Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5FEDAFFE2F0811EE99DA876F4AD9E6FC.roa
File:                     5FEDAFFE2F0811EE99DA876F4AD9E6FC.roa (raw, json)
Hash identifier:          q16r7anl0HOkyaSNjf8528YLIkpVj/VpIKS8aFUWNHQ=
Subject key identifier:   ED:4C:BB:43:0D:B8:39:D7:CB:89:B5:9E:16:BF:51:26:C1:DF:78:D6
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04FE
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5FEDAFFE2F0811EE99DA876F4AD9E6FC.roa
Signing time:             Sun 30 Jul 2023 18:39:11 +0000
ROA not before:           Sun 30 Jul 2023 18:39:07 +0000
ROA not after:            Sat 30 Jul 2033 18:39:07 +0000
asID:                     37119
IP address blocks:        105.173.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 30 18:39:07 2023 GMT
            Not After : Jul 30 18:39:07 2033 GMT
        Subject: CN=64c6ae4f-84a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:d3:ee:77:78:77:da:92:db:d6:60:65:9b:
                    4d:ba:aa:61:ae:d4:e0:1f:59:83:1b:08:bf:12:8f:
                    d7:a6:8c:67:16:48:aa:b9:61:f4:67:c2:c7:b5:57:
                    2c:03:f2:a6:17:84:37:67:6b:7e:d3:55:73:4f:ea:
                    8b:c9:52:f7:aa:c2:09:08:1f:b3:06:f0:81:f9:ba:
                    73:f1:fc:7b:3b:b0:fd:af:4e:8f:55:a3:fe:90:fb:
                    c5:74:f1:f3:74:8f:29:29:65:ef:94:57:ec:f0:46:
                    7b:80:8f:f1:52:31:a8:b7:31:b1:d3:76:47:91:ed:
                    0e:03:cc:e1:93:35:20:74:a4:da:f6:f8:61:45:d0:
                    6f:9a:06:14:2a:c0:51:82:7e:3c:e4:76:de:6e:96:
                    c2:cd:4b:31:6d:f5:19:44:15:53:e6:26:97:c3:b0:
                    6c:8a:b9:98:ea:95:36:d6:1c:b3:37:45:49:69:e0:
                    4a:4a:6b:fd:d0:eb:75:72:cf:07:96:01:6b:0a:0d:
                    4c:55:67:93:7f:0c:45:08:61:cb:a5:7f:f5:fd:f7:
                    99:61:63:2a:b3:6e:ec:3f:b4:b9:18:36:a9:e3:71:
                    f3:c0:e7:18:87:78:b5:b4:ab:7b:ea:61:04:28:8f:
                    28:db:80:e6:0c:86:fc:ea:97:a5:67:cc:cc:d2:eb:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:BB:43:0D:B8:39:D7:CB:89:B5:9E:16:BF:51:26:C1:DF:78:D6
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5FEDAFFE2F0811EE99DA876F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:fd:5e:86:45:ac:02:36:6f:65:e5:d1:6f:e2:d8:75:c4:
         78:f1:b2:8e:14:2a:13:a5:1d:49:84:7f:23:8b:1f:a8:2b:6c:
         a2:67:8c:67:df:b1:a0:75:d1:55:22:c3:5a:37:12:76:6a:55:
         66:8b:fb:2f:0d:4f:ea:5c:da:d2:18:56:73:a7:e9:71:af:13:
         aa:20:a7:3c:dc:b7:94:18:c7:00:50:6f:49:cd:59:e5:9f:f9:
         5c:37:19:16:0f:16:eb:a5:7c:3e:99:71:9a:4d:5c:27:17:53:
         9d:40:7b:61:4b:56:43:02:4a:50:24:23:73:d5:d3:ee:38:af:
         f1:bb:a3:57:88:89:49:f6:9f:6c:c5:79:7c:e4:6e:7b:3a:2e:
         79:ab:56:7c:4c:b0:e6:f0:26:01:29:63:84:00:0b:59:69:4b:
         aa:65:83:1c:30:d0:03:c5:d2:e3:81:36:c2:14:68:96:66:81:
         d8:f8:63:40:ae:9d:66:e6:cf:36:e3:ee:b9:b7:43:23:ae:86:
         b2:09:ab:f6:14:bb:7d:0a:f6:8f:db:b0:de:8e:4b:b6:95:82:
         38:6e:a2:3c:f7:e8:cf:86:d5:12:43:82:44:a1:2b:be:bb:aa:
         28:1f:b0:27:2f:6a:80:12:da:4a:c1:a9:fc:dc:d1:10:79:fc:
         47:0f:6c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----