Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9CD5B82A2E5011EEBC9805414AD9E6FC.roa
File:                     9CD5B82A2E5011EEBC9805414AD9E6FC.roa (raw, json)
Hash identifier:          9UGEb5zWn2bPtU+gsw4AuHpKJrHaA3rCD/fTGUQJEEE=
Subject key identifier:   E8:1B:21:03:FC:B0:A0:DF:88:16:EE:A5:0E:7B:7B:62:AD:20:2E:14
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04C1
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9CD5B82A2E5011EEBC9805414AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 20:43:46 +0000
ROA not before:           Sat 29 Jul 2023 20:43:42 +0000
ROA not after:            Sat 30 Jul 2033 20:43:42 +0000
asID:                     37119
IP address blocks:        105.168.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 20:43:42 2023 GMT
            Not After : Jul 30 20:43:42 2033 GMT
        Subject: CN=64c57a02-9607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:46:24:0f:20:47:0a:07:a0:6f:a4:7a:c2:
                    a2:d4:42:b9:9e:1f:29:be:68:f0:03:0b:77:c1:12:
                    72:64:14:74:6b:d7:29:df:61:9e:58:31:1b:a0:ea:
                    02:e1:ff:7f:c2:52:ef:a0:e3:d8:19:f1:47:6f:31:
                    4b:c9:5d:62:67:4c:49:02:8d:53:f9:80:6a:a5:5f:
                    62:70:05:4f:c3:b1:d4:3b:e3:35:15:97:ec:b3:5b:
                    8f:d2:0e:36:0d:1c:51:a5:82:c2:59:cd:17:35:b5:
                    c4:b6:7c:70:40:0d:e1:1f:84:30:e5:34:8d:28:80:
                    54:a0:cd:7f:31:2c:d7:f5:f4:26:63:a1:2f:48:52:
                    11:c6:c4:fc:72:ba:da:b7:bc:d3:b8:c8:58:26:63:
                    94:9d:ef:81:9c:e9:1a:47:1a:80:d7:82:37:f7:64:
                    bc:11:b8:3b:23:b7:aa:4e:44:f5:6b:41:0e:c8:cc:
                    49:f4:7c:dd:55:ed:88:68:ff:65:60:0e:94:33:49:
                    c0:d2:e9:60:ee:51:5c:53:89:f9:9e:d7:2e:04:e7:
                    e5:62:56:1a:9a:6d:0b:5b:f4:af:8a:9f:6a:62:4d:
                    03:61:c9:2b:6b:f1:c0:d4:16:e5:89:e5:f5:8f:2d:
                    67:70:0f:98:75:39:60:0b:f4:47:6f:9e:d8:fa:b8:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:21:03:FC:B0:A0:DF:88:16:EE:A5:0E:7B:7B:62:AD:20:2E:14
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9CD5B82A2E5011EEBC9805414AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.168.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:d8:7c:9d:2d:c8:b8:c3:00:50:40:9c:d5:9a:1e:28:34:
         e5:ff:39:2d:ac:6b:07:d3:1f:e2:83:fd:31:78:99:72:7a:5e:
         18:f7:be:09:dc:fd:23:25:25:ea:3b:72:27:12:32:ad:5e:01:
         b1:0c:30:1b:54:b8:38:4a:d9:54:99:2b:2c:95:fa:f4:5a:57:
         23:a8:87:9f:9f:42:09:44:a1:04:20:a3:7b:5e:79:66:92:76:
         7a:66:3b:1c:01:1f:a1:f4:40:4a:10:83:38:bc:e1:7d:40:ff:
         9d:ee:ab:b2:e4:8c:55:bb:e6:e3:af:79:49:16:bc:05:58:09:
         e2:0b:32:6a:6f:58:c6:13:3c:c5:7b:8b:60:8d:36:b2:5f:e1:
         06:83:ed:f6:2c:67:61:ba:0d:01:30:58:00:56:f1:8b:28:e4:
         6e:6f:13:b7:bd:da:ce:19:d7:d3:c7:ab:db:89:08:82:8d:48:
         15:0f:e0:fd:41:e9:83:de:e3:0c:4c:14:60:1b:e2:a9:bb:ea:
         11:50:74:1c:80:dd:3a:9a:72:e6:0b:1a:95:c5:61:94:08:6f:
         2f:0b:e6:0e:7d:58:93:6b:e2:d5:5c:65:3a:6b:a7:0d:e1:0d:
         6d:36:50:e8:45:7a:47:a2:94:d7:2b:75:b9:02:ff:c2:9d:49:
         d2:a0:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----