Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/392271285A4F11ECB044D39B5A40D577.roa
File:                     392271285A4F11ECB044D39B5A40D577.roa (raw, json)
Hash identifier:          9Lc819kW1mF2SlhKYqWGTsWhVlyucMzY3bxqj7ucMHQ=
Subject key identifier:   10:F8:97:34:9A:3D:DB:BA:38:A4:C6:71:BB:7B:88:BD:C9:BB:97:D9
Certificate issuer:       /CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Certificate serial:       14
Authority key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/392271285A4F11ECB044D39B5A40D577.roa
Signing time:             Sat 11 Dec 2021 06:54:45 +0000
ROA not before:           Sat 11 Dec 2021 06:54:40 +0000
ROA not after:            Thu 31 Dec 2048 06:54:40 +0000
asID:                     328250
IP address blocks:        102.220.40.0/22 maxlen: 24
                          2c0f:f8f8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
        Validity
            Not Before: Dec 11 06:54:40 2021 GMT
            Not After : Dec 31 06:54:40 2048 GMT
        Subject: CN=61b44b35-5d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:e9:5d:a4:91:2a:eb:53:04:0e:2d:a0:ef:
                    4f:0c:0d:b3:c1:5d:5f:ad:f3:ac:cd:97:b8:53:61:
                    d1:ff:c7:63:82:21:4b:20:31:14:61:b0:76:57:ec:
                    bd:3b:ea:ea:23:cc:21:f1:37:79:26:27:02:21:fd:
                    82:4f:a1:f4:a4:ff:49:eb:ea:2d:33:9c:60:25:ca:
                    a5:a1:71:11:94:b8:52:b8:57:4d:21:f7:32:01:3e:
                    1e:22:c2:26:8d:05:6c:cf:16:a3:6a:8d:50:2b:f6:
                    01:5e:94:36:b9:7d:be:44:43:b2:79:8a:3c:90:a7:
                    9f:99:0c:9a:a2:b2:1a:b0:c1:bc:44:21:a6:cd:c2:
                    8b:34:ec:36:b7:bc:c5:1b:98:e9:b2:9a:ab:1f:7c:
                    ba:9b:3d:70:5f:d5:40:36:2a:f7:76:88:41:2c:29:
                    c4:0b:95:3c:65:37:a7:4f:87:ca:50:55:66:9a:da:
                    13:86:a6:c2:92:f2:cb:8c:c1:77:1d:60:1f:d4:35:
                    c7:c7:0d:b1:fe:7b:de:c2:0a:fd:8c:ed:db:62:f2:
                    0d:f5:25:fa:35:4b:d7:1b:62:81:42:94:1f:ec:33:
                    b2:f1:cb:3a:51:c9:01:0b:b6:15:3d:3c:8e:74:e1:
                    cd:10:07:47:d7:6a:3e:a2:47:30:7a:1e:c8:3f:d2:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F8:97:34:9A:3D:DB:BA:38:A4:C6:71:BB:7B:88:BD:C9:BB:97:D9
            X509v3 Authority Key Identifier:
                keyid:87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/392271285A4F11ECB044D39B5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.40.0/22
                IPv6:
                  2c0f:f8f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:81:bd:59:bc:81:70:cc:47:10:c9:f3:49:21:f5:b8:a0:
         d7:dd:fb:0d:a8:65:77:27:b2:46:55:1f:df:33:e0:83:11:6c:
         6f:81:6a:e4:e4:bf:ee:24:02:da:4d:5f:83:c3:e3:93:70:40:
         68:33:52:1d:35:6b:24:b1:ec:49:68:8a:e8:a9:49:11:d2:71:
         ae:be:08:69:ed:6e:0c:41:77:f9:51:b1:3a:dc:53:dc:50:a3:
         e4:94:ad:c7:7d:89:89:94:30:c6:b2:25:0a:88:3e:90:83:61:
         a1:45:32:7d:d3:1e:75:b5:cc:92:8c:e7:29:4c:91:16:fc:87:
         d9:ed:74:99:1f:a9:19:15:24:35:f8:50:9a:70:71:bf:72:0d:
         f4:08:99:0a:ba:2d:03:40:70:c4:af:60:88:15:24:df:b3:83:
         a8:72:ed:f8:80:f5:48:09:62:5e:1a:64:13:42:aa:c5:ea:f0:
         d7:ff:74:33:07:94:88:b9:71:3d:f4:23:fe:88:70:ea:7a:fe:
         c6:43:fc:e4:4f:f9:83:67:56:db:7d:29:30:ae:ad:cf:4f:9b:
         cf:4b:ee:5f:7a:80:7f:95:69:c0:a2:ef:58:21:3b:8c:9d:de:
         da:d9:81:0e:eb:f7:36:82:82:9f:be:e5:9a:ef:b4:e8:d3:b5:
         48:67:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----