Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/7E88370E7D5F11E993BB1E7FF8AEA228.roa
File:                     7E88370E7D5F11E993BB1E7FF8AEA228.roa (raw, json)
Hash identifier:          am92gfMFQqWByXCSl8p9EO6PUlEqWuTUeM+DI4nReL0=
Subject key identifier:   77:A7:BE:A0:67:E5:8D:28:B9:96:C4:39:AD:B2:EE:98:15:6E:64:66
Certificate issuer:       /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial:       02
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/7E88370E7D5F11E993BB1E7FF8AEA228.roa
Signing time:             Thu 23 May 2019 13:34:31 +0000
ROA not before:           Thu 23 May 2019 13:34:25 +0000
ROA not after:            Wed 31 Dec 2025 13:34:25 +0000
asID:                     328317
IP address blocks:        102.141.224.0/22 maxlen: 24
                          2c0f:eed8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
        Validity
            Not Before: May 23 13:34:25 2019 GMT
            Not After : Dec 31 13:34:25 2025 GMT
        Subject: CN=5ce6a167-19dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:21:75:a3:7f:ce:e4:9f:0e:0d:9c:66:9d:
                    da:53:fb:1b:dc:88:29:c1:3d:82:cd:aa:26:51:ee:
                    76:d1:93:ea:01:ed:03:33:5d:83:8c:91:0a:98:7f:
                    52:6a:38:ad:8a:6c:f9:42:3e:6b:b8:cc:c2:e1:2e:
                    ac:63:7a:fc:95:b8:fa:01:4b:e2:b1:d9:59:0f:b1:
                    ee:66:4e:65:c8:6c:4b:95:b4:6f:4e:bb:04:bc:3e:
                    f3:d4:6d:b8:0b:26:91:49:ec:b9:72:02:44:8e:27:
                    02:4f:2e:cb:67:4d:3e:ce:41:95:06:19:ef:47:3d:
                    20:fb:03:e8:6e:e1:c7:d6:cd:f4:dd:fa:ab:12:ff:
                    cb:91:0b:e0:16:32:ad:0d:3f:e9:1b:fa:17:e2:b0:
                    42:3d:a6:f9:64:36:a7:50:0e:1f:05:42:e7:e4:d7:
                    6c:93:18:f4:0f:f5:96:ae:7e:4a:b0:cc:f7:2d:82:
                    3a:39:96:64:78:cf:bd:fb:87:74:44:40:a4:a4:a4:
                    e0:6c:24:f0:24:86:4a:8c:bc:a0:1c:8a:74:19:75:
                    a0:14:38:d8:1d:a6:72:58:87:49:8e:20:34:f1:da:
                    60:2a:c4:54:1f:d9:14:d0:05:d1:ac:08:a8:e9:17:
                    5d:81:0d:82:f6:bc:34:d3:f1:95:8f:c7:f2:7e:d4:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A7:BE:A0:67:E5:8D:28:B9:96:C4:39:AD:B2:EE:98:15:6E:64:66
            X509v3 Authority Key Identifier:
                keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/7E88370E7D5F11E993BB1E7FF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.224.0/22
                IPv6:
