Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/7B865506F61811ECB0B004AFF1222468.roa
File:                     7B865506F61811ECB0B004AFF1222468.roa (raw, json)
Hash identifier:          PBFWsp55Byo8HpYgxxUbYwWMACFeIH4/XatY+LgkHMc=
Subject key identifier:   DB:57:53:C1:28:12:FC:29:B9:CB:BF:F9:5A:19:58:B2:F4:6B:6B:12
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       04
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/7B865506F61811ECB0B004AFF1222468.roa
Signing time:             Mon 27 Jun 2022 12:55:55 +0000
ROA not before:           Mon 27 Jun 2022 12:55:52 +0000
ROA not after:            Sun 27 Jun 2032 12:55:52 +0000
asID:                     329039
IP address blocks:        2c0f:4a80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Jun 27 12:55:52 2022 GMT
            Not After : Jun 27 12:55:52 2032 GMT
        Subject: CN=62b9a8db-65a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:67:1e:c6:68:49:6a:fe:9f:12:e0:d3:59:
                    6c:93:d8:62:b2:22:8a:ad:46:e2:e7:41:1c:a5:8f:
                    87:e5:cc:0a:7e:ff:a3:5e:c7:16:f8:76:5b:b5:d7:
                    19:3a:c5:91:2f:d1:89:25:67:87:5e:5e:11:2a:fb:
                    6f:2f:09:87:83:36:35:15:b8:72:1f:c7:5a:b1:2a:
                    45:68:96:43:5b:c9:eb:42:0d:5a:82:35:c2:dd:d1:
                    ed:1f:5a:25:48:cc:3f:e1:ad:e7:63:c5:92:72:ec:
                    fe:af:9a:fe:99:fa:bf:0c:96:bd:da:ed:9c:c8:13:
                    3c:96:c8:ad:19:47:51:79:5d:aa:3d:0f:42:80:79:
                    5f:86:b9:0c:85:89:a5:34:de:53:11:c5:5a:20:fe:
                    cf:4f:10:a9:d5:d0:72:14:0c:f7:47:a6:71:a9:5d:
                    0e:83:6e:90:30:5d:36:69:40:11:4d:75:c7:2d:92:
                    72:b2:21:3f:c0:3b:a6:ad:ff:67:74:29:de:77:c3:
                    a4:43:29:61:29:9d:78:3a:0e:b3:84:0e:ad:3b:bd:
                    20:c2:e1:19:0e:31:ed:0e:b4:6a:ab:99:5e:2d:71:
                    36:44:0b:43:cc:22:4e:04:e2:df:f9:91:66:e7:43:
                    a4:62:98:e8:ef:d8:a1:96:49:5c:6e:27:bb:3e:95:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:53:C1:28:12:FC:29:B9:CB:BF:F9:5A:19:58:B2:F4:6B:6B:12
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/7B865506F61811ECB0B004AFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:2c:fe:af:1a:89:af:93:69:93:18:d3:8f:5d:a1:88:57:
         c1:1e:a5:11:da:45:69:a6:cb:33:10:fa:44:1b:ec:95:69:43:
         01:29:00:83:99:e3:c7:a3:27:01:ce:c8:4d:b3:a5:f6:08:54:
         4f:b1:fa:46:c1:2f:0c:68:73:fe:a0:a7:29:6d:f0:3a:1a:b5:
         6e:74:e4:95:5e:80:38:e2:ea:65:e8:8b:d7:b8:74:2f:a9:86:
         00:64:4a:7d:88:d2:1f:13:23:c2:06:44:3b:8c:8a:58:30:98:
         ce:11:b4:1e:a4:30:10:fa:c4:f1:db:cc:67:5b:96:cc:f7:02:
         41:33:0b:49:45:9f:0b:06:d3:2e:f6:52:64:e3:ca:2f:c2:f9:
         42:20:26:98:64:cb:dc:b5:0c:cf:5f:cf:02:1c:89:be:0e:8a:
         db:72:43:d9:81:8a:24:90:61:4f:64:fd:7c:c5:e3:6c:df:18:
         85:13:b5:f8:01:c0:ec:c1:9f:b7:c2:c3:cd:7d:58:9c:6b:70:
         4f:84:b1:0a:9d:db:c2:5a:7d:2f:6b:ff:6b:71:d8:2a:55:bf:
         54:69:f4:62:82:de:de:cb:ea:cf:ad:59:82:e0:dd:48:1b:5a:
         d5:49:19:2f:e5:99:97:ae:ce:4e:8f:fe:f2:67:45:1b:c6:34:
         d4:39:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----