Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/B6F83C207D4111ED99A5A8DEF1222468.roa
File:                     B6F83C207D4111ED99A5A8DEF1222468.roa (raw, json)
Hash identifier:          Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=
Subject key identifier:   C4:18:D7:EE:F3:D0:B6:3D:F8:F0:0C:8A:B1:A8:AE:E8:E4:C2:41:C1
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       06
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/B6F83C207D4111ED99A5A8DEF1222468.roa
Signing time:             Fri 16 Dec 2022 13:01:12 +0000
ROA not before:           Fri 16 Dec 2022 13:01:08 +0000
ROA not after:            Tue 31 Dec 2030 13:01:08 +0000
asID:                     329174
IP address blocks:        102.213.241.0/24 maxlen: 24
                          2c0f:2d80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Jun 2024 00:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: Dec 16 13:01:08 2022 GMT
            Not After : Dec 31 13:01:08 2030 GMT
        Subject: CN=639c6c17-c787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:22:a2:ef:64:85:c5:50:9e:3b:7e:bd:fc:
                    5e:6e:1a:c5:3c:8f:f4:e2:71:5b:a3:77:75:2a:49:
                    0c:6f:83:99:cc:32:24:a8:b5:70:cd:fc:01:55:67:
                    8a:26:3b:4b:39:a5:13:9a:b8:d1:0b:54:b5:61:35:
                    78:85:53:fa:4b:fe:85:11:c5:48:53:f8:7d:0f:bc:
                    78:6e:82:46:76:60:80:60:4f:f6:17:14:dc:49:3d:
                    9b:34:88:ac:a2:0c:55:8c:37:c8:5f:34:e7:a7:96:
                    84:5b:e8:87:a8:91:3e:25:be:73:4b:4d:51:a3:91:
                    62:9e:6e:a8:31:40:35:02:10:37:2f:1a:1e:26:4b:
                    08:00:1a:f1:ef:a7:d6:3f:a5:0c:fe:51:9c:c6:24:
                    4c:9f:13:07:7f:25:88:fa:a6:d7:97:75:ca:b9:d4:
                    b6:72:df:ac:45:c0:41:ea:f5:89:c6:c2:9c:3d:9a:
                    be:f8:c1:0e:ae:11:58:6e:c2:38:3e:b8:e3:5f:6f:
                    d3:98:a6:ad:9b:13:45:c3:55:2c:7f:f4:da:df:70:
                    c0:d7:b8:43:06:99:01:5b:55:06:b6:dd:b1:eb:80:
                    2e:28:62:c6:c2:fd:cf:34:ad:be:72:0b:74:c2:80:
                    3e:92:3f:e0:9a:25:34:41:b6:4a:6b:92:97:9b:b9:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:18:D7:EE:F3:D0:B6:3D:F8:F0:0C:8A:B1:A8:AE:E8:E4:C2:41:C1
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/B6F83C207D4111ED99A5A8DEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.241.0/24
                IPv6:
                  2c0f:2d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:f1:40:ff:33:ae:f0:61:ea:c1:67:c6:95:18:ad:ea:c1:
         3f:84:6e:4e:67:95:aa:52:63:7c:37:6e:70:f3:8a:cd:60:dd:
         d3:d2:bc:13:27:1f:a0:bc:8f:2e:b4:50:20:e6:cf:f4:f0:9f:
         dd:bc:cc:d1:e6:73:5a:15:00:b7:35:f9:f9:c8:db:d0:5f:94:
         e9:77:27:62:e5:5f:ba:96:54:9f:30:96:f9:d6:c1:f8:a4:5c:
         2f:90:d1:7b:4c:a2:47:fa:25:2b:08:94:ba:01:1a:5b:41:71:
         45:3d:5d:b2:ae:2a:24:fc:e2:89:91:57:47:df:8a:51:ca:79:
         62:93:bb:d1:62:b5:28:58:79:b6:7b:5b:a2:9f:ba:3e:1b:31:
         a3:43:a9:90:b7:1c:86:fb:7f:4a:c1:d3:fc:a6:95:0f:09:60:
         c8:09:fe:db:c4:54:d3:05:9a:20:84:91:61:50:b7:03:ea:40:
         08:3a:43:23:bb:80:09:a4:cf:34:1c:e4:8b:89:98:b9:8e:43:
         88:55:58:10:e3:ad:8d:53:c5:9b:1c:50:cd:cd:fa:6d:92:9a:
         5a:96:b9:29:f0:d9:75:91:4d:e7:58:0b:f2:4d:82:66:9f:be:
         92:ca:9b:b4:51:f1:b2:3c:e8:38:59:1a:fe:81:c0:89:b6:be:
         46:bf:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----