Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/720732F0C59E11E980219538F8AEA228.roa
File:                     720732F0C59E11E980219538F8AEA228.roa (raw, json)
Hash identifier:          Psd1/Z2S2Ol8wl9MlW+bVpirYsArWE2fYuwSmY3CUzg=
Subject key identifier:   CC:1F:7A:7D:0B:10:5A:FF:A3:CF:73:69:90:E6:E7:8B:E2:BB:29:28
Certificate issuer:       /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial:       0D
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/720732F0C59E11E980219538F8AEA228.roa
Signing time:             Fri 23 Aug 2019 12:06:32 +0000
ROA not before:           Fri 23 Aug 2019 12:06:28 +0000
ROA not after:            Wed 31 Dec 2025 12:06:28 +0000
asID:                     37340
IP address blocks:        2c0f:f5a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
        Validity
            Not Before: Aug 23 12:06:28 2019 GMT
            Not After : Dec 31 12:06:28 2025 GMT
        Subject: CN=5d5fd6c8-7528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:2f:9d:04:0a:7a:80:28:a8:86:dd:f5:87:
                    f4:99:39:55:09:d5:ad:56:c5:77:81:07:94:1d:fa:
                    5f:3f:e9:f6:b0:c1:e4:6e:25:3f:da:20:ee:2d:64:
                    8f:02:dc:35:b5:a8:a6:91:24:f1:a1:3e:8e:25:2a:
                    58:a6:2e:da:95:65:6a:b2:be:a4:6c:5e:91:ce:7e:
                    e6:ba:ab:8f:65:72:d8:b9:46:65:37:59:c0:b1:53:
                    c4:71:d6:fa:ac:23:c9:71:a9:92:f5:00:5e:35:a3:
                    f1:e0:25:db:13:2f:a7:83:7b:88:f5:ab:4c:d1:39:
                    11:37:a3:16:67:d4:4a:99:30:47:c2:fa:11:8b:ef:
                    85:28:de:ef:84:e1:42:9f:e2:93:fc:e6:16:56:3f:
                    16:46:08:a5:dd:9f:26:dd:98:b1:18:03:0c:d3:22:
                    a1:c6:3f:0f:66:9f:88:ae:f5:7e:d2:cc:a8:48:72:
                    3c:e7:6a:3a:d0:88:a6:29:7c:41:68:27:0d:0e:56:
                    7d:19:48:09:95:87:d3:52:1d:c3:50:9f:41:dc:ae:
                    64:39:12:31:a2:87:85:ba:53:26:6d:c7:99:d1:f1:
                    d1:5d:85:28:c0:13:16:c9:7b:11:53:15:ab:3d:2c:
                    ce:6e:cc:00:38:00:c7:ca:a7:12:48:21:27:90:d7:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:7A:7D:0B:10:5A:FF:A3:CF:73:69:90:E6:E7:8B:E2:BB:29:28
            X509v3 Authority Key Identifier:
                keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/720732F0C59E11E980219538F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:df:ef:4d:8d:98:ee:d0:8d:bd:2c:01:a2:7b:28:8e:66:
