Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/B6E3EFEC4B2B11ED8B51B99DF1222468.roa
File:                     B6E3EFEC4B2B11ED8B51B99DF1222468.roa (raw, json)
Hash identifier:          SeEZMep8qUp7m/jfkKAlult6v7B0lE6Bk41ZD/YO3Aw=
Subject key identifier:   52:19:51:7B:80:BC:F0:B0:56:B8:7B:E4:63:53:56:76:98:CD:D0:56
Certificate issuer:       /CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Certificate serial:       02
Authority key identifier: 26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/B6E3EFEC4B2B11ED8B51B99DF1222468.roa
Signing time:             Thu 13 Oct 2022 19:17:44 +0000
ROA not before:           Thu 13 Oct 2022 19:17:39 +0000
ROA not after:            Tue 31 Dec 2030 19:17:39 +0000
asID:                     329101
IP address blocks:        102.215.76.0/22 maxlen: 24
                          2c0f:2880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
        Validity
            Not Before: Oct 13 19:17:39 2022 GMT
            Not After : Dec 31 19:17:39 2030 GMT
        Subject: CN=63486458-9cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:4b:38:d9:f5:d0:3d:14:22:ac:da:f5:8d:
                    d9:60:7b:6b:41:37:97:1e:42:df:50:7b:d2:07:f0:
                    2b:20:15:17:4e:98:95:89:fd:36:54:1b:45:c8:01:
                    ae:f7:88:54:0f:f5:a7:e1:e0:9e:8c:6f:f8:e5:11:
                    e4:3a:37:13:c0:47:32:49:9b:57:8e:00:5a:06:06:
                    15:7d:38:e0:20:30:f6:c8:19:3f:e2:67:0d:a8:7e:
                    6c:e1:6f:46:03:52:10:b8:85:56:2e:0b:20:44:36:
                    96:5a:0e:a7:57:65:73:08:b3:7e:26:66:dd:13:ca:
                    d0:f1:1e:64:57:c1:33:ff:1f:0a:52:b7:7b:ca:c6:
                    3f:99:81:7b:b6:c6:3d:7c:aa:49:0f:31:87:d2:c9:
                    87:2c:35:e1:fb:70:5c:59:42:d3:f7:2a:4c:e7:85:
                    50:35:a2:03:36:6e:90:54:ae:29:c1:aa:ad:a4:64:
                    68:05:13:ad:07:41:8b:eb:cf:af:a9:60:93:ec:93:
                    ce:57:dd:5b:8c:09:c0:6c:78:ca:f3:b3:cb:5a:ce:
                    1d:11:bc:2c:31:15:ee:c2:db:48:e0:4f:e1:fd:e2:
                    e8:6a:4f:e4:54:dc:df:83:d2:3f:21:69:93:0f:4a:
                    2e:45:ed:62:f5:ee:c3:03:35:db:c3:1b:b8:24:8c:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:19:51:7B:80:BC:F0:B0:56:B8:7B:E4:63:53:56:76:98:CD:D0:56
            X509v3 Authority Key Identifier:
                keyid:26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/B6E3EFEC4B2B11ED8B51B99DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.76.0/22
                IPv6:
                  2c0f:2880::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:f3:0a:34:0a:83:20:5c:44:7b:75:87:0f:f3:48:b3:0b:
         d4:90:90:1b:d7:47:26:c5:0e:b0:22:49:e2:d9:5b:51:35:e1:
         9a:a4:b9:46:a0:51:13:a5:86:e4:6b:7a:f0:f2:b0:13:3c:ce:
         ae:59:69:c0:e3:55:20:90:fa:dc:51:c4:47:e2:06:65:e5:cd:
         2d:a2:51:30:9f:c2:70:86:a5:32:f0:dd:48:66:fd:94:bc:5a:
         84:80:0f:9b:3c:c6:a4:d5:88:e1:53:6e:88:1b:39:36:c7:00:
         60:b0:c5:b9:aa:95:83:6f:84:85:18:d1:f3:9f:79:82:d4:c9:
         d4:55:92:f9:63:38:c7:95:3a:7c:02:a4:78:e8:79:6a:50:05:
         ba:9d:f8:46:32:81:41:ce:aa:be:fb:74:be:37:67:20:d1:db:
         4e:a3:3c:69:5e:c1:c2:cd:ac:3a:03:7c:31:45:02:3a:5a:dd:
         b6:27:f0:4d:36:e7:38:a3:92:63:2b:c5:ea:8f:2c:ba:46:f0:
         7b:6b:fe:f2:60:26:b4:72:ea:7d:66:5a:c1:a4:54:f7:db:23:
         bc:38:d5:88:88:0b:7a:e9:a5:7f:65:9c:f2:b3:48:6a:4a:21:
         43:14:b0:79:c0:ef:4d:0a:2e:59:30:c8:3f:88:98:47:43:94:
         b3:39:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----