Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/9F906EFADF6E11E99541B739F8AEA228.roa
File:                     9F906EFADF6E11E99541B739F8AEA228.roa (raw, json)
Hash identifier:          hCPkplK+hVP9DlTjTX9JwAshQG3hKSM8ZsAigNstAOM=
Subject key identifier:   44:0A:FB:83:94:F6:85:86:62:F3:18:92:AA:BA:3D:BB:7F:10:A5:6F
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       6B
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/9F906EFADF6E11E99541B739F8AEA228.roa
Signing time:             Wed 25 Sep 2019 08:29:43 +0000
ROA not before:           Wed 25 Sep 2019 08:29:37 +0000
ROA not after:            Sun 25 Sep 2039 08:29:37 +0000
asID:                     327795
IP address blocks:        2c0f:efe8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Sep 25 08:29:37 2019 GMT
            Not After : Sep 25 08:29:37 2039 GMT
        Subject: CN=5d8b2577-39dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:34:0e:1f:c0:b0:44:92:ae:35:d3:13:a0:
                    08:62:eb:55:24:1d:49:33:94:d1:9f:94:12:80:da:
                    b0:08:66:b6:66:f1:3d:2a:a2:24:7d:24:df:82:20:
                    2b:2b:ab:a4:f8:40:c6:6d:0c:12:8d:5c:2f:2f:3e:
                    39:c5:19:3a:a4:a6:35:5a:a3:50:0a:9c:40:54:03:
                    88:8a:d9:28:5e:f9:c3:ee:a3:ee:2a:19:50:54:32:
                    b3:1c:ac:93:e8:e4:38:4f:e7:98:95:1a:68:d6:7e:
                    03:52:95:03:95:72:a0:c7:92:0b:d7:c9:e9:fb:95:
                    13:42:d7:72:34:8a:ba:30:e2:d5:44:9c:67:f0:11:
                    45:15:e2:4c:23:f7:db:67:b9:25:25:b6:a9:67:52:
                    fe:d8:d8:5a:ff:1c:aa:33:88:ab:27:b2:71:d1:df:
                    1e:a9:6d:e7:35:e9:25:b4:3f:7f:8d:fa:dd:b9:a4:
                    c2:9d:18:d8:21:8d:40:b5:5d:69:2a:b4:01:f1:0b:
                    00:af:2c:63:1c:7f:ee:5a:12:c3:b8:03:e0:2d:5a:
                    8f:21:58:a9:df:1f:22:23:7d:b8:d2:1b:b5:25:9b:
                    68:1f:94:19:09:85:12:39:2a:81:25:15:db:cc:8e:
                    06:02:aa:77:27:40:30:97:cf:fd:16:09:38:d0:05:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0A:FB:83:94:F6:85:86:62:F3:18:92:AA:BA:3D:BB:7F:10:A5:6F
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/9F906EFADF6E11E99541B739F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:efe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:45:a7:66:51:cc:00:97:c5:5a:15:88:a5:28:e7:c4:29:
         fe:1c:1e:e2:d5:97:d3:42:5b:ce:5b:36:a5:bf:4f:ce:94:84:
         ba:23:cd:36:56:8e:6a:cc:28:26:d7:78:14:5e:72:03:e5:d3:
         c8:88:b4:45:71:13:f5:72:a2:67:f4:0d:f9:c1:f5:8e:4a:34:
         c1:7d:26:02:6e:ac:eb:55:0d:15:49:fc:db:49:63:fd:0e:ab:
         0a:83:86:3c:56:26:41:e1:07:54:0e:2d:11:45:0b:61:78:13:
         5d:db:9c:be:3f:21:dd:d3:2d:8a:21:30:18:d5:a4:42:3c:df:
         74:17:e9:b9:52:df:3c:5e:7e:1a:80:b8:5c:fe:72:2a:c3:17:
         34:3f:9c:fe:97:2d:57:59:e4:81:82:0d:e8:a5:14:65:93:84:
         aa:3a:bc:03:8a:b1:1c:e8:b7:99:09:68:df:5d:94:d6:76:78:
         cf:f6:da:76:09:0c:cb:88:41:9e:0d:a1:f2:7a:13:1c:8b:09:
         66:2c:02:16:8e:5c:e2:2b:de:b4:18:cb:1c:d2:a7:58:46:b0:
         73:db:12:70:47:0e:27:77:dc:be:d9:1e:4f:c7:e1:c0:e2:e7:
         7d:32:4e:f8:a1:34:54:3b:df:9c:af:84:38:43:7c:3a:cf:2a:
         af:93:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----