Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/447A0E362F0B11EE9B4BE6774AD9E6FC.roa
File:                     447A0E362F0B11EE9B4BE6774AD9E6FC.roa (raw, json)
Hash identifier:          Y2jWAO+MSy9hUVkyC5/LL1UImZWzuhUZ4bbHfL5aZos=
Subject key identifier:   64:27:54:CF:BC:22:FD:B2:0E:71:91:17:A8:66:B3:87:89:FC:3B:AE
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0510
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/447A0E362F0B11EE9B4BE6774AD9E6FC.roa
Signing time:             Sun 30 Jul 2023 18:59:54 +0000
ROA not before:           Sun 30 Jul 2023 18:59:50 +0000
ROA not after:            Sat 30 Jul 2033 18:59:50 +0000
asID:                     37119
IP address blocks:        105.171.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 30 18:59:50 2023 GMT
            Not After : Jul 30 18:59:50 2033 GMT
        Subject: CN=64c6b329-2c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:ed:c9:bd:70:2c:dd:67:21:4f:6b:f1:15:
                    bc:e3:96:0b:fb:e8:3a:55:ac:29:76:ec:20:7c:a9:
                    f2:f8:c8:fa:4c:7b:00:ab:b4:3a:a4:ed:b2:f9:24:
                    ca:33:29:12:70:b5:ac:9b:0e:3b:38:9c:e0:32:9d:
                    39:66:52:9d:8c:d9:d2:9a:56:b5:01:b7:ab:1d:d6:
                    23:e9:20:6e:93:8f:83:6a:80:6a:b0:46:c0:b3:03:
                    67:cd:8c:fa:9d:84:bd:c9:ac:54:99:92:95:60:28:
                    66:51:3e:13:5f:a1:28:58:7d:9d:d3:ba:03:7d:71:
                    14:65:15:e6:2e:98:3d:35:77:fb:66:69:d8:40:90:
                    de:d9:04:11:8c:1e:46:4c:24:63:cd:6d:ae:3e:3d:
                    eb:a8:cf:04:40:cb:c5:41:18:60:78:8f:92:19:18:
                    91:9a:fa:43:c2:86:bd:9d:58:a5:97:6b:96:57:44:
                    37:11:c9:34:31:20:59:be:fc:3f:d5:01:2c:43:6d:
                    d4:32:aa:6a:6b:f8:36:6f:a8:ec:80:be:20:58:7f:
                    f6:28:b1:cc:01:4e:42:96:da:2d:20:9d:19:41:a3:
                    52:1e:c1:46:35:44:46:c3:29:18:84:6f:06:7c:9f:
                    21:a4:d9:04:ac:64:9c:6d:26:69:d4:9d:30:2f:8c:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:27:54:CF:BC:22:FD:B2:0E:71:91:17:A8:66:B3:87:89:FC:3B:AE
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/447A0E362F0B11EE9B4BE6774AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.171.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cf:ad:c3:76:ee:04:87:16:20:9b:a0:94:17:fc:f4:46:b1:50:
         27:9c:0e:1c:cb:63:b2:a1:f1:7c:22:39:da:32:cf:f5:1b:a5:
         d0:65:c3:6b:05:7a:9a:0e:43:dd:04:b8:16:04:c2:42:ee:a5:
         62:22:36:49:27:56:00:51:13:41:9d:36:cc:04:aa:2c:de:98:
         bc:af:25:c4:c0:8e:c7:89:17:6d:d5:13:04:c9:12:70:e4:32:
         d7:9c:3a:40:ca:63:25:ca:fc:a4:b5:a7:83:59:10:da:90:d0:
         b3:02:3d:88:39:2f:fb:19:cc:68:7c:a1:8f:56:7f:71:f5:b9:
         55:bb:fb:bd:6a:41:45:d4:b6:b9:1a:43:25:3c:3f:f4:c2:86:
         3d:9e:2e:09:03:a1:10:f2:46:b3:9e:f7:79:25:8f:a4:83:27:
         10:e0:19:0d:6a:33:74:49:61:d6:2d:d9:e3:64:07:ad:d9:bf:
         e9:f0:73:77:9f:8b:3c:df:9e:48:c5:86:6c:cf:2c:fd:a4:a9:
         7e:a5:3d:13:ee:30:38:29:8d:c5:b3:e4:f8:ec:8e:c2:ff:3c:
         63:fb:e4:bb:26:b7:5f:4c:c0:00:5f:47:87:13:3a:2f:a7:35:
         72:b6:4c:61:79:71:41:5f:9f:73:ee:d5:87:3a:28:fb:3a:70:
         7a:32:b6:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMzA3MzAxODU5NTBaFw0zMzA3MzAxODU5NTBaMBgxFjAU
BgNVBAMTDTY0YzZiMzI5LTJjNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+D+3JvXAs3WchT2vxFbzjlgv76DpVrCl27CB8qfL4yPpMewCrtDqk7bL5
JMozKRJwtaybDjs4nOAynTlmUp2M2dKaVrUBt6sd1iPpIG6Tj4NqgGqwRsCzA2fN
jPqdhL3JrFSZkpVgKGZRPhNfoShYfZ3TugN9cRRlFeYumD01d/tmadhAkN7ZBBGM
HkZMJGPNba4+PeuozwRAy8VBGGB4j5IZGJGa+kPChr2dWKWXa5ZXRDcRyTQxIFm+
/D/VASxDbdQyqmpr+DZvqOyAviBYf/YoscwBTkKW2i0gnRlBo1IewUY1REbDKRiE
bwZ8nyGk2QSsZJxtJmnUnTAvjM4RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZCdU
z7wi/bIOcZEXqGazh4n8O64wHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzQ0N0EwRTM2MkYwQjExRUU5QjRCRTY3NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVpqwAwDQYJKoZIhvcNAQEL
BQADggEBAM+tw3buBIcWIJuglBf89EaxUCecDhzLY7Kh8XwiOdoyz/UbpdBlw2sF
epoOQ90EuBYEwkLupWIiNkknVgBRE0GdNswEqizemLyvJcTAjseJF23VEwTJEnDk
MtecOkDKYyXK/KS1p4NZENqQ0LMCPYg5L/sZzGh8oY9Wf3H1uVW7+71qQUXUtrka
QyU8P/TChj2eLgkDoRDyRrOe93klj6SDJxDgGQ1qM3RJYdYt2eNkB63Zv+nwc3ef
izzfnkjFhmzPLP2kqX6lPRPuMDgpjcWz5PjsjsL/PGP75Lsmt19MwABfR4cTOi+n
NXK2TGF5cUFfn3Pu1Yc6KPs6cHoyti0=
-----END CERTIFICATE-----