         4b:13:2f:b9:a1:19:10:03:c2:12:cd:1a:96:e8:e9:1e:06:7a:
         9a:e3:ac:30:c3:f3:07:57:a1:d8:13:c5:93:b8:a8:5c:51:f3:
         b7:ce:aa:2d:04:84:27:ad:99:27:3a:71:3a:1b:1b:c0:ef:a1:
         61:ee:1a:a7:9a:9c:a2:f7:cf:8d:a1:26:2f:04:84:83:15:02:
         cc:c2:a4:15:57:c1:6f:4a:0c:d8:57:78:11:ae:8e:bd:3d:0b:
         5a:f1:6a:8b:78:8a:bc:98:9a:a4:a4:d3:43:b2:a3:c1:5f:b9:
         fd:a8:56:25:85:fb:4b:f9:e0:fb:08:04:19:68:f7:3f:8d:7a:
         8d:43:b6:d5:5f:d0:9c:ae:33:99:ae:bf:53:ff:d1:dd:a4:15:
         c3:8e:79:16:88:96:d9:11:26:d6:47:31:79:d8:58:4e:80:a9:
         c3:51:97:35:ec:70:2f:23:11:6c:c4:0e:81:3f:8b:f7:2d:dc:
         98:43:e5:b8:3d:85:58:9f:c6:cb:78:74:de:2c:f8:0f:bd:74:
         e9:52:fb:98:9d:5e:04:26:ee:95:96:f5:59:ee:53:27:3c:e5:
         cb:af:fa:60:5d:60:3e:c0:60:4d:8b:5d:bf:ed:2a:f6:ff:9b:
         63:2d:be:76
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
MEYxMEFGMTEwLwYDVQQFEygxNDgzNjE2QTJGQjYzNDI1MzU4MzZDNDNGRTk3MzhE
NEYxN0U5RjEyMB4XDTE5MDgyMzEyMDYyOFoXDTI1MTIzMTEyMDYyOFowGDEWMBQG
A1UEAxMNNWQ1ZmQ2YzgtNzUyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbWL50ECnqAKKiG3fWH9Jk5VQnVrVbFd4EHlB36Xz/p9rDB5G4lP9og7i1k
jwLcNbWoppEk8aE+jiUqWKYu2pVlarK+pGxekc5+5rqrj2Vy2LlGZTdZwLFTxHHW
+qwjyXGpkvUAXjWj8eAl2xMvp4N7iPWrTNE5ETejFmfUSpkwR8L6EYvvhSje74Th
Qp/ik/zmFlY/FkYIpd2fJt2YsRgDDNMiocY/D2afiK71ftLMqEhyPOdqOtCIpil8
QWgnDQ5WfRlICZWH01Idw1CfQdyuZDkSMaKHhbpTJm3HmdHx0V2FKMATFsl7EVMV
qz0szm7MADgAx8qnEkghJ5DXeXECAwEAAaOCAm8wggJrMB0GA1UdDgQWBBTMH3p9
CxBa/6PPc2mQ5ueL4rspKDAfBgNVHSMEGDAWgBQUg2FqL7Y0JTWDbEP+lzjU8X6f
EjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTBGMTAvNzcwMUEwRkNDNEJDMTFFOTk2MzY4QjExRjhBRUEyMjgvRklOaGFp
LTJOQ1UxZzJ4RF9wYzQxUEYtbnhJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRklOaGFpLTJOQ1UxZzJ4RF9wYzQxUEYtbnhJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTBGMTAvNzcwMUEwRkNDNEJDMTFFOTk2MzY4QjExRjhB
RUEyMjgvNzIwNzMyRjBDNTlFMTFFOTgwMjE5NTM4RjhBRUEyMjgucm9hMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUALA/1oDANBgkqhkiG9w0BAQsFAAOCAQEA
Sw/f702NmO7Qjb0sAaJ7KI5mSxMvuaEZEAPCEs0alujpHgZ6muOsMMPzB1eh2BPF
k7ioXFHzt86qLQSEJ62ZJzpxOhsbwO+hYe4ap5qcovfPjaEmLwSEgxUCzMKkFVfB
b0oM2Fd4Ea6OvT0LWvFqi3iKvJiapKTTQ7KjwV+5/ahWJYX7S/ng+wgEGWj3P416
jUO21V/QnK4zma6/U//R3aQVw455FoiW2REm1kcxedhYToCpw1GXNexwLyMRbMQO
gT+L9y3cmEPluD2FWJ/Gy3h03iz4D7106VL7mJ1eBCbulZb1We5TJzzly6/6YF1g
PsBgTYtdv+0q9v+bYy2+dg==
-----END CERTIFICATE-----