Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/35E0C666207711ECA71BBD26D8A014CE.roa
File:                     35E0C666207711ECA71BBD26D8A014CE.roa (raw, json)
Hash identifier:          +cVurkAhF+yeR1OYxL2MVt7cz6AGWHeKwMma50XfssM=
Subject key identifier:   C0:B6:54:68:E4:20:C5:7E:52:A1:0E:8B:29:94:CA:41:CE:76:37:53
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       02
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/35E0C666207711ECA71BBD26D8A014CE.roa
Signing time:             Tue 28 Sep 2021 16:14:52 +0000
ROA not before:           Tue 28 Sep 2021 16:14:47 +0000
ROA not after:            Sun 28 Sep 2031 16:14:47 +0000
asID:                     328317
IP address blocks:        102.219.12.0/22 maxlen: 24
                          2c0f:1900::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Sep 28 16:14:47 2021 GMT
            Not After : Sep 28 16:14:47 2031 GMT
        Subject: CN=61533f7c-6002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:ed:90:ce:26:97:8f:9a:ac:7a:cb:13:95:
                    03:04:4d:d4:a6:1e:78:5b:8d:3d:29:76:e2:08:33:
                    f6:aa:8d:3b:98:6e:ae:dc:e5:bb:0c:3f:d2:19:d4:
                    45:e3:4f:19:32:53:35:61:73:4c:e7:a8:d0:c3:6c:
                    5a:a5:03:dc:7a:e1:bf:df:81:5b:56:ae:76:0e:96:
                    85:7a:55:21:6c:6c:19:6d:f2:1e:6d:73:b1:09:e4:
                    81:4e:f1:02:d1:92:56:60:b1:13:f4:e2:d4:e1:7a:
                    86:3a:3e:c9:81:70:d6:97:c2:73:b7:96:14:5a:a6:
                    00:f4:63:89:75:e1:5a:05:6d:27:c2:93:39:84:98:
                    f0:9e:57:89:5f:97:f9:ac:8b:04:47:1e:f4:c0:a1:
                    2d:ea:f3:04:80:a1:b4:35:a1:c6:44:85:db:01:e7:
                    fd:37:d7:25:2a:40:59:7a:53:2e:7d:91:ee:6c:79:
                    44:f3:4e:ae:63:a1:0b:4c:97:62:9c:5b:59:27:ad:
                    7e:aa:26:38:8b:f7:b8:63:86:96:e4:ea:2b:b2:b0:
                    48:c4:a9:29:2a:e1:d0:8c:51:3f:f1:b1:3e:4b:90:
                    4d:57:77:3a:79:7a:6a:84:b7:e6:3a:7a:d2:47:39:
                    7f:ca:6c:85:49:46:90:1f:2a:8d:fd:87:f3:37:a2:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B6:54:68:E4:20:C5:7E:52:A1:0E:8B:29:94:CA:41:CE:76:37:53
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/35E0C666207711ECA71BBD26D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.12.0/22
                IPv6:
                  2c0f:1900::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:97:be:a4:bc:86:6d:b1:4d:e3:43:46:53:73:43:b7:72:
         01:39:46:20:09:71:a0:ed:e1:0f:dc:08:a8:d3:11:6a:f5:29:
         ad:25:ca:36:71:78:01:9f:ef:27:00:2c:7d:06:a9:ce:73:40:
         a0:52:56:7a:b4:28:e2:a8:e2:83:db:0d:99:02:4e:0d:e2:60:
         0a:85:6b:37:9c:ee:d8:62:b0:7b:90:8d:be:0c:8c:4c:5b:63:
         6b:fb:d9:27:5c:ed:1d:ff:19:00:58:e3:27:e9:9f:48:52:27:
         7d:6b:bf:a8:61:73:e2:7c:19:e4:b3:14:15:77:c5:3a:d1:1d:
         7e:1d:93:d2:98:cc:2f:b3:8a:94:ca:38:5a:e5:5f:09:6d:0e:
         a0:70:87:46:b6:da:fe:fc:ad:7a:e7:f0:65:55:08:f9:06:b2:
         0b:c7:f4:51:99:c4:a3:73:c2:69:83:75:0e:71:7a:e5:68:a5:
         92:da:d1:45:80:43:b7:8c:0f:87:43:82:1d:8d:fe:76:b6:e2:
         e1:ab:00:39:1c:89:a3:e1:6d:e7:2f:bf:68:57:a5:c4:5c:b5:
         5e:47:ee:6c:23:68:a0:91:9c:45:e6:00:72:9f:61:7d:88:14:
         23:7f:6e:7c:28:07:3a:31:85:f3:77:8e:0a:87:84:28:20:3d:
         d0:12:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----