Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/4C042A44496311ED9930A0F9F1222468.roa
File:                     4C042A44496311ED9930A0F9F1222468.roa (raw, json)
Hash identifier:          e9ujQQYc0OEqAyhghA9cLn0dfJy3UKXs4mNrpCrPXck=
Subject key identifier:   D1:68:29:C0:29:55:CB:7D:D7:6E:2B:58:1D:FD:F7:60:15:5A:10:0D
Certificate issuer:       /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial:       0435
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/4C042A44496311ED9930A0F9F1222468.roa
Signing time:             Tue 11 Oct 2022 12:50:34 +0000
ROA not before:           Tue 11 Oct 2022 12:50:31 +0000
ROA not after:            Thu 31 Oct 2030 12:50:31 +0000
asID:                     327987
IP address blocks:        2c0f:6800::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Validity
            Not Before: Oct 11 12:50:31 2022 GMT
            Not After : Oct 31 12:50:31 2030 GMT
        Subject: CN=6345669a-58e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:89:23:01:d9:17:15:a5:05:2d:53:93:13:23:
                    ac:f1:22:68:4f:9d:d5:c0:36:a6:71:ea:fb:a7:fb:
                    0d:7e:eb:58:52:95:8d:63:76:77:8a:23:37:3c:9b:
                    82:90:a1:35:28:8a:09:b5:b3:08:0e:af:a1:1c:29:
                    85:e6:72:55:25:26:7b:09:22:76:33:ec:02:be:2e:
                    8c:a4:87:cf:d9:fd:60:17:5e:37:99:c0:63:82:f4:
                    5a:ac:c7:83:05:b4:db:ba:38:5a:08:d7:2e:a4:dd:
                    a7:87:f6:0f:76:36:46:1a:d6:5a:62:a8:c4:2c:73:
                    59:e2:9d:f1:22:d5:3f:7e:12:b2:5a:ab:a6:ce:28:
                    7c:ed:f1:f3:3a:c2:ab:17:00:b1:e6:0b:8a:15:96:
                    1f:6f:6b:da:d4:ba:2f:fc:29:14:de:38:c7:3a:8a:
                    b1:bd:e7:43:92:f7:f0:98:e9:e1:8b:49:f1:26:ce:
                    38:d6:ab:00:65:4b:c2:fd:fe:77:fc:7a:3f:31:73:
                    2f:60:a9:3b:df:22:9c:66:97:5e:ec:fb:ea:ae:cb:
                    b7:7d:57:5b:ec:90:73:15:2c:a6:49:55:e7:64:60:
                    79:6f:2b:0d:c0:24:f1:9b:44:71:c9:52:83:b4:c9:
                    37:d7:a4:1c:61:f9:4b:92:cd:d1:36:fe:7e:80:ab:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:68:29:C0:29:55:CB:7D:D7:6E:2B:58:1D:FD:F7:60:15:5A:10:0D
            X509v3 Authority Key Identifier:
                keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/4C042A44496311ED9930A0F9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:a3:88:53:73:59:b2:9a:d4:5e:9b:77:83:05:9b:29:62:
         0e:fa:8f:14:13:77:4c:e5:45:90:10:03:24:89:c7:bc:b4:13:
         87:b6:8b:f3:bd:ef:b5:d4:03:a1:df:23:f0:28:87:65:83:3a:
         55:e2:9f:ce:e8:c2:bf:65:c8:db:3e:02:89:7d:78:88:50:e9:
         66:b2:de:ea:85:3f:03:d4:6c:65:35:88:b9:fe:03:0f:5f:d9:
         3f:4b:0c:3a:56:c7:1a:ed:e4:61:44:d4:26:ee:78:e6:ab:5d:
         a3:bb:90:60:a8:6a:8d:72:c8:15:32:2e:50:68:08:55:12:3a:
         aa:90:bc:5c:6a:42:5f:d5:75:e9:87:ff:59:1a:59:bf:ea:6d:
         b4:23:0d:3c:01:9f:ea:bf:56:9a:27:0b:43:57:b7:88:10:69:
         ba:40:47:58:b4:dd:f3:b0:70:77:73:d6:cf:56:c0:8b:2b:50:
         02:1d:a0:2c:38:74:a6:00:33:9b:2c:2a:e5:4a:7b:dc:8a:7e:
         48:f8:df:f0:3e:9e:38:67:10:2e:20:cf:a0:90:9c:ba:39:83:
         02:00:69:eb:59:b2:fb:c9:c5:ab:c3:8b:2f:bb:7a:b7:5d:01:
         90:be:13:ea:56:0a:6b:0b:cc:b2:12:33:56:7c:63:f9:a6:c4:
         f5:5d:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----