Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A19C77DE2E4D11EEA89776384AD9E6FC.roa
File:                     A19C77DE2E4D11EEA89776384AD9E6FC.roa (raw, json)
Hash identifier:          uNCaGzEyXshHPSx1Wh+Agk7RHEWyZqvUbn7485lXxU0=
Subject key identifier:   91:70:28:04:EA:DD:3F:9F:32:9E:BB:38:EC:A7:21:C3:B3:D1:3B:BD
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04B1
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A19C77DE2E4D11EEA89776384AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 20:22:25 +0000
ROA not before:           Sat 29 Jul 2023 20:22:20 +0000
ROA not after:            Sat 30 Jul 2033 20:22:20 +0000
asID:                     37119
IP address blocks:        105.169.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 20:22:20 2023 GMT
            Not After : Jul 30 20:22:20 2033 GMT
        Subject: CN=64c57501-6f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:b5:44:58:fa:04:a3:cf:53:ac:9b:8d:a1:
                    55:e3:51:9c:61:6b:bf:8e:c1:f8:67:39:c5:12:3a:
                    cd:1d:bc:34:63:f9:f0:a1:8b:b7:e0:df:9c:5a:a2:
                    33:69:a2:ab:72:6b:68:c1:db:13:8d:aa:43:e2:13:
                    8d:67:ba:94:d1:60:23:be:fd:fc:b4:5d:d6:4e:c7:
                    39:54:fa:e6:f6:20:71:0a:25:cf:ed:33:a2:35:58:
                    dd:dc:eb:90:b6:d3:26:53:11:e7:41:fa:e0:6e:71:
                    1e:f4:c4:8f:33:7b:0a:f0:40:a5:91:b0:1c:9c:fd:
                    11:8d:89:6e:c3:ca:44:e6:e4:f1:86:86:e4:1a:2d:
                    50:be:ab:23:b5:eb:9d:61:b0:75:b2:48:bc:e8:00:
                    6e:c2:cb:cc:6f:0a:36:47:47:4e:9a:d4:16:df:89:
                    42:eb:ac:12:83:81:87:52:ba:a5:74:d6:4e:ad:53:
                    ad:b4:61:7d:d6:33:96:c1:25:40:02:49:31:4e:d6:
                    64:eb:0f:69:e9:08:97:71:52:4c:48:86:17:35:b2:
                    ac:15:c1:13:8f:e7:08:dc:80:d4:2f:fa:90:70:59:
                    cf:49:c2:a9:51:dd:fd:a2:2b:7c:82:2c:38:14:bb:
                    26:8b:2a:b3:4c:83:17:e2:42:a0:72:29:e7:af:05:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:28:04:EA:DD:3F:9F:32:9E:BB:38:EC:A7:21:C3:B3:D1:3B:BD
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A19C77DE2E4D11EEA89776384AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:f0:ed:71:a6:55:68:23:82:86:8e:96:19:1e:04:3a:d6:
         78:9f:e9:d9:37:b0:f4:fe:fb:fb:23:16:40:06:e2:b2:a3:31:
         15:32:0b:82:bb:99:bc:5b:82:c5:cf:58:8b:13:79:ff:18:31:
         43:2b:76:33:c2:cb:7a:f0:aa:02:88:e4:4b:ed:9d:80:6f:fc:
         04:30:05:69:4b:8c:50:a9:b7:63:56:bb:2b:7f:67:e5:c8:be:
         f0:7e:5c:f8:80:fb:88:73:a2:54:e7:b5:f2:c4:c4:2b:8a:28:
         9a:63:e9:80:33:b5:b4:46:d5:ac:4f:71:1c:0c:31:eb:5d:51:
         7b:cc:a8:b6:35:19:ca:d7:6e:7d:ed:16:01:d7:12:8c:4b:ce:
         3d:b0:65:0b:fc:14:7e:a9:a8:c2:93:90:82:98:ad:d1:72:e8:
         9f:de:ec:4b:94:20:cd:8b:ea:ad:72:d7:e0:cc:8f:6a:d4:7b:
         7d:0e:86:dc:bf:a8:ce:f0:43:a7:71:1e:5e:fd:77:09:d5:87:
         c4:d5:ce:65:4d:b6:0c:ad:6e:5a:ef:d0:3e:d6:3c:3e:8a:63:
         91:8f:dd:a9:34:25:55:71:50:7d:f4:41:34:70:55:10:45:73:
         f8:7a:b7:8f:f2:17:ea:45:ab:23:17:20:10:6f:96:04:9b:14:
         8a:53:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----