Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/03C4F3DE847211EFA62717BC762E951A.roa
File:                     03C4F3DE847211EFA62717BC762E951A.roa (raw, json)
Hash identifier:          DqzPe8h8VGO/3zmxtNnExqcXOxGel0PuulNOoKoDgfw=
Subject key identifier:   90:E7:91:85:2E:9C:D8:2D:C0:5E:85:CA:65:F9:8C:0E:A6:3F:AF:AE
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       081E
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/03C4F3DE847211EFA62717BC762E951A.roa
Signing time:             Mon 07 Oct 2024 06:04:30 +0000
ROA not before:           Mon 07 Oct 2024 06:04:26 +0000
ROA not after:            Sun 07 Oct 2029 06:04:26 +0000
asID:                     327804
IP address blocks:        2c0f:f050::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Oct  7 06:04:26 2024 GMT
            Not After : Oct  7 06:04:26 2029 GMT
        Subject: CN=670379ed-71b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:53:84:89:1f:28:30:93:ae:f4:77:7c:49:
                    ef:dd:6c:04:9d:fc:33:94:4b:ae:a7:ea:36:8c:7d:
                    88:3a:04:23:9a:68:da:e8:e2:77:f4:f3:fc:f2:49:
                    c3:a3:d4:ce:99:0f:8d:12:ec:12:4d:38:b0:56:7b:
                    d8:01:d8:68:d9:59:bb:9c:a0:50:9e:58:17:6a:a6:
                    c1:23:ac:0d:2b:02:17:a3:52:b9:d1:d4:ff:ad:5c:
                    e7:a2:f4:54:c2:2a:bd:45:9b:24:c8:c0:60:c8:5f:
                    46:b0:53:d2:48:7f:49:87:62:98:eb:61:94:51:8b:
                    93:1e:54:91:62:c2:21:d0:13:66:ac:0a:cd:cf:79:
                    8c:d1:70:4c:c1:dc:d6:65:0a:1f:44:10:21:98:70:
                    ca:68:01:2a:e0:11:1f:6d:7e:71:7b:c0:9a:74:41:
                    1c:44:73:3f:5a:62:8c:bc:a0:63:b4:98:29:28:ab:
                    8a:eb:af:29:37:a1:f1:94:3e:80:34:ba:41:50:e9:
                    de:cb:4f:bf:97:60:de:45:fc:f8:7b:20:02:30:ab:
                    82:38:0a:7d:d2:a9:83:d7:89:f4:c2:2d:db:46:d2:
                    be:37:30:09:93:bf:00:61:97:3f:ae:20:5d:6c:a0:
                    64:ff:b5:fe:59:04:22:9a:85:4c:09:77:ca:d5:ec:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E7:91:85:2E:9C:D8:2D:C0:5E:85:CA:65:F9:8C:0E:A6:3F:AF:AE
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/03C4F3DE847211EFA62717BC762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f050::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:c1:ec:ed:4f:fb:72:62:a3:65:47:83:32:09:9c:eb:98:c4:
         fa:4a:ce:c8:bf:47:b0:a7:35:85:24:58:19:4a:ed:1f:c4:66:
         ee:fb:40:ad:6d:87:22:91:bd:b8:64:bc:dd:36:bf:10:49:07:
         00:ed:97:55:80:4d:8e:cb:43:4d:41:08:f8:5a:9d:50:b0:bd:
         e6:72:1c:ef:23:7d:f7:e8:c2:f9:d8:e4:be:d8:cd:f9:7a:5d:
         aa:07:95:75:74:f2:3d:9f:7a:2d:53:8e:93:f3:34:d0:a6:d0:
         9c:18:cc:c5:f8:76:ff:b5:4a:b6:95:f4:5c:ef:25:a3:9a:95:
         bc:9b:55:ae:57:96:c5:23:78:49:21:ee:a0:55:0f:fd:fc:b7:
         29:74:21:6b:0c:45:00:7c:e2:ce:d7:a7:6f:fb:ea:54:2e:b1:
         e8:21:48:4f:7f:17:92:ba:17:9c:ea:89:f0:23:43:f3:28:67:
         16:fd:70:45:ed:20:23:4d:69:7c:4c:c3:f9:25:37:98:b9:26:
         3c:cf:b3:f0:0d:93:c9:76:c6:35:d9:88:c8:c3:e7:f2:ae:2b:
         02:02:61:bd:ad:0f:4b:bb:8b:37:d1:26:b9:d3:3b:07:a6:20:
         ef:6c:c8:f4:50:33:b5:06:fc:b8:d0:d0:43:c5:31:08:50:53:
         74:56:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----