Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/F56FFE86912911EFAEEF2B78762E951A.roa
File:                     F56FFE86912911EFAEEF2B78762E951A.roa (raw, json)
Hash identifier:          CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=
Subject key identifier:   5E:5E:E7:14:AB:91:FD:20:BF:4B:84:81:E8:C8:2C:EC:A2:76:A0:01
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       02
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/F56FFE86912911EFAEEF2B78762E951A.roa
Signing time:             Wed 23 Oct 2024 10:31:27 +0000
ROA not before:           Wed 23 Oct 2024 10:31:23 +0000
ROA not after:            Mon 23 Oct 2034 10:31:23 +0000
asID:                     329471
IP address blocks:        102.208.176.0/22 maxlen: 22
                          2c0f:40c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Oct 23 10:31:23 2024 GMT
            Not After : Oct 23 10:31:23 2034 GMT
        Subject: CN=6718d07f-7bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:bf:ce:8d:56:3a:36:b3:5b:10:b8:23:7e:
                    fc:2c:90:c3:41:b2:28:94:cf:2b:e1:22:b5:f9:bb:
                    bc:7c:a6:22:bd:46:71:26:dd:08:68:6c:75:e3:31:
                    4a:fa:e2:f8:e5:6b:63:ec:39:cf:ac:ae:e8:03:19:
                    76:8e:b3:f6:cc:38:b9:53:dd:c0:57:5b:3d:83:8f:
                    5a:c0:86:24:25:de:ac:51:bc:9e:18:53:b6:f1:c1:
                    b5:05:5d:3d:18:7f:0a:9c:a7:5b:d7:a6:30:ef:dd:
                    85:bb:d7:36:f8:c3:a7:f5:23:1e:29:34:d6:bf:f8:
                    54:26:c1:dc:1c:0a:72:d6:3b:f4:66:ba:d3:ac:9b:
                    ac:a6:6b:4f:a8:0c:32:9d:26:08:e0:a3:48:e1:4d:
                    1b:2a:35:1c:b1:1a:24:65:08:c2:38:0e:28:e5:16:
                    e3:53:d3:da:5b:e8:73:d9:64:4e:da:6f:23:79:b3:
                    49:fe:e0:34:6b:83:d9:e8:6e:3c:96:ec:e5:a3:cc:
                    63:87:c7:95:f1:2a:23:26:7b:e2:85:25:37:89:9f:
                    65:01:a0:36:95:11:87:07:4f:c7:22:84:1b:bb:80:
                    6a:60:c9:1f:0e:61:17:47:bc:2f:3d:1e:22:0f:01:
                    60:33:88:ee:04:50:88:7f:5a:c3:bf:1d:11:0c:ca:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5E:E7:14:AB:91:FD:20:BF:4B:84:81:E8:C8:2C:EC:A2:76:A0:01
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/F56FFE86912911EFAEEF2B78762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.176.0/22
                IPv6:
                  2c0f:40c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:1f:3b:67:9d:5c:bb:c6:dc:b5:1a:21:ae:59:33:89:fd:
         3c:25:4d:da:0d:44:db:9b:08:d2:15:0a:de:60:e2:c9:3e:23:
         ef:cf:19:5d:e0:38:41:dc:17:9b:df:63:27:ba:fa:73:5d:42:
         cf:d4:3f:ec:5a:e4:b0:86:d2:21:23:7d:f4:41:3f:4f:dc:82:
         1c:da:20:f7:cd:e7:ec:46:5c:05:10:fd:d4:13:da:86:59:7b:
         48:51:af:db:7e:11:47:29:0e:56:ee:b5:2a:9e:46:34:57:f5:
         93:13:1b:a6:a1:bf:ed:29:59:09:70:12:8f:6c:b1:65:ed:1c:
         04:e5:96:2b:fb:9c:5a:fa:7d:17:55:81:2e:0d:b8:cc:64:c5:
         9e:f1:07:44:a6:c0:2d:ee:08:4d:24:a0:e8:06:98:09:14:5a:
         b5:ec:c9:d4:95:db:9d:0e:e7:2a:38:ca:35:0d:6b:07:dc:f1:
         a8:b4:be:67:f2:ed:75:a6:65:a3:8a:2b:98:fd:55:c9:4b:e4:
         f2:85:52:4e:e1:4a:b5:31:17:02:fa:22:9a:24:a5:c3:af:ae:
         d7:83:1b:25:f2:77:0e:80:9d:f4:e6:cb:34:b5:5a:45:87:4d:
         f8:c1:9d:62:86:a8:b5:60:b3:56:e5:67:ea:b5:5b:cc:4b:78:
         5a:77:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----