Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/9D9A3A6C955B11E8A202E380F8AEA228.roa
File:                     9D9A3A6C955B11E8A202E380F8AEA228.roa (raw, json)
Hash identifier:          +I0HAW1gRUHoR+hm5FaXpkLRZEuabi7h8ckCvRV7EsI=
Subject key identifier:   45:C6:A0:05:55:4F:DA:86:CA:B0:6F:3C:41:EE:B0:1B:1E:09:63:B7
Certificate issuer:       /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial:       04
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/9D9A3A6C955B11E8A202E380F8AEA228.roa
Signing time:             Wed 01 Aug 2018 07:22:16 +0000
ROA not before:           Wed 01 Aug 2018 07:22:10 +0000
ROA not after:            Tue 29 Aug 2028 07:22:10 +0000
asID:                     36924
IP address blocks:        2c0f:ef58::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
        Validity
            Not Before: Aug  1 07:22:10 2018 GMT
            Not After : Aug 29 07:22:10 2028 GMT
        Subject: CN=5b615fa7-f293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:9b:4a:5c:ef:1b:dc:44:57:77:15:a9:4d:
                    d1:ff:fa:ff:a0:83:74:d3:b7:ef:9d:1a:60:0f:a8:
                    56:24:a5:72:0b:a2:2f:5b:58:4f:4a:a8:e2:84:b0:
                    4d:1c:a2:fa:b5:a6:be:78:d0:fc:07:f4:dd:8f:db:
                    91:00:5e:b9:73:fe:9d:50:f7:30:9f:10:ff:37:f6:
                    77:a1:42:a4:bb:33:9a:a9:81:fe:c4:fd:92:32:c3:
                    a2:b0:e7:93:ba:56:5e:85:fd:79:5b:25:18:6e:9a:
                    87:29:9f:bd:8f:48:ca:77:ae:61:ed:b2:46:7a:3b:
                    f5:34:17:9e:d6:b2:be:94:ff:2e:29:63:d1:d8:0d:
                    09:75:86:a2:4e:3c:97:93:0b:fa:a0:e5:3b:c7:a8:
                    d2:31:2c:ed:90:d6:cc:c6:3e:01:94:2e:02:56:78:
                    0f:57:9e:fb:8b:c8:37:6b:c1:07:c9:c6:51:47:05:
                