Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/9441D5EEDAC711E9BF722B0BF8AEA228.roa
File:                     9441D5EEDAC711E9BF722B0BF8AEA228.roa (raw, json)
Hash identifier:          axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=
Subject key identifier:   0A:8B:EB:0F:16:F9:15:F5:EE:AA:D4:8E:73:3F:D2:C6:AC:85:12:31
Certificate issuer:       /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Certificate serial:       8E
Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/9441D5EEDAC711E9BF722B0BF8AEA228.roa
Signing time:             Thu 19 Sep 2019 10:23:54 +0000
ROA not before:           Thu 19 Sep 2019 10:23:49 +0000
ROA not after:            Wed 19 Sep 2029 10:23:49 +0000
asID:                     328471
IP address blocks:        2c0f:ed58::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 12 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
        Validity
            Not Before: Sep 19 10:23:49 2019 GMT
            Not After : Sep 19 10:23:49 2029 GMT
        Subject: CN=5d835739-1753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7d:1f:62:d1:c7:90:73:ec:43:c5:96:bc:5e:
                    0a:f4:18:fd:37:92:7f:db:1f:9b:c3:bd:6d:28:91:
                    e5:cf:c9:fd:35:99:01:ef:c6:49:93:ce:99:22:6e:
                    3a:10:00:9d:9d:77:97:c1:c2:fc:aa:43:62:d9:ee:
                    21:98:04:47:4a:e6:da:7d:27:4e:e9:f0:bc:f9:5f:
                    be:68:45:a3:f8:f8:da:64:e7:f0:4c:96:97:84:4e:
                    4f:65:2c:df:72:87:e0:3a:9c:39:14:9a:d9:be:7f:
                    3d:33:a5:64:b9:cc:2a:00:d5:a6:fe:14:11:7f:7a:
                    3a:cb:29:91:f7:ce:7d:2c:61:ad:53:80:43:f9:be:
                    5d:09:0d:66:fc:12:74:7b:1d:7b:05:f9:d8:1c:86:
                    43:6b:83:0c:64:1f:fb:e2:b5:6c:d2:18:3b:54:42:
                    f7:f8:ec:1e:85:7d:07:ea:b8:10:69:ab:c6:ed:e5:
                    62:f2:bb:8b:b7:0d:2f:22:6e:cc:2c:c6:d6:05:36:
                    99:59:21:ee:ce:22:97:b9:49:c3:13:ee:fe:ee:df:
                    d5:e3:85:57:fe:53:7b:8b:41:c5:ac:55:8e:b7:69:
                    c3:98:81:1d:a0:f6:63:29:1f:7b:3d:83:a6:70:fa:
                    cb:8a:1e:9a:6d:7b:c0:87:ba:b3:f0:92:e5:5d:85:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:EB:0F:16:F9:15:F5:EE:AA:D4:8E:73:3F:D2:C6:AC:85:12:31
            X509v3 Authority Key Identifier:
                keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/9441D5EEDAC711E9BF722B0BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ed58::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:31:94:1b:e6:1a:a9:0b:57:c5:ad:2e:ce:4a:72:01:82:81:
         58:3e:fc:29:6f:58:0c:3b:20:eb:61:ee:c5:48:8d:06:41:35:
         8a:ed:b2:2d:6a:bd:90:0f:25:22:0b:b5:a0:f6:22:a5:b9:ad:
         5c:df:37:d3:34:71:f3:26:5d:d5:d8:22:1b:50:7b:d4:84:ac:
         30:54:45:25:f2:e6:90:da:14:6d:43:ef:83:e7:48:00:7d:e0:
         80:60:3c:25:c1:83:a2:5f:83:66:98:50:bc:f7:a7:42:7a:fc:
         9a:51:2c:29:9b:09:f1:63:07:5b:25:d9:fd:af:79:aa:9b:31:
         02:88:cf:a3:a6:5e:ab:31:5c:46:6b:7b:61:42:ff:ff:71:78:
         b2:8b:d0:02:96:67:f7:7b:fe:b2:d7:e0:65:c7:42:fc:ba:36:
         3d:fc:ff:57:25:07:40:2b:41:82:4a:6a:ec:7e:2f:9e:09:cb:
         45:bb:1b:34:08:f1:5e:33:62:e1:1d:fa:11:58:38:c9:00:b7:
         48:66:5f:e9:b8:14:da:cf:37:17:b9:3e:76:c9:e7:0d:71:35:
         af:40:40:15:d3:28:62:df:6f:d5:20:a0:22:31:68:f5:6c:ca:
         0e:e4:7c:29:66:93:a2:8d:a8:1c:82:0d:01:b5:1e:dd:f9:43:
         3c:3b:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----