Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/596E22A62E5611EEAA1B9F514AD9E6FC.roa
File:                     596E22A62E5611EEAA1B9F514AD9E6FC.roa (raw, json)
Hash identifier:          FALunXmd4/FsEkLFF4fmp6yvby9LvK0ET4QnTI/XK3Q=
Subject key identifier:   12:3A:EA:E3:B7:73:6D:26:22:9D:EB:6A:76:3D:0B:9F:F9:D6:15:A2
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04CF
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/596E22A62E5611EEAA1B9F514AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 21:24:50 +0000
ROA not before:           Sat 29 Jul 2023 21:24:46 +0000
ROA not after:            Sat 30 Jul 2033 21:24:46 +0000
asID:                     37119
IP address blocks:        105.172.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 21:24:46 2023 GMT
            Not After : Jul 30 21:24:46 2033 GMT
        Subject: CN=64c583a2-f9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:f5:22:44:b0:69:9a:4b:68:61:a8:c1:12:
                    a2:93:5c:de:c8:d8:0d:ef:ec:84:d1:32:87:55:9a:
                    b8:0c:1e:1a:fc:74:6e:64:6a:d3:f9:1b:88:ac:4f:
                    a7:3f:80:62:3d:a5:6a:e7:55:ba:c4:56:d5:7f:e6:
                    fd:d2:48:d5:c1:95:b1:78:7b:ae:b7:90:bd:68:0a:
                    50:39:97:24:36:2e:1e:50:02:eb:00:03:ac:d6:4d:
                    9f:d5:2e:ce:4b:38:17:06:d0:c6:a7:b0:a2:3b:e5:
                    23:7c:ea:d9:ae:ff:d2:41:1b:73:b3:ff:7c:97:53:
                    0f:f6:4b:05:aa:30:f3:a0:48:9c:ad:69:e7:4a:ec:
                    ab:77:0e:f2:2d:70:b5:0e:11:25:89:8b:ce:2f:dd:
                    6b:00:e8:d8:ef:50:f1:55:fd:d5:cb:81:18:dd:e6:
                    b5:28:ff:ce:9c:bf:50:b9:d4:e6:24:a2:7d:8b:5f:
                    ff:3c:ea:60:54:5d:26:08:64:c7:9b:4e:8d:f2:84:
                    15:c5:24:10:35:47:a5:88:f8:ac:6b:26:13:11:cb:
                    cd:f2:b8:3e:65:65:c1:f1:f5:05:a1:f5:c6:2e:d9:
                    fe:3d:33:3c:f6:77:95:bb:10:23:97:5f:a4:bc:a6:
                    2f:ae:28:0e:2f:39:69:e2:79:ab:08:eb:e4:f7:c4:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:EA:E3:B7:73:6D:26:22:9D:EB:6A:76:3D:0B:9F:F9:D6:15:A2
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/596E22A62E5611EEAA1B9F514AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:5c:c4:6a:e6:5f:5a:b7:aa:5f:6d:e3:21:6b:d0:3a:90:f0:
         c4:cc:8b:20:1d:6b:a6:2a:f3:9a:71:0f:e3:05:1e:7e:0b:56:
         04:8f:eb:6c:1d:14:f4:ff:95:af:09:6e:26:6c:ce:27:33:e2:
         56:9a:00:44:e2:d1:f3:00:fe:e3:e5:f7:c8:db:dd:dd:ab:41:
         20:f0:ee:13:72:3e:9d:2b:d8:60:b2:52:3d:9f:9f:40:b8:e8:
         32:52:7b:ae:17:61:19:8c:33:f5:f7:51:76:54:c5:bb:8d:73:
         48:03:9a:f2:c8:5f:2a:79:d2:f5:cb:1a:01:6e:bb:42:cd:2e:
         e8:d6:1e:a2:2b:5b:05:84:e8:8c:89:a4:f5:09:72:c3:3e:17:
         db:10:f1:0c:e7:fc:98:02:2d:a9:cf:06:eb:b5:19:88:05:24:
         d5:6a:9b:cd:2d:66:41:44:76:b5:09:78:20:ae:ac:0d:19:33:
         a0:cb:de:02:c6:de:c8:f1:4d:e7:b1:de:62:f7:1c:58:21:be:
         b8:ea:5e:9f:54:e3:7d:85:b6:e5:73:e3:e0:49:d9:87:ff:2b:
         9d:97:f9:fa:be:9f:13:ad:5e:53:ec:d5:f3:58:8e:6c:05:d0:
         7d:07:9a:d1:59:30:be:26:b6:e2:a7:24:cf:8c:32:47:5b:64:
         ce:45:09:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----