                  2c0f:eed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:dc:5b:28:c3:f1:e7:9b:be:50:00:b3:92:94:12:d4:d1:
         5e:07:32:9e:e5:32:da:59:de:7e:17:d6:e7:2e:15:25:c9:b8:
         61:5f:43:3e:ff:7b:a4:09:5e:fd:1c:21:65:43:87:6e:6e:b6:
         18:ca:66:14:c8:74:ef:26:93:f3:a1:4b:95:7e:f7:54:93:e1:
         4b:2c:12:2c:83:c9:20:f3:fe:63:01:2f:4c:e7:be:b3:fe:f5:
         1a:f1:6c:34:0d:76:44:b0:ad:8b:6c:3e:ee:e8:49:a1:1f:a0:
         1c:f3:5b:2f:27:03:46:8d:dc:20:41:60:62:89:ed:10:61:ae:
         63:b2:c7:33:c3:00:5d:41:55:c9:17:bc:ad:74:57:c8:2d:ab:
         4a:6b:73:c0:24:b9:c3:68:83:d8:1b:1b:2c:46:f9:5a:70:bf:
         43:d0:13:b5:61:57:63:6e:b8:e3:05:d4:5c:5c:f2:01:4b:02:
         37:e9:af:bb:70:72:73:87:4f:9d:ea:8f:78:c2:5d:73:09:2b:
         d3:97:6f:d0:4a:b4:c1:7e:d3:b6:26:ca:98:c2:03:40:7d:4d:
         5d:2f:48:79:ce:46:a8:b8:6f:ee:fb:89:bb:3f:b2:3e:35:f0:
         28:cd:ee:66:e6:1e:bf:c0:ab:4b:73:0c:70:6d:02:4f:74:8d:
         d4:ad:d2:f0
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
QTY5M0FGMTEwLwYDVQQFEygwODkwMTJGOTY5QTYyMDBDOTM5OUIwOTM0NDdBQTRF
QTJDRkNBODFFMB4XDTE5MDUyMzEzMzQyNVoXDTI1MTIzMTEzMzQyNVowGDEWMBQG
A1UEAxMNNWNlNmExNjctMTlkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMCqIXWjf87knw4NnGad2lP7G9yIKcE9gs2qJlHudtGT6gHtAzNdg4yRCph/
Umo4rYps+UI+a7jMwuEurGN6/JW4+gFL4rHZWQ+x7mZOZchsS5W0b067BLw+89Rt
uAsmkUnsuXICRI4nAk8uy2dNPs5BlQYZ70c9IPsD6G7hx9bN9N36qxL/y5EL4BYy
rQ0/6Rv6F+KwQj2m+WQ2p1AOHwVC5+TXbJMY9A/1lq5+SrDM9y2COjmWZHjPvfuH
dERApKSk4Gwk8CSGSoy8oByKdBl1oBQ42B2mcliHSY4gNPHaYCrEVB/ZFNAF0awI
qOkXXYENgva8NNPxlY/H8n7UVLUCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBR3p76g
Z+WNKLmWxDmtsu6YFW5kZjAfBgNVHSMEGDAWgBQIkBL5aaYgDJOZsJNEeqTqLPyo
HjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2REE2OTMvMEQyOTY4QzY3RDVGMTFFOTk1NjVCODdFRjhBRUEyMjgvQ0pBUy1X
bW1JQXlUbWJDVFJIcWs2aXo4cUI0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQ0pBUy1XbW1JQXlUbWJDVFJIcWs2aXo4cUI0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REE2OTMvMEQyOTY4QzY3RDVGMTFFOTk1NjVCODdFRjhB
RUEyMjgvN0U4ODM3MEU3RDVGMTFFOTkzQkIxRTdGRjhBRUEyMjgucm9hMC4GCCsG
AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZo3gMA0EAgACMAcDBQAsD+7YMA0GCSqG
SIb3DQEBCwUAA4IBAQBH+txbKMPx55u+UACzkpQS1NFeBzKe5TLaWd5+F9bnLhUl
ybhhX0M+/3ukCV79HCFlQ4dubrYYymYUyHTvJpPzoUuVfvdUk+FLLBIsg8kg8/5j
AS9M576z/vUa8Ww0DXZEsK2LbD7u6EmhH6Ac81svJwNGjdwgQWBiie0QYa5jsscz
wwBdQVXJF7ytdFfILatKa3PAJLnDaIPYGxssRvlacL9D0BO1YVdjbrjjBdRcXPIB
SwI36a+7cHJzh0+d6o94wl1zCSvTl2/QSrTBftO2JsqYwgNAfU1dL0h5zkaouG/u
+4m7P7I+NfAoze5m5h6/wKtLcwxwbQJPdI3UrdLw
-----END CERTIFICATE-----