Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/0DE9F16080D011E6B7882016F8AEA228.roa
File:                     0DE9F16080D011E6B7882016F8AEA228.roa (raw, json)
Hash identifier:          lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=
Subject key identifier:   FA:9F:16:3F:8C:FC:5A:4F:2A:A8:26:FB:12:33:19:16:B8:08:98:8E
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       02
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/0DE9F16080D011E6B7882016F8AEA228.roa
Signing time:             Thu 22 Sep 2016 14:22:56 +0000
ROA not before:           Thu 22 Sep 2016 14:22:51 +0000
ROA not after:            Tue 15 Sep 2026 14:22:51 +0000
asID:                     328039
IP address blocks:        2c0f:f288::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Sep 22 14:22:51 2016 GMT
            Not After : Sep 15 14:22:51 2026 GMT
        Subject: CN=57e3e940-4383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:ca:e8:be:0a:f7:aa:a5:26:cb:2a:7a:84:
                    e4:99:39:eb:ec:df:5b:31:d9:33:f8:e5:df:89:da:
                    1b:bf:85:e9:b3:4d:bc:f3:13:7f:76:69:e7:81:2d:
                    44:6d:db:3e:98:94:6a:b5:c3:7c:5d:da:59:cd:a0:
                    f0:dc:5a:67:02:f2:b0:6d:cc:dc:4d:a5:c1:a3:bd:
                    81:b8:ea:66:e6:a8:34:c1:6f:35:f7:44:e5:d9:5b:
                    02:b6:50:9e:63:d5:78:9a:22:f2:1e:66:a9:aa:71:
                    86:3c:6d:46:1d:21:c1:5c:a3:25:17:88:7c:c4:c3:
                    23:ce:68:f9:bd:5a:e6:fc:9c:bd:9e:30:8a:50:f8:
                    13:ad:e0:6c:f3:a2:5a:38:f2:eb:f5:e1:3f:42:f0:
                    70:10:d8:1d:1a:8a:f1:1e:b7:49:32:64:70:4e:47:
                    8b:0d:aa:fc:26:c5:8a:b5:80:ab:d3:40:bf:ec:21:
                    89:d0:f8:9d:12:ad:0e:e9:15:a5:7d:b2:0e:12:99:
                    12:01:57:fe:40:48:3f:ed:60:ab:49:2d:7f:7f:c7:
                    99:a8:24:4a:6c:16:24:1b:14:01:84:ed:56:b9:a4:
                    2a:b5:d1:95:fc:60:bb:11:27:15:71:40:48:94:10:
                    3e:b9:75:a4:a9:24:8e:a5:50:19:98:fc:1b:ee:34:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:16:3F:8C:FC:5A:4F:2A:A8:26:FB:12:33:19:16:B8:08:98:8E
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/0DE9F16080D011E6B7882016F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f288::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:31:c6:f9:a0:c8:0c:e4:de:c0:20:86:55:b5:58:3a:a8:
         06:74:b0:a5:23:4d:4c:ad:6a:37:ba:8c:39:dc:78:50:4c:f2:
         43:67:59:59:31:36:44:c2:1d:10:db:77:20:66:2e:d0:1c:ee:
         71:48:f1:d5:57:d3:5b:57:64:4e:f3:1b:38:2a:8b:01:ac:7a:
         a2:7f:75:2e:e1:7f:33:ad:cc:2d:dd:57:3e:af:0c:fc:22:0b:
         5f:f4:7e:2d:58:1f:4a:a6:5e:f4:16:b9:3b:87:77:88:c3:81:
         f5:4a:2f:fd:5b:02:1f:c2:c4:0c:59:25:ee:92:47:bf:13:ed:
         38:43:4a:b1:9e:ac:d0:e0:d9:8d:1a:09:2d:28:e3:9a:ac:41:
         b1:50:01:74:3b:1e:9c:01:34:09:81:c2:28:04:bd:02:60:dc:
         80:ef:69:ec:ef:3c:08:1e:b4:e8:8c:79:3b:21:2f:b0:11:90:
         2e:45:25:36:fa:67:75:d0:de:0c:db:7a:87:b4:5f:d2:17:da:
         85:68:de:60:79:e3:93:92:f3:a2:7e:71:02:10:a9:dc:33:da:
         11:8c:c5:a4:5c:fa:de:a8:67:0d:3e:0d:56:0b:4b:14:57:dd:
         4c:91:dc:d1:36:a5:af:f0:7b:f0:66:ef:07:79:fb:c9:c7:a5:
         25:48:26:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----