Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/AC6C1AF87C2011EF8072375D762E951A.roa
File:                     AC6C1AF87C2011EF8072375D762E951A.roa (raw, json)
Hash identifier:          3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=
Subject key identifier:   A4:BA:14:6D:52:DD:EE:BF:C7:3F:E6:2E:23:75:AF:E3:47:93:21:60
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       0241
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/AC6C1AF87C2011EF8072375D762E951A.roa
Signing time:             Thu 26 Sep 2024 16:02:04 +0000
ROA not before:           Thu 26 Sep 2024 16:02:01 +0000
ROA not after:            Tue 26 Sep 2034 16:02:01 +0000
asID:                     37105
IP address blocks:        196.2.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Sep 26 16:02:01 2024 GMT
            Not After : Sep 26 16:02:01 2034 GMT
        Subject: CN=66f5857c-ba1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:4c:70:97:a6:b7:8c:d5:bc:9b:12:6c:ae:
                    74:bc:4b:8d:d0:56:a8:ed:1a:29:85:48:24:3a:3a:
                    25:af:e0:e3:ea:b5:94:0b:c5:61:5f:46:fe:5f:ed:
                    03:00:c3:93:9d:25:83:a8:b2:76:ec:e4:5a:fa:60:
                    7b:d0:35:cf:7d:59:85:83:fe:53:9b:f3:e5:f1:f7:
                    68:ac:55:60:35:92:67:9c:97:df:89:68:80:67:e2:
                    19:64:96:f4:24:4c:53:41:d0:6f:c1:77:a1:54:25:
                    8c:61:70:50:a0:b8:f1:92:a9:10:ef:e7:79:15:cb:
                    6b:03:c1:f8:42:0e:4b:37:9d:5e:10:99:0a:ee:45:
                    ed:d6:5f:73:00:88:c5:f1:38:6f:e5:08:50:e0:f9:
                    e2:05:82:99:a5:b5:ed:57:f1:c8:b2:4e:85:08:4f:
                    b0:10:61:c9:62:3a:11:61:ad:5d:e6:4e:a4:85:9c:
                    fc:00:9e:5f:f1:68:ea:91:4d:0f:57:d6:f1:d7:a5:
                    79:92:ca:68:43:d9:bd:b5:d9:28:1c:4d:e6:7f:3f:
                    39:56:7b:a5:d6:68:65:18:33:f4:a3:2e:80:41:82:
                    12:51:db:eb:87:71:d1:7e:94:0b:42:68:32:7f:dd:
                    8b:89:e5:22:84:48:1f:dd:e6:0e:c9:8f:7d:9a:87:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BA:14:6D:52:DD:EE:BF:C7:3F:E6:2E:23:75:AF:E3:47:93:21:60
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/AC6C1AF87C2011EF8072375D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.2.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:93:bd:76:c3:2c:75:b4:97:e2:0f:50:05:9e:a8:1a:53:cf:
         58:90:ed:c4:71:e6:6f:a5:b6:29:8d:54:31:99:f3:a4:1b:17:
         19:01:8c:96:f7:98:c4:2e:28:fb:e3:98:fd:fc:39:eb:13:58:
         04:8f:bf:23:ee:ad:5a:9c:50:6d:0e:26:0c:0b:c5:1b:3f:f0:
         4a:5e:78:36:a8:ee:0c:1f:1d:2e:d8:60:b3:3a:4b:64:f9:78:
         ce:16:a5:08:e5:24:53:b0:06:06:c2:7c:87:a4:ae:30:14:b4:
         12:34:bc:9e:68:91:3e:4f:8c:37:00:9f:93:13:4d:bd:f2:6f:
         d9:d6:3e:21:e2:af:fa:af:98:5d:21:ed:cd:19:02:4d:f6:80:
         f9:7b:15:10:10:06:2e:3e:0c:9c:b7:0f:2c:84:61:45:ba:ac:
         11:bc:4f:a4:06:a9:e1:de:14:74:71:f2:48:90:30:07:19:0b:
         38:68:09:ce:03:64:10:5f:b8:12:38:dc:b9:28:d3:35:16:89:
         b0:41:ee:22:13:a7:b6:e3:c9:15:ce:5f:57:7e:4c:c0:86:e4:
         ef:da:a8:67:ed:df:1f:d7:85:58:e9:70:f0:15:69:f1:b3:43:
         b1:2a:8e:e8:fa:2a:20:92:ad:ce:62:b4:52:65:14:69:86:5f:
         57:2b:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----