Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/F9B4B74223E211EBB3370E5EF8AEA228.roa
File:                     F9B4B74223E211EBB3370E5EF8AEA228.roa (raw, json)
Hash identifier:          iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=
Subject key identifier:   97:64:E6:9A:57:35:CF:EE:3E:3F:92:FA:CC:4B:91:47:AA:46:93:CC
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       0212
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/F9B4B74223E211EBB3370E5EF8AEA228.roa
Signing time:             Wed 11 Nov 2020 05:58:53 +0000
ROA not before:           Wed 11 Nov 2020 05:58:47 +0000
ROA not after:            Fri 11 Nov 2039 05:58:47 +0000
asID:                     6968
IP address blocks:        2001:43f8:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Nov 11 05:58:47 2020 GMT
            Not After : Nov 11 05:58:47 2039 GMT
        Subject: CN=5fab7d9d-ea77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:e5:72:bf:58:e8:dc:f9:d4:5b:c3:94:2d:
                    bd:d4:b4:4e:a2:19:cf:7a:12:ca:09:3d:e6:85:b2:
                    d4:7b:01:96:26:1b:60:86:73:42:cb:22:db:b3:24:
                    b7:be:06:75:2e:ee:c4:bb:35:4e:29:ef:fb:50:ed:
                    4f:9a:2b:24:6e:69:41:43:90:e5:6a:31:13:f2:a9:
                    47:ae:4d:ee:d4:da:41:28:26:a8:dd:d6:a2:7c:da:
                    19:43:33:4b:f9:16:c5:80:a9:7c:af:a4:1a:f4:7a:
                    e0:d6:57:eb:ea:94:25:0d:2c:f6:4a:38:d2:99:c5:
                    3a:a8:a3:58:a8:6d:63:ea:ec:6f:19:42:fa:81:28:
                    4a:25:10:e5:a9:4f:43:e4:0f:b2:2d:ce:19:a4:e8:
                    cc:32:b9:e8:19:7a:52:f5:e4:df:44:47:ef:3f:9a:
                    7f:7c:5e:8a:fe:b7:9d:44:ab:2f:29:0a:b0:4b:9d:
                    cb:9f:23:88:1e:17:11:68:52:f8:76:49:27:7e:77:
                    a1:28:23:38:ca:d6:3e:8f:1f:59:89:0c:02:b0:6c:
                    6e:6a:d3:74:75:34:9c:c0:1e:01:59:88:38:a7:cc:
                    78:08:0c:56:ea:d3:9f:33:c3:14:85:24:ed:e5:8a:
                    b7:c1:08:b1:4a:20:0c:5e:db:9d:40:d2:91:7f:b6:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:64:E6:9A:57:35:CF:EE:3E:3F:92:FA:CC:4B:91:47:AA:46:93:CC
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/F9B4B74223E211EBB3370E5EF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:9d:c7:47:a2:28:d2:28:b4:2b:0a:bf:a2:26:58:df:89:62:
         c2:6b:ab:ad:80:1b:81:25:5d:f7:87:22:4c:de:bd:df:e3:db:
         81:fb:e6:18:e4:ff:f3:7e:f7:8f:74:c2:a8:ea:b9:d8:2b:68:
         70:cc:cc:b5:a0:4c:5d:38:43:bc:18:65:7d:d8:07:87:68:55:
         a2:e6:90:2c:84:11:a0:ee:87:93:b4:b4:c6:cb:bd:11:69:b6:
         49:49:4b:19:34:38:e1:d4:22:6f:79:8c:f6:c2:d9:7d:6f:89:
         62:69:79:25:88:9c:2e:2d:ad:31:83:74:b2:02:f5:e8:19:91:
         62:95:1f:f8:e0:23:e6:46:b0:3a:25:d2:61:2c:d7:ae:9c:2b:
         77:0e:3a:61:21:4d:76:50:aa:4a:21:a6:f2:61:39:51:03:20:
         33:2c:ca:84:94:b5:6f:d4:59:6f:36:5d:4a:12:f0:22:71:99:
         99:dc:0a:0b:bf:56:9a:8c:cf:d4:0c:a2:00:b7:29:90:1e:e1:
         02:19:bb:e9:73:15:ff:9e:92:bf:13:41:b1:00:ff:f0:ba:9c:
         05:6e:66:a7:80:70:02:fa:04:97:9e:c9:34:2d:d1:06:04:92:
         d2:ba:90:ab:d7:86:c7:de:6f:bf:d5:f5:3f:85:18:89:bb:f4:
         ea:74:d7:b6
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBRjExMC8GA1UEBRMoOTU0QUI4OEFFNDk0OEE5Qjc1MTc3REVFNjU3RkFC
NEU2RTBDNTc4QTAeFw0yMDExMTEwNTU4NDdaFw0zOTExMTEwNTU4NDdaMBgxFjAU
BgNVBAMTDTVmYWI3ZDlkLWVhNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMoeVyv1jo3PnUW8OULb3UtE6iGc96EsoJPeaFstR7AZYmG2CGc0LLItuz
JLe+BnUu7sS7NU4p7/tQ7U+aKyRuaUFDkOVqMRPyqUeuTe7U2kEoJqjd1qJ82hlD
M0v5FsWAqXyvpBr0euDWV+vqlCUNLPZKONKZxTqoo1iobWPq7G8ZQvqBKEolEOWp
T0PkD7Itzhmk6MwyuegZelL15N9ER+8/mn98Xor+t51Eqy8pCrBLncufI4geFxFo
Uvh2SSd+d6EoIzjK1j6PH1mJDAKwbG5q03R1NJzAHgFZiDinzHgIDFbq058zwxSF
JO3lirfBCLFKIAxe251A0pF/tt/JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl2Tm
mlc1z+4+P5L6zEuRR6pGk8wwHwYDVR0jBBgwFoAUlUq4iuSUipt1F33uZX+rTm4M
V4owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0Q2MDM5OTA0OTFFRDExRTk4NDFENUE3REY4QUVBMjI4L2xVcTRp
dVNVaXB0MUYzM3VaWC1yVG00TVY0by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xVcTRpdVNVaXB0MUYzM3VaWC1yVG00TVY0by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjc5NUM0L0Q2MDM5OTA0OTFFRDExRTk4NDFENUE3REY4
QUVBMjI4L0Y5QjRCNzQyMjNFMjExRUJCMzM3MEU1RUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4AQAwDQYJKoZIhvcN
AQELBQADggEBAD6dx0eiKNIotCsKv6ImWN+JYsJrq62AG4ElXfeHIkzevd/j24H7
5hjk//N+9490wqjqudgraHDMzLWgTF04Q7wYZX3YB4doVaLmkCyEEaDuh5O0tMbL
vRFptklJSxk0OOHUIm95jPbC2X1viWJpeSWInC4trTGDdLIC9egZkWKVH/jgI+ZG
sDol0mEs166cK3cOOmEhTXZQqkohpvJhOVEDIDMsyoSUtW/UWW82XUoS8CJxmZnc
Cgu/VpqMz9QMogC3KZAe4QIZu+lzFf+ekr8TQbEA//C6nAVuZqeAcAL6BJeeyTQt
0QYEktK6kKvXhsfeb7/V9T+FGIm79Op017Y=
-----END CERTIFICATE-----