Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/97E5095A63C011EF90B900AC762E951A.roa
File:                     97E5095A63C011EF90B900AC762E951A.roa (raw, json)
Hash identifier:          CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=
Subject key identifier:   93:23:BE:F0:79:9E:37:E9:1F:70:6A:6B:BF:2D:79:BD:BD:3E:7C:7E
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       04B8
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/97E5095A63C011EF90B900AC762E951A.roa
Signing time:             Mon 26 Aug 2024 15:33:50 +0000
ROA not before:           Mon 26 Aug 2024 15:33:47 +0000
ROA not after:            Thu 31 Aug 2028 15:33:47 +0000
asID:                     328840
IP address blocks:        2c0f:4e00:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Aug 26 15:33:47 2024 GMT
            Not After : Aug 31 15:33:47 2028 GMT
        Subject: CN=66cca05e-de9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:ef:9d:a7:e9:36:57:34:b9:d4:fc:07:9c:
                    9b:c3:9d:44:33:8f:d6:3b:3f:2e:15:96:96:36:ab:
                    4f:26:09:be:37:01:d5:ee:7a:84:b0:d1:17:66:be:
                    39:56:24:32:0c:b1:aa:09:21:00:95:b1:d8:75:e6:
                    29:d7:b6:b7:49:26:34:10:59:87:9d:28:bf:ae:ae:
                    0d:7e:37:ee:48:fc:7f:83:39:50:bf:bd:e5:2c:99:
                    e7:0e:b6:07:f6:5c:b4:b8:b1:81:c4:9f:f9:06:5e:
                    ac:0d:7b:ed:92:c3:66:3d:b0:12:35:0c:1c:72:d8:
                    fb:9f:2c:b8:78:49:1b:aa:22:9f:bc:c6:38:5d:1e:
                    41:f3:d5:c5:85:89:91:f8:8c:6a:f7:ee:d4:47:09:
                    4f:ab:23:ae:69:84:7a:1a:d7:a6:fd:8b:0a:03:82:
                    76:f9:f8:be:08:b5:6c:25:d7:06:5d:99:dc:9f:3a:
                    2d:da:7b:18:df:f0:28:91:98:78:ad:46:d6:6c:a2:
                    d9:15:b1:be:fe:c9:d6:3d:7c:b8:91:72:2c:99:a1:
                    41:bf:78:04:b0:da:fe:d0:19:73:2a:4c:42:52:a8:
                    43:9d:62:72:73:ae:8f:0e:3a:ed:38:27:cb:16:0a:
                    19:68:20:3c:84:ac:11:f3:aa:8d:7f:fd:ca:f9:b9:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:23:BE:F0:79:9E:37:E9:1F:70:6A:6B:BF:2D:79:BD:BD:3E:7C:7E
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/97E5095A63C011EF90B900AC762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4e00:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         ba:e0:db:98:62:15:50:66:30:db:f7:aa:c9:a5:90:aa:09:c6:
         74:f9:8f:87:f0:ce:99:9d:f8:20:65:18:bc:94:0e:f0:13:d4:
         65:e5:41:4f:89:0d:4b:fb:dd:41:07:81:9f:90:9e:c6:36:75:
         ec:2c:2d:8e:5f:7a:51:4e:f0:5e:b7:f6:8b:f8:24:2b:1e:3e:
         fb:a1:a2:2a:c2:ed:87:72:58:85:5e:85:be:d1:06:1e:cf:1b:
         0b:5f:25:dd:74:a1:26:45:74:c2:0b:93:30:e6:e0:9a:d7:d6:
         55:45:35:6a:f2:fe:76:81:bf:6f:1d:95:2d:7f:28:5a:5f:6e:
         6d:6e:f4:47:6b:7c:ba:61:20:e6:7a:64:d1:a1:9f:cc:ad:c9:
         46:e2:b7:f5:f3:57:39:8b:7b:ef:01:07:55:48:f2:b2:28:95:
         82:e5:b7:0f:2e:ec:3e:1e:d5:f7:f8:d7:a8:eb:c4:f7:44:99:
         3c:b1:34:55:8f:44:2a:36:46:b4:66:b9:48:71:17:a5:ff:39:
         56:59:41:f5:82:6c:22:51:9f:7c:11:0f:42:00:b6:51:d3:2a:
         f8:26:c4:41:72:2b:d3:47:27:34:0c:79:fd:0f:c2:c8:07:17:
         81:25:7f:10:64:aa:52:a3:fd:a9:ad:27:c3:c0:76:3f:90:07:
         41:85:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----