Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8C7E082C2E5C11EE8EBAEF634AD9E6FC.roa
File:                     8C7E082C2E5C11EE8EBAEF634AD9E6FC.roa (raw, json)
Hash identifier:          e9aX5KXQbrZZ4mMhvyAhUb3elRs5jIjDA47zSjJmrDM=
Subject key identifier:   F0:9C:E7:59:37:8A:5A:EC:9C:0D:42:87:3C:FF:E6:DB:6C:CB:FF:98
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04EF
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8C7E082C2E5C11EE8EBAEF634AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 22:09:12 +0000
ROA not before:           Sat 29 Jul 2023 22:09:09 +0000
ROA not after:            Sat 30 Jul 2033 22:09:09 +0000
asID:                     37119
IP address blocks:        105.175.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 22:09:09 2023 GMT
            Not After : Jul 30 22:09:09 2033 GMT
        Subject: CN=64c58e08-4bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:41:21:12:02:fa:6b:20:39:d0:00:42:c8:
                    52:a2:91:03:78:f1:79:5a:13:99:61:33:2a:67:80:
                    cd:cd:ea:0f:fe:6e:cc:23:da:f7:90:43:a7:2f:66:
                    6d:c1:c8:90:6c:5c:2d:09:a9:f4:14:31:fe:e6:dc:
                    0d:07:24:d4:bb:59:f1:95:6d:51:eb:fa:c9:78:39:
                    79:16:8e:6f:ee:f9:e8:d4:4e:e4:47:e1:8d:b1:7b:
                    87:ee:af:0c:3a:a4:85:4c:df:3b:9a:b7:04:ab:a4:
                    a3:e2:6b:28:6c:97:91:18:b1:1a:53:09:82:5e:aa:
                    89:78:ec:6a:d1:96:b5:95:ed:78:4d:ee:f4:8b:29:
                    17:5d:6d:eb:68:1b:9f:15:db:e6:26:02:82:2a:71:
                    49:26:7f:c3:40:23:b7:da:83:1f:f9:c5:c8:6c:43:
                    34:78:ea:78:21:d2:5f:20:b9:c9:b6:b7:cf:5c:da:
                    f2:d9:45:fb:09:4c:c2:7a:26:23:09:59:26:4e:de:
                    91:9a:e7:28:6d:55:63:e7:49:7e:ef:37:b8:7c:9c:
                    c2:ea:5f:72:50:fa:61:41:87:b3:bf:45:b3:5c:51:
                    1c:4f:dd:86:ac:42:ea:89:12:37:35:9b:57:18:6e:
                    b9:95:cb:54:5b:7c:26:75:79:e8:a0:f7:00:46:84:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:E7:59:37:8A:5A:EC:9C:0D:42:87:3C:FF:E6:DB:6C:CB:FF:98
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8C7E082C2E5C11EE8EBAEF634AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.175.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:81:2b:ba:1a:f4:1e:e8:63:72:bc:69:7e:b0:e9:81:a2:
         95:6f:03:82:fb:b5:48:23:3d:91:a5:dd:79:04:73:21:0d:e7:
         cb:91:82:79:84:89:38:50:e2:5f:9d:bb:80:94:50:b3:07:f7:
         23:5a:1a:e4:9d:73:a6:18:45:62:11:1c:47:3d:5a:39:38:51:
         dc:0d:7e:28:3a:65:eb:cd:fa:b8:34:fa:cb:36:c0:b6:7d:0e:
         01:8a:fc:3d:e0:17:8f:20:dd:9e:3d:7a:e8:2a:cc:f4:ab:c2:
         f7:93:24:85:c6:4b:64:5f:20:69:b4:f8:a0:5a:d5:09:e8:5d:
         db:bf:97:ed:5f:65:c8:46:29:9e:1d:cd:59:cc:85:57:1e:42:
         1c:90:43:7a:b4:2f:56:1d:e5:84:af:f0:4f:8d:cc:76:84:7a:
         22:26:97:23:e0:36:eb:55:21:dd:f6:00:b1:4a:63:59:c1:be:
         74:59:f0:db:71:25:63:9b:b3:7a:d6:b4:6b:4e:90:67:b1:8b:
         ad:52:09:61:ea:73:d4:ab:1b:5b:b0:73:cb:72:3b:6c:1c:fd:
         c5:0f:59:11:67:a1:86:88:ac:7e:30:5c:3d:a4:82:d2:3d:51:
         7c:98:b4:3a:8c:0c:d1:e8:25:8b:69:be:81:4f:eb:59:d9:85:
         13:8a:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----