Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/98ECE8F44F7C11EDBAAD30BFF1222468.roa
File:                     98ECE8F44F7C11EDBAAD30BFF1222468.roa (raw, json)
Hash identifier:          mB6ofAxn8aoJV2HyFdBef2cwvwi5tpjNfUdI4fOOdg8=
Subject key identifier:   08:B1:79:9C:82:CC:35:4C:2B:21:A4:97:3D:6D:0B:73:3F:98:61:18
Certificate issuer:       /CN=F36D8C86AF/serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
Certificate serial:       09
Authority key identifier: 9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/98ECE8F44F7C11EDBAAD30BFF1222468.roa
Signing time:             Wed 19 Oct 2022 07:06:48 +0000
ROA not before:           Wed 19 Oct 2022 07:06:44 +0000
ROA not after:            Wed 31 Dec 2025 07:06:44 +0000
asID:                     329029
IP address blocks:        102.215.32.0/22 maxlen: 24
                          2c0f:6c80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8C86AF/serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
        Validity
            Not Before: Oct 19 07:06:44 2022 GMT
            Not After : Dec 31 07:06:44 2025 GMT
        Subject: CN=634fa208-4619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:e1:dd:cf:2c:95:15:57:de:52:2e:bd:d9:
                    7b:9b:9d:77:60:a2:8a:0b:b7:94:de:a6:a5:eb:ba:
                    8b:65:ba:3a:e8:ac:27:36:da:f8:83:b3:0d:80:59:
                    4f:ef:1c:96:aa:6f:cb:e8:3c:cc:75:fa:ea:56:a9:
                    50:f9:5c:df:41:1d:29:d3:b7:eb:73:bd:c2:c2:1b:
                    f0:25:be:c5:73:e1:e4:23:ca:9f:82:23:24:47:a2:
                    80:83:7b:9b:94:a5:62:01:30:22:f0:da:6a:e1:89:
                    eb:e8:d6:05:66:a9:30:df:7b:1a:e1:ae:f8:13:0f:
                    b3:7e:a7:3f:4d:db:e7:58:a9:c3:fc:37:8d:f3:ee:
                    c1:76:d5:90:45:38:7e:4a:ce:59:9e:f8:2b:21:ff:
                    b2:b8:22:bc:42:86:3b:e5:ff:7b:32:63:73:07:44:
                    88:c4:98:6e:34:f8:49:87:96:68:a8:2d:28:9d:60:
                    ed:42:b0:12:d0:a9:65:f8:ba:2f:af:a1:58:65:74:
                    ce:96:fd:30:c2:d2:2f:dc:3f:5a:9e:e1:2e:50:ae:
                    75:5d:39:ea:e9:87:5a:9e:fe:a6:51:d3:ea:4d:08:
                    d7:b1:b7:59:e9:f7:56:c6:87:2d:a7:d0:be:c1:04:
                    9d:de:99:fd:a3:f0:75:7f:b8:95:45:e6:47:8c:d2:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:79:9C:82:CC:35:4C:2B:21:A4:97:3D:6D:0B:73:3F:98:61:18
            X509v3 Authority Key Identifier:
                keyid:9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/98ECE8F44F7C11EDBAAD30BFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.32.0/22
                IPv6:
                  2c0f:6c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:00:10:14:e2:fa:1a:77:1c:97:9f:66:ce:3c:e3:08:b2:d7:
         33:fc:f8:84:d8:ba:83:52:42:a9:e7:b2:fe:69:07:a1:eb:ee:
         1a:6f:f2:cc:5b:26:0b:0c:91:3f:cb:93:90:fe:51:cd:ad:b8:
         ef:9e:f4:cc:86:08:96:0a:e3:95:64:df:8b:3b:89:5a:a1:f5:
         85:6f:f5:57:89:3f:f8:51:e1:c4:28:81:68:bb:15:9c:44:95:
         6e:88:e1:0f:96:ce:8e:d0:60:cc:1b:4f:75:73:77:d9:66:d7:
         d6:3d:fb:0d:44:b2:86:8c:6d:4c:cb:dd:ea:68:99:f3:10:e0:
         01:09:f4:b8:3f:58:ce:18:a4:9f:7e:92:f9:3d:b2:8b:6c:2c:
         d4:41:4a:e3:6a:6b:86:e2:0a:ac:00:e7:5b:bd:93:c8:74:25:
         71:7b:3d:a1:8f:b1:17:78:4a:15:a6:3b:42:bd:99:c0:95:20:
         6d:4a:6f:db:b7:5c:5a:e8:b3:24:e7:75:35:5e:6a:f3:76:b1:
         23:23:ee:5c:58:1e:78:5f:a2:4a:80:bd:49:5c:78:a3:fe:e0:
         d0:f0:20:fa:a1:a3:98:11:f2:da:55:4b:4c:63:8e:5a:64:80:
         5d:97:78:dd:e3:91:35:7c:f9:95:11:bb:a3:18:35:df:b4:03:
         65:29:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----