Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/442E54A0698611ED8D98369BF1222468.roa
File:                     442E54A0698611ED8D98369BF1222468.roa (raw, json)
Hash identifier:          v9qpDczOM2omGAxHNgOZ2CM78LXieRY5BCkv9MbsQT8=
Subject key identifier:   FC:6D:1A:AD:88:A5:AD:25:C8:AA:9A:05:27:D1:90:C0:26:36:7B:93
Certificate issuer:       /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial:       7A
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/442E54A0698611ED8D98369BF1222468.roa
Signing time:             Mon 21 Nov 2022 10:21:31 +0000
ROA not before:           Mon 21 Nov 2022 10:21:27 +0000
ROA not after:            Sun 21 Nov 2032 10:21:27 +0000
asID:                     328257
IP address blocks:        2c0f:2180::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
        Validity
            Not Before: Nov 21 10:21:27 2022 GMT
            Not After : Nov 21 10:21:27 2032 GMT
        Subject: CN=637b512b-968f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:71:3f:42:d9:11:1c:aa:73:6d:9f:01:83:c0:
                    e2:88:89:a6:f6:b7:02:09:fe:16:43:e2:aa:e3:60:
                    38:48:42:4f:49:e4:26:f0:c4:87:1b:70:28:ff:82:
                    60:95:db:a5:62:45:ec:95:ac:42:dc:ce:34:6b:b9:
                    90:5d:61:25:ea:43:75:45:3e:6a:89:f4:76:4c:68:
                    9d:20:a9:3b:e6:f9:df:f3:ee:e9:23:0e:6a:c8:8a:
                    f7:e8:15:eb:e5:82:a2:e9:a6:67:d8:fb:de:dd:3c:
                    e0:bb:a4:70:a0:27:b6:97:b2:65:98:be:10:61:97:
                    46:5e:99:02:50:38:73:7c:9f:3b:10:c8:fd:5e:96:
                    a2:d4:c6:ae:f5:cf:a3:e6:72:ed:51:f2:50:48:72:
                    ae:16:ad:76:33:21:02:5d:63:77:f0:1f:ce:d0:43:
                    9d:a1:3b:75:25:34:ee:7a:fd:58:a2:01:af:7f:ca:
                    50:62:ed:4e:66:4d:42:46:78:8b:37:24:ca:3f:2e:
                    b5:e1:e7:1e:d1:76:73:45:e3:5b:ab:de:c1:18:2b:
                    e2:4c:5c:d1:22:9f:01:03:e2:4a:68:1c:d6:c8:7f:
                    e8:c1:c1:7e:f2:fe:d9:b2:da:eb:ff:13:52:8e:16:
                    e5:03:9b:58:ee:8b:01:82:6d:9f:66:da:a4:e8:57:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:1A:AD:88:A5:AD:25:C8:AA:9A:05:27:D1:90:C0:26:36:7B:93
            X509v3 Authority Key Identifier:
                keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/442E54A0698611ED8D98369BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2180::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:4b:82:37:60:f7:7c:9b:7b:8b:7a:37:0c:ee:6d:1f:45:
         a6:28:52:c6:3f:25:d4:85:5a:c0:da:09:6f:0f:6a:ed:2c:30:
         24:d6:82:61:a0:2c:e4:67:43:4e:06:a7:bc:7c:77:fb:21:12:
         b4:67:b0:7e:83:37:83:8c:ca:88:51:da:90:8f:cd:d5:ce:bc:
         3f:bc:b4:91:bf:ba:c9:7a:0e:2d:de:47:41:17:8a:1d:9e:99:
         35:c0:f7:c8:07:f3:55:f8:20:8a:94:84:e3:05:c1:d4:2b:bd:
         63:b8:61:31:b2:a8:9b:47:4d:33:8a:97:43:98:86:be:59:25:
         5f:dd:5d:d5:6f:61:5f:13:2e:07:fb:20:e2:fb:4a:b3:8d:f0:
         fd:81:c5:f4:c7:20:1f:07:4e:41:8a:a7:0d:72:81:b6:aa:b4:
         f8:11:60:d1:3c:7b:7f:6d:d1:8a:4b:bf:db:11:07:b3:1c:e5:
         94:8f:6e:ba:af:cd:92:90:a7:2a:91:2f:4f:44:0c:83:87:bc:
         04:a6:f9:68:c1:79:10:13:09:97:a7:d6:14:1a:5d:b3:3c:03:
         bb:f4:a3:2f:d4:2e:3d:00:d3:db:ce:ba:3e:04:fe:70:30:7b:
         92:6e:c6:96:3d:26:7f:ca:b3:e1:43:50:3a:31:f5:2d:90:d1:
         22:b4:5f:5d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZF
QURCN0FGMTEwLwYDVQQFEyg1MzQzQzM4QkRGMkU0OTE4MzEzOUE1OEFDNDJGMTE2
RkE5OTY3M0NEMB4XDTIyMTEyMTEwMjEyN1oXDTMyMTEyMTEwMjEyN1owGDEWMBQG
A1UEAwwNNjM3YjUxMmItOTY4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOpxP0LZERyqc22fAYPA4oiJpva3Agn+FkPiquNgOEhCT0nkJvDEhxtwKP+C
YJXbpWJF7JWsQtzONGu5kF1hJepDdUU+aon0dkxonSCpO+b53/Pu6SMOasiK9+gV
6+WCoummZ9j73t084LukcKAntpeyZZi+EGGXRl6ZAlA4c3yfOxDI/V6WotTGrvXP
o+Zy7VHyUEhyrhatdjMhAl1jd/AfztBDnaE7dSU07nr9WKIBr3/KUGLtTmZNQkZ4
izckyj8uteHnHtF2c0XjW6vewRgr4kxc0SKfAQPiSmgc1sh/6MHBfvL+2bLa6/8T
Uo4W5QObWO6LAYJtn2bapOhXRskCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBT8bRqt
iKWtJciqmgUn0ZDAJjZ7kzAfBgNVHSMEGDAWgBRTQ8OL3y5JGDE5pYrELxFvqZZz
zTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUFEQjcvM0M4RUIyOTIxMzIwMTFFRDlDQUU0M0VFRjEyMjI0NjgvVTBQRGk5
OHVTUmd4T2FXS3hDOFJiNm1XYzgwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVTBQRGk5OHVTUmd4T2FXS3hDOFJiNm1XYzgwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUFEQjcvM0M4RUIyOTIxMzIwMTFFRDlDQUU0M0VFRjEy
MjI0NjgvNDQyRTU0QTA2OTg2MTFFRDhEOTgzNjlCRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPIYAwDQYJKoZIhvcNAQEL
BQADggEBAC6BS4I3YPd8m3uLejcM7m0fRaYoUsY/JdSFWsDaCW8Pau0sMCTWgmGg
LORnQ04Gp7x8d/shErRnsH6DN4OMyohR2pCPzdXOvD+8tJG/usl6Di3eR0EXih2e
mTXA98gH81X4IIqUhOMFwdQrvWO4YTGyqJtHTTOKl0OYhr5ZJV/dXdVvYV8TLgf7
IOL7SrON8P2BxfTHIB8HTkGKpw1ygbaqtPgRYNE8e39t0YpLv9sRB7Mc5ZSPbrqv
zZKQpyqRL09EDIOHvASm+WjBeRATCZen1hQaXbM8A7v0oy/ULj0A09vOuj4E/nAw
e5JuxpY9Jn/Ks+FDUDox9S2Q0SK0X10=
-----END CERTIFICATE-----