Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EACF791E2F0711EE8364156E4AD9E6FC.roa
File:                     EACF791E2F0711EE8364156E4AD9E6FC.roa (raw, json)
Hash identifier:          6wmCsESdQSU8mtBqEFZvQUq6GrQGHgfXsE8l1sGMApw=
Subject key identifier:   01:7F:11:BF:BB:79:3D:9C:11:BB:F9:CA:23:6C:09:4A:DF:7E:BC:5F
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04FA
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EACF791E2F0711EE8364156E4AD9E6FC.roa
Signing time:             Sun 30 Jul 2023 18:35:55 +0000
ROA not before:           Sun 30 Jul 2023 18:35:51 +0000
ROA not after:            Sat 30 Jul 2033 18:35:51 +0000
asID:                     37119
IP address blocks:        105.172.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 30 18:35:51 2023 GMT
            Not After : Jul 30 18:35:51 2033 GMT
        Subject: CN=64c6ad8b-360d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:ff:f5:97:cf:0e:82:14:5c:0f:35:24:0a:
                    a5:03:59:36:72:9b:89:44:2b:ec:d0:75:52:2d:21:
                    a2:42:de:b6:20:c7:67:60:8a:ad:d6:83:57:e7:f6:
                    45:26:1a:9a:2a:be:2f:e0:bd:32:28:63:23:64:cd:
                    e2:92:3b:b7:f6:2d:03:3e:21:25:88:85:23:8b:ab:
                    b7:30:f4:ec:89:50:e9:e2:74:9c:10:86:49:98:23:
                    ef:c0:8a:c4:7f:22:44:fa:be:2c:17:f1:e0:3d:61:
                    86:b7:9c:e4:21:eb:59:96:7a:28:81:20:42:76:14:
                    12:11:4b:33:94:ff:43:1a:c3:94:0e:7b:59:b3:dd:
                    59:7b:9a:b7:90:11:16:4d:a0:64:c2:7c:50:06:87:
                    15:0d:37:39:9d:08:cb:41:1e:50:de:c2:2c:0d:47:
                    82:f3:17:3c:8c:37:03:0e:b9:02:dc:79:de:18:52:
                    88:0d:bf:3d:5e:6e:94:09:dd:c1:90:0b:15:0b:61:
                    fb:0d:ad:64:ac:97:28:c9:ce:97:ea:43:4d:45:c3:
                    72:f9:21:13:3b:51:11:7f:39:00:83:76:a2:bd:a3:
                    c2:2e:74:f6:66:6d:58:07:36:f8:77:49:10:e4:33:
                    41:79:d3:7c:e7:41:da:89:57:82:35:c5:00:34:c1:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7F:11:BF:BB:79:3D:9C:11:BB:F9:CA:23:6C:09:4A:DF:7E:BC:5F
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EACF791E2F0711EE8364156E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:94:a9:20:6b:cb:62:b4:a1:f1:ad:6f:d5:73:79:b5:bc:
         82:88:72:50:b5:6d:2f:0d:f1:b2:37:76:40:52:3d:bf:eb:f1:
         d4:83:aa:64:66:ad:8a:15:52:85:c5:7e:31:68:86:ad:f2:cb:
         99:88:9a:a9:49:d0:da:e1:cf:31:d3:86:ff:3c:74:ea:df:b8:
         ac:f1:1e:fd:c4:61:8b:1b:45:65:8b:8d:df:6e:5a:94:32:5c:
         c4:2c:4e:6f:3d:ed:1b:49:da:24:98:23:5f:54:86:02:ce:a6:
         b0:bc:5d:f8:b5:e9:1f:4c:88:ab:5e:f2:df:16:8d:a2:73:bd:
         76:8d:7e:d0:2a:28:3a:a7:d3:b2:d6:53:3d:aa:3a:40:ae:b8:
         a6:55:c2:3a:8e:72:73:99:87:92:5a:2d:95:3d:a8:f3:5d:2a:
         e2:cf:16:2b:e2:ef:0a:ab:36:5a:5e:f0:df:16:2b:47:0f:ae:
         df:54:66:5d:10:82:1e:57:36:33:c1:8f:d7:b8:1d:66:6d:81:
         89:95:a2:00:7b:96:ed:70:b1:f8:ce:1c:d8:8f:51:a1:e5:25:
         58:d1:81:ba:41:80:a9:00:62:80:ac:4d:07:f8:29:ea:6f:0f:
         56:54:68:27:9a:5e:d1:23:86:c2:2c:62:15:d2:57:90:4a:87:
         2d:4e:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----