Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/3E2B9236734711E9B82EF41FF8AEA228.roa
File:                     3E2B9236734711E9B82EF41FF8AEA228.roa (raw, json)
Hash identifier:          sHavROAEkdgwvUhdTRWjp16c0hkbhCfTH2dCNlT1fQc=
Subject key identifier:   97:71:BB:5D:B5:95:AA:49:55:57:42:35:C5:ED:DB:45:FA:43:3F:28
Certificate issuer:       /CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
Certificate serial:       02
Authority key identifier: 43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/3E2B9236734711E9B82EF41FF8AEA228.roa
Signing time:             Fri 10 May 2019 17:15:44 +0000
ROA not before:           Fri 10 May 2019 17:15:40 +0000
ROA not after:            Mon 31 Dec 2029 17:15:40 +0000
asID:                     328461
IP address blocks:        102.68.0.0/22 maxlen: 24
                          2c0f:ed40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E61B7AF/serialNumber=4376A562D4DD84D4D68922632EB0BB342A6ADA6A
        Validity
            Not Before: May 10 17:15:40 2019 GMT
            Not After : Dec 31 17:15:40 2029 GMT
        Subject: CN=5cd5b1c0-5693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:7a:ec:61:83:bc:af:4f:5d:f7:47:8f:51:
                    c5:12:11:95:b9:b5:3b:06:70:19:e5:04:06:77:99:
                    a3:c5:16:cb:8f:46:db:87:74:8d:a4:db:63:6b:cd:
                    1e:f2:9a:a3:df:e9:aa:10:1b:4e:fd:67:fc:fb:7d:
                    b3:15:a3:13:4f:c1:7a:d6:b7:27:8a:4f:92:59:3b:
                    15:04:90:dc:b2:74:ce:59:4b:5d:de:13:53:ac:09:
                    3e:4d:e4:8d:e8:3e:d9:e8:2b:40:41:25:37:db:09:
                    49:95:17:29:13:91:24:0b:0a:48:8a:eb:09:ce:6a:
                    7e:dd:46:50:24:12:88:6c:83:1b:ce:c2:ae:cb:7c:
                    34:3d:64:c2:30:b1:7c:26:e8:18:1c:27:27:e0:77:
                    ce:ef:40:93:8f:27:af:e3:ca:02:ac:0f:ad:8b:58:
                    17:90:26:22:e5:f2:2b:f2:a9:cf:03:09:98:c8:9f:
                    fd:cf:1d:da:fd:54:57:a8:76:7e:87:97:0d:9b:1e:
                    ae:b0:65:62:4f:43:73:33:0c:93:7e:7e:ab:44:70:
                    e5:5d:e7:16:2f:08:89:56:6b:6e:50:79:77:13:ee:
                    98:c8:77:a6:37:0c:59:8f:65:53:fd:8d:0a:b4:8d:
                    43:c9:43:ab:55:b2:50:7f:6b:34:54:58:c8:4e:35:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:BB:5D:B5:95:AA:49:55:57:42:35:C5:ED:DB:45:FA:43:3F:28
            X509v3 Authority Key Identifier:
                keyid:43:76:A5:62:D4:DD:84:D4:D6:89:22:63:2E:B0:BB:34:2A:6A:DA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/Q3alYtTdhNTWiSJjLrC7NCpq2mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Q3alYtTdhNTWiSJjLrC7NCpq2mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E61B7/AA88E506734611E98799801FF8AEA228/3E2B9236734711E9B82EF41FF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.0.0/22
                IPv6:
                  2c0f:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:fc:09:1f:aa:0f:9c:f6:d6:3b:cb:84:20:a9:5c:71:3c:
         d2:d2:a9:40:35:3c:c0:fb:16:53:f5:48:72:4e:56:9b:38:f6:
         85:79:84:2a:46:db:2f:26:f5:aa:d7:db:9e:1b:65:39:79:5c:
         31:36:0a:30:7a:c9:bd:a3:c2:bf:88:41:a2:85:08:18:f3:06:
         36:ed:1d:77:c7:b3:42:91:15:e3:14:91:05:ea:b1:31:8b:2e:
         03:16:7c:30:d4:eb:4e:d2:15:15:cc:a3:30:53:e6:2e:f2:e5:
         89:f2:93:89:bd:2b:d7:1c:47:e5:17:49:01:de:90:30:87:d4:
         ea:78:36:45:e7:67:32:30:b1:0f:59:75:b0:e9:3f:ec:3f:a6:
         51:ab:27:e2:fe:6a:50:e8:45:f1:34:86:cf:4f:76:f6:ea:90:
         c6:61:b6:10:45:1f:ea:08:a4:6c:c3:85:48:03:90:4b:8e:f7:
         de:77:9a:17:5c:43:37:13:22:fe:23:41:0c:38:e0:6c:3e:85:
         84:8f:ae:b7:be:0d:39:cc:7c:05:82:fe:51:d5:11:aa:2d:fb:
         f5:9e:e8:0f:06:75:cd:87:9f:2b:e6:a0:a8:ff:c6:b1:91:dd:
         38:00:87:e3:a7:72:2f:2a:47:25:d6:8e:28:ac:76:9b:87:dc:
         ae:53:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----