Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/F3D28466A49B11EE881B3A7CD25BE465.roa
File:                     F3D28466A49B11EE881B3A7CD25BE465.roa (raw, json)
Hash identifier:          8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=
Subject key identifier:   D3:DF:07:45:3F:D0:06:FF:2D:E8:FE:D0:45:FB:68:4A:FD:B8:A4:F9
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       25
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/F3D28466A49B11EE881B3A7CD25BE465.roa
Signing time:             Wed 27 Dec 2023 09:40:21 +0000
ROA not before:           Wed 27 Dec 2023 09:40:18 +0000
ROA not after:            Tue 31 Dec 2030 09:40:18 +0000
asID:                     329370
IP address blocks:        102.210.169.0/24 maxlen: 24
                          2c0f:6540::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Dec 27 09:40:18 2023 GMT
            Not After : Dec 31 09:40:18 2030 GMT
        Subject: CN=658bf105-5cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:28:ee:7a:01:d3:ff:be:40:d8:1b:3c:29:
                    39:cf:0e:66:5d:a7:ed:9c:8a:6d:89:df:7f:06:2b:
                    f6:bf:70:44:52:57:d2:4c:f6:a3:5e:8a:ad:5a:74:
                    a3:95:3c:e0:50:69:77:f2:70:a5:aa:4c:76:3f:48:
                    07:01:c9:a2:b1:44:a0:26:ba:ba:f0:e9:af:22:17:
                    c3:a1:cd:96:06:de:1b:10:14:cd:b0:ac:fa:d9:d3:
                    6a:58:b9:37:2b:db:bd:98:e8:86:20:60:e5:ca:85:
                    23:07:36:6b:c0:2c:74:46:71:02:b8:a8:07:8f:13:
                    f7:e4:03:8a:4e:58:c1:1e:ac:11:85:3b:04:0b:40:
                    fa:52:b8:85:13:ab:6c:ca:f3:be:02:df:e1:59:d1:
                    f6:ec:7c:ea:db:a1:97:ae:ec:35:17:b7:2e:6b:c6:
                    de:ff:48:45:a7:19:29:af:67:ef:f0:8c:60:d4:21:
                    60:89:06:2a:23:07:5f:58:2d:a0:ea:16:7e:fc:22:
                    70:85:0d:b0:63:4e:9a:07:cb:09:be:61:a2:5f:89:
                    fe:d1:75:ad:11:85:ef:29:f0:d2:a6:b4:fb:45:28:
                    a0:33:09:19:9d:19:13:26:0b:d0:b1:74:d6:bf:ff:
                    bc:bf:f8:c8:41:92:ae:14:86:71:6a:64:a4:48:bb:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:07:45:3F:D0:06:FF:2D:E8:FE:D0:45:FB:68:4A:FD:B8:A4:F9
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/F3D28466A49B11EE881B3A7CD25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.169.0/24
                IPv6:
                  2c0f:6540::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:13:e6:17:40:40:90:13:b7:fb:05:c3:36:3a:5c:b3:00:21:
         3d:ae:68:80:9f:7c:21:0a:81:87:8e:b8:a9:1c:b9:17:62:43:
         ed:ee:bf:7e:24:85:6d:66:2c:31:43:12:e4:f1:23:8d:1c:32:
         b4:67:ac:22:0b:48:04:70:d0:ab:b2:0d:a3:36:9a:27:e8:6c:
         9e:86:90:eb:fb:a5:7a:c9:eb:bc:d0:bf:06:ca:fe:a7:2e:6d:
         55:58:f2:82:10:3c:5a:03:87:c6:93:ca:da:75:58:ef:4f:20:
         9f:77:47:ee:e4:6e:17:f1:96:05:d6:c3:a6:2f:4e:66:ae:43:
         03:7e:f8:0b:24:b8:f2:bb:9e:cf:40:fa:91:1c:ae:ac:51:7e:
         b1:2e:a3:c3:17:15:60:50:64:e5:ec:1e:7d:c2:bc:5c:90:d9:
         a2:4a:7a:18:6a:cb:f6:33:31:e0:75:1d:6a:e1:da:ac:29:60:
         c1:6e:b8:77:a9:95:27:08:f9:cc:db:d1:1c:9a:3e:9e:06:1d:
         4c:d0:ae:4c:36:d6:3b:7b:0a:fc:37:2f:cb:d6:df:28:56:97:
         8a:9a:c4:f6:4e:0d:e3:3d:36:bc:f2:69:46:9e:0a:6b:38:ba:
         a3:37:67:82:b8:8b:18:9f:da:77:29:6e:c5:c8:b7:12:0d:4f:
         30:b1:2f:16
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBJTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
MkQ5OEFGMTEwLwYDVQQFEyhGOTg3ODFFNjdEOUVBOTZBRjI1ODA2QUM4NkQxMDA2
RjgyMUZBQTM2MB4XDTIzMTIyNzA5NDAxOFoXDTMwMTIzMTA5NDAxOFowGDEWMBQG
A1UEAxMNNjU4YmYxMDUtNWNlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1zKO56AdP/vkDYGzwpOc8OZl2n7ZyKbYnffwYr9r9wRFJX0kz2o16KrVp0
o5U84FBpd/JwpapMdj9IBwHJorFEoCa6uvDpryIXw6HNlgbeGxAUzbCs+tnTali5
NyvbvZjohiBg5cqFIwc2a8AsdEZxArioB48T9+QDik5YwR6sEYU7BAtA+lK4hROr
bMrzvgLf4VnR9ux86tuhl67sNRe3LmvG3v9IRacZKa9n7/CMYNQhYIkGKiMHX1gt
oOoWfvwicIUNsGNOmgfLCb5hol+J/tF1rRGF7ynw0qa0+0UooDMJGZ0ZEyYL0LF0
1r//vL/4yEGSrhSGcWpkpEi7ep8CAwEAAaOCArQwggKwMB0GA1UdDgQWBBTT3wdF
P9AG/y3o/tBF+2hK/bik+TAfBgNVHSMEGDAWgBT5h4HmfZ6pavJYBqyG0QBvgh+q
NjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTJEOTgvQUZFOTVGNzQ5OEYwMTFFRThBNDdDQTU5RDI1QkU0NjUvLVllQjVu
MmVxV3J5V0Fhc2h0RUFiNElmcWpZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvLVllQjVuMmVxV3J5V0Fhc2h0RUFiNElmcWpZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTJEOTgvQUZFOTVGNzQ5OEYwMTFFRThBNDdDQTU5RDI1
QkU0NjUvRjNEMjg0NjZBNDlCMTFFRTg4MUIzQTdDRDI1QkU0NjUucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAGbSqTANBAIAAjAHAwUALA9l
QDANBgkqhkiG9w0BAQsFAAOCAQEARRPmF0BAkBO3+wXDNjpcswAhPa5ogJ98IQqB
h464qRy5F2JD7e6/fiSFbWYsMUMS5PEjjRwytGesIgtIBHDQq7INozaaJ+hsnoaQ
6/ulesnrvNC/Bsr+py5tVVjyghA8WgOHxpPK2nVY708gn3dH7uRuF/GWBdbDpi9O
Zq5DA374CyS48ruez0D6kRyurFF+sS6jwxcVYFBk5ewefcK8XJDZokp6GGrL9jMx
4HUdauHarClgwW64d6mVJwj5zNvRHJo+ngYdTNCuTDbWO3sK/Dcvy9bfKFaXiprE
9k4N4z02vPJpRp4Kazi6ozdngriLGJ/adyluxci3Eg1PMLEvFg==
-----END CERTIFICATE-----