Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/BABCAEFE91EF11E9B165E57EF8AEA228.roa
File:                     BABCAEFE91EF11E9B165E57EF8AEA228.roa (raw, json)
Hash identifier:          hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=
Subject key identifier:   8F:99:F9:19:A2:75:02:AE:62:09:5C:D3:66:F4:14:48:C2:6F:B6:25
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       02
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/BABCAEFE91EF11E9B165E57EF8AEA228.roa
Signing time:             Tue 18 Jun 2019 17:37:23 +0000
ROA not before:           Tue 18 Jun 2019 17:37:18 +0000
ROA not after:            Sat 18 Jun 2039 17:37:18 +0000
asID:                     6968
IP address blocks:        2001:43f8:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Jun 18 17:37:18 2019 GMT
            Not After : Jun 18 17:37:18 2039 GMT
        Subject: CN=5d092153-24a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:1d:31:22:a6:20:80:b9:ee:1f:c1:7f:44:
                    67:db:a7:0f:f9:eb:45:09:0d:8d:6f:19:60:6d:7c:
                    f1:7a:a8:8e:84:df:c5:a2:31:38:a0:ed:63:cd:e7:
                    24:fb:79:71:d9:10:d6:ac:ee:18:88:5f:1e:55:aa:
                    a1:c4:aa:a6:69:43:aa:c8:4c:90:93:b4:cb:7c:f9:
                    ad:ec:19:f0:08:81:a1:9b:c3:47:ee:67:11:45:cd:
                    a5:78:5c:67:18:0a:a2:38:7f:af:33:3c:1f:4d:bf:
                    10:99:6b:60:9c:3c:e0:02:10:dc:7d:7a:a7:0b:0a:
                    0c:78:e8:e1:3f:f5:24:49:fe:1f:be:28:35:c9:23:
                    23:f9:1c:de:3e:43:e5:50:e5:6e:3e:f3:43:ca:fc:
                    93:92:f8:94:45:be:b5:44:f3:e4:20:93:89:49:11:
                    1e:14:31:4c:06:d1:22:76:f6:ae:7e:e4:9a:69:e4:
                    da:b9:ca:c4:cd:8b:b4:97:2e:c7:1c:75:01:9e:87:
                    db:20:ba:7b:27:56:29:aa:7b:ba:55:54:f7:35:0e:
                    69:fa:62:fa:c8:b1:9b:ba:ab:00:91:f8:79:0f:86:
                    61:ea:90:58:21:5b:9c:d7:d5:9e:61:83:a6:47:c4:
                    ce:cd:91:2c:7c:a7:63:33:c3:aa:49:a4:51:e7:bd:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:F9:19:A2:75:02:AE:62:09:5C:D3:66:F4:14:48:C2:6F:B6:25
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/BABCAEFE91EF11E9B165E57EF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:70:d6:80:07:4d:04:66:e2:42:24:ed:b5:96:1f:a7:e8:
         17:11:b4:50:99:4e:a9:7b:77:6a:0b:ba:9a:e7:c1:18:a0:3f:
         dd:f5:c9:cc:a5:93:1a:5b:9d:4f:08:2e:51:46:c8:d4:e5:35:
         8a:0b:9c:41:08:97:98:f0:22:33:ab:e5:0d:b2:df:ea:19:21:
         8f:72:97:3e:ba:08:b2:27:f8:da:e2:f7:76:1c:69:cf:a0:76:
         85:a1:0a:41:c0:66:bb:43:cb:9f:2e:3b:de:a6:46:81:38:17:
         f6:6c:96:63:30:85:5a:7b:b0:13:f7:47:b3:be:1a:25:37:ef:
         7c:34:4e:ed:e6:cb:b8:4d:68:da:7e:16:15:bd:ba:1e:06:35:
         91:a4:06:ca:18:7f:36:a0:cf:ee:25:15:03:30:c7:c2:1f:85:
         db:84:ae:18:d4:e1:39:a6:67:fc:3d:82:e0:0b:97:18:2e:e9:
         36:57:7a:d5:06:1e:da:2f:1b:b6:d5:d2:c5:76:8d:d2:c9:a0:
         ac:d7:9b:2d:6f:36:19:2e:08:ed:f5:60:3e:cd:67:b1:28:31:
         c6:2c:82:2b:39:55:14:4a:ce:23:fc:79:7c:38:4d:16:42:cc:
         10:3d:bf:68:73:11:e9:7b:97:78:52:4e:97:90:39:dd:da:99:
         bd:f2:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----