Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/175E96FE2E5411EE8323394B4AD9E6FC.roa
File:                     175E96FE2E5411EE8323394B4AD9E6FC.roa (raw, json)
Hash identifier:          4BCYtmU5FfE2H+y6Dr9jJQDtA1X5guZ8a8aITxrj6es=
Subject key identifier:   AA:82:4F:90:79:3B:AD:B1:08:D4:2A:08:B1:AD:E9:95:07:4F:60:2B
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04CB
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/175E96FE2E5411EE8323394B4AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 21:08:40 +0000
ROA not before:           Sat 29 Jul 2023 21:08:36 +0000
ROA not after:            Sat 30 Jul 2033 21:08:36 +0000
asID:                     37119
IP address blocks:        105.172.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 21:08:36 2023 GMT
            Not After : Jul 30 21:08:36 2033 GMT
        Subject: CN=64c57fd8-4089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:26:70:ac:1c:e0:7b:c9:b0:b2:27:86:df:18:
                    aa:64:44:c6:25:8d:d2:33:05:3c:27:f7:a3:c6:2a:
                    0b:c9:67:2c:d3:84:1e:28:40:52:05:eb:9b:13:07:
                    49:a1:87:86:cf:0e:22:1d:e9:40:36:d7:d5:83:b6:
                    9c:2e:09:10:d8:7d:63:ba:f3:c4:79:3c:72:c1:bc:
                    c2:91:72:58:c7:27:5c:2a:39:6d:cc:f7:35:76:fa:
                    e2:95:d6:b7:76:ce:79:33:b5:30:4e:d2:e6:43:48:
                    66:d2:f0:c0:87:1a:ba:44:52:82:1b:eb:f1:a8:e5:
                    79:d8:be:d3:67:10:31:f6:05:c6:27:1c:e1:89:5d:
                    50:2a:13:7c:b9:33:ac:4b:75:9c:fd:95:91:e3:62:
                    75:64:9b:c3:98:6b:d1:e9:7b:c6:2a:d5:ba:7c:e4:
                    df:08:51:6c:63:1b:bc:ae:33:28:bf:08:3d:62:c2:
                    25:a4:d5:8e:48:fe:d2:44:11:73:77:2f:92:7d:0a:
                    8c:96:d8:98:b1:c7:61:20:95:50:a9:60:d6:3e:5b:
                    4c:7f:62:ec:af:f2:d5:ca:d6:2a:8d:32:90:6a:2f:
                    dc:83:97:e6:d4:e2:72:01:0b:61:d7:6b:68:de:53:
                    d1:a5:71:6b:de:67:94:e7:49:dd:84:8e:80:ec:19:
                    32:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:4F:90:79:3B:AD:B1:08:D4:2A:08:B1:AD:E9:95:07:4F:60:2B
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/175E96FE2E5411EE8323394B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cb:43:c7:2c:8c:cc:8c:1e:e5:91:7d:c0:d7:15:02:b8:23:d9:
         e1:02:73:80:1b:ff:9c:c8:fe:5f:84:0e:b6:4e:bd:59:f2:84:
         f0:6e:6c:54:c3:52:ae:86:8e:ef:38:09:4b:12:89:91:f5:eb:
         6d:34:a0:40:01:ff:05:cf:10:d5:0b:1e:40:b2:42:eb:71:1c:
         80:08:0e:23:ea:be:18:f8:e6:5c:0f:ac:0f:fa:37:29:a7:13:
         2c:18:1f:a0:06:1a:0f:f0:ee:19:0e:cf:9e:4b:8b:e1:40:d9:
         d0:4c:05:d7:85:95:23:f9:e3:55:4c:92:15:fe:13:48:69:4c:
         10:8e:94:34:db:3c:5b:c4:4c:79:9e:ff:31:89:92:d9:27:c3:
         e1:fd:b8:78:a7:49:80:39:59:ef:7a:58:24:c2:bc:ad:b8:e0:
         1c:6c:3d:d7:05:de:d6:ee:2c:38:ee:81:d3:2e:c7:d8:3a:cf:
         e6:e6:68:4f:a0:d6:76:44:e7:4b:00:3a:f8:ab:07:82:58:6f:
         af:13:50:5d:b9:e6:1f:9b:f8:37:94:19:d6:75:5f:19:f2:3f:
         09:56:64:7f:7c:3e:37:70:04:ef:31:51:d9:50:ba:0e:04:3f:
         d7:47:07:50:c9:2f:21:b5:cf:8f:a1:07:7b:a9:a2:95:43:3b:
         cd:2f:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----