEyMjgvOTlDMkQxNzQ2QjkwMTFFN0ExOEM2MDY5RjhBRUEyMjgucm9hMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUALA/w+DANBgkqhkiG9w0BAQsFAAOCAQEA
1reH3Z2Bx6edHo7tbET9VHkn9p2QWgovy7K/pzECYwTG7Jahna0lPxtCG6R/5wDF
45wueXMeGejm9bfSdkwaF3lHZImBjtk7EISanm9lyylG1KSx0rA76yGOvvopdWmK
wUiPB8JF6hbhojQHY9rTtaTs5M6qObZFt2m5Sr5Bi65rjDaJ8aHTiRpthX0Ckp5E
4JgJpwVlMFR1u41g8+5HuJaZj9f4Njv7iNeB8cPyOReyh7m3yPyQ2JnKIxDk17lD
Prz2QcMtCBevoJCEPV/jYaBI270R4jKL883vBF8par0qDTLPkgrEYrz/ZnDmdz37
paim+QpAGOWpcZHF/STW2Q==
-----END CERTIFICATE-----