Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/84121498949611EFBE8BA57F762E951A.roa
File:                     84121498949611EFBE8BA57F762E951A.roa (raw, json)
Hash identifier:          XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=
Subject key identifier:   55:AD:DE:D2:83:96:B2:75:82:7D:3D:50:53:5D:3A:1B:7F:C2:02:05
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       06
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/84121498949611EFBE8BA57F762E951A.roa
Signing time:             Sun 27 Oct 2024 19:06:05 +0000
ROA not before:           Sun 27 Oct 2024 19:06:02 +0000
ROA not after:            Fri 27 Oct 2034 19:06:02 +0000
asID:                     329202
IP address blocks:        102.213.24.0/22 maxlen: 22
                          2c0f:3380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Oct 27 19:06:02 2024 GMT
            Not After : Oct 27 19:06:02 2034 GMT
        Subject: CN=671e8f1d-64d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:82:0a:4d:92:d1:7a:28:f3:68:35:4c:e2:
                    94:35:a9:9d:b6:62:d0:7b:8d:6b:a5:58:db:fb:b0:
                    d4:e8:a2:f9:9e:f2:44:38:65:b6:62:b1:df:16:ba:
                    c3:60:e6:ad:df:0b:4c:df:77:4f:7e:65:5c:f9:f4:
                    62:27:e0:81:5d:01:df:de:4b:8e:eb:8c:a7:21:08:
                    a8:ba:0a:9a:bf:02:de:1a:8d:de:4d:4b:65:45:8f:
                    f2:ae:b7:18:09:2d:eb:d7:82:60:5a:0c:76:d2:52:
                    6f:5b:79:28:62:ca:af:05:df:ec:3a:41:f9:92:67:
                    0d:3e:4c:bc:ab:d0:12:a0:59:78:90:90:ec:73:28:
                    35:d4:d9:01:1b:75:83:ab:71:a4:84:50:fe:c7:84:
                    b6:93:38:89:30:6e:1b:70:79:31:27:3a:35:84:eb:
                    5f:e5:1e:bd:fa:43:4f:22:98:91:e7:7c:44:f3:3f:
                    40:6a:8b:c9:b6:68:f5:3d:1f:0f:fb:9b:3d:fa:f0:
                    f7:fc:cf:de:35:c0:44:f8:5e:63:77:90:60:8d:45:
                    e9:69:8e:60:b2:89:7b:23:15:69:c1:57:37:97:eb:
                    78:fc:58:5c:75:2e:e7:87:20:18:46:34:f2:fc:b5:
                    c7:27:be:2f:ef:e0:54:de:fe:0e:39:2b:9d:23:c3:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AD:DE:D2:83:96:B2:75:82:7D:3D:50:53:5D:3A:1B:7F:C2:02:05
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/84121498949611EFBE8BA57F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.24.0/22
                IPv6:
                  2c0f:3380::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:f6:bb:b5:13:dc:00:7e:aa:2d:48:db:b6:03:8d:8f:1a:
         18:ea:fc:12:75:2e:6a:64:8d:8d:b4:2a:0e:0d:6a:93:e8:a1:
         35:e0:cb:41:1b:f8:76:a5:38:ef:40:f6:aa:a8:41:a9:37:16:
         ce:d6:75:ff:0b:ee:fd:9e:7f:94:f4:91:fd:fa:f6:64:d6:2f:
         26:cd:7f:19:67:b9:0b:19:9b:ab:e9:fd:3e:78:25:0c:ee:4d:
         e9:8e:e4:63:3a:03:3d:e6:8a:43:1a:94:be:16:02:e6:ee:bc:
         bd:b9:19:61:a2:d4:af:b2:d5:3f:f3:ef:ba:fd:46:de:ae:f3:
         62:54:49:0b:cc:f1:a6:74:34:0a:9a:dd:31:99:c7:a0:f4:c5:
         79:46:0b:fa:ad:65:ec:37:a4:6a:87:d1:f3:d9:74:3e:e5:b9:
         1f:55:14:cd:c3:1e:7b:07:1c:02:1a:1c:a5:a6:da:5c:b8:c4:
         c4:63:3a:51:73:06:31:6f:40:4e:76:33:59:c3:47:29:d8:6c:
         fd:28:e4:a5:05:dc:4c:47:b6:76:ca:13:a6:c4:ca:78:42:2d:
         a3:ac:e0:9b:ef:a0:47:b7:78:12:f8:82:27:f7:0b:41:85:3b:
         3d:d1:ef:87:d3:f7:9c:ab:89:f1:a8:32:a7:52:c5:f8:da:b6:
         80:ae:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----