Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/A0B834A6403611EF97C8EE46762E951A.roa
File:                     A0B834A6403611EF97C8EE46762E951A.roa (raw, json)
Hash identifier:          kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=
Subject key identifier:   38:30:69:6B:28:5B:42:29:32:38:16:76:16:86:96:4A:9F:6D:55:84
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       0198
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/A0B834A6403611EF97C8EE46762E951A.roa
Signing time:             Fri 12 Jul 2024 10:08:04 +0000
ROA not before:           Fri 12 Jul 2024 10:07:54 +0000
ROA not after:            Fri 12 Jul 2030 10:07:54 +0000
asID:                     327786
IP address blocks:        2c0f:6740::/32 maxlen: 126

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Jul 12 10:07:54 2024 GMT
            Not After : Jul 12 10:07:54 2030 GMT
        Subject: CN=66910084-e19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:c3:6b:44:fd:c4:37:60:42:47:bb:65:ee:
                    e8:f9:00:96:47:04:1e:45:34:f5:e5:36:8d:e7:c5:
                    84:b7:f4:a0:bd:6b:56:97:41:33:4e:fb:e9:f3:a5:
                    c8:e4:8b:5c:3d:09:aa:26:b0:15:c6:37:54:f2:1c:
                    c7:96:a5:44:52:c7:9b:e4:34:aa:d7:5e:7e:85:c8:
                    5d:b0:16:2d:91:b1:80:3b:82:e4:c4:8c:fe:50:be:
                    6f:c6:0c:21:16:d4:b3:df:2c:1d:ca:12:c5:0a:4b:
                    ca:a2:26:68:70:3f:f7:c7:57:db:0f:d3:71:d4:48:
                    97:82:f8:dd:de:e2:49:79:dc:3c:f9:f3:50:9e:31:
                    10:86:8e:04:33:b1:bd:78:33:d8:c3:14:f3:0b:e1:
                    c4:51:75:c1:56:f3:1a:4f:4e:ad:99:51:10:12:e4:
                    fe:7f:01:f6:1b:d1:b3:8e:70:06:4e:b0:8f:d0:c6:
                    78:64:4e:7e:5f:31:51:a0:a4:a8:9d:4c:59:05:9a:
                    a1:47:21:6a:c0:8e:d8:bf:8a:81:5d:f8:30:47:35:
                    4b:e7:c8:95:6d:8b:6a:84:a1:9a:52:18:9a:c1:06:
                    d0:07:ac:89:72:f3:ed:d5:6e:fc:79:73:6d:ad:51:
                    24:d8:d2:a9:83:ce:fd:87:d2:01:61:b8:77:a6:b0:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:69:6B:28:5B:42:29:32:38:16:76:16:86:96:4A:9F:6D:55:84
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/A0B834A6403611EF97C8EE46762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6740::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:bd:e4:39:a9:94:37:f2:9c:37:4f:dd:79:fa:59:bf:2d:
         1a:84:1a:27:62:14:00:a3:f7:45:e4:32:c5:94:7a:ec:79:61:
         8c:57:a8:5b:cf:8b:1f:94:2a:36:98:64:b5:e3:18:b1:11:7f:
         f7:79:7f:a4:7e:cc:8f:e2:fb:a1:39:00:3e:5d:82:ed:a2:24:
         20:4b:37:ae:ed:6e:4a:4b:18:c9:de:2f:c7:13:1b:81:3e:e5:
         eb:d8:c5:8b:d3:6f:73:93:08:99:8c:5e:4f:4f:7b:c9:de:9d:
         2e:6a:50:2e:5b:2f:14:07:65:b6:89:d9:40:ed:eb:8f:6c:ce:
         5c:f8:f8:cd:2a:0d:38:08:99:e7:90:05:ae:d4:f1:03:1f:00:
         ae:66:54:c7:60:f9:18:15:63:de:e3:77:5f:39:bf:f8:d4:08:
         30:e8:92:5e:fc:03:46:fb:4e:e7:ff:2f:a5:a9:83:f8:29:47:
         b8:39:db:1d:53:b3:8f:9f:cb:67:9e:e9:cf:f1:9b:e2:7b:ca:
         06:fb:6b:4b:dd:07:8d:f8:fa:ed:6e:91:9b:86:06:e0:89:79:
         75:80:bd:2a:e9:6a:97:9f:e2:77:e8:32:73:97:8b:d7:bd:bb:
         59:03:ed:c0:5a:90:2f:1d:64:50:fe:d2:b3:79:2e:52:1d:5c:
         47:3b:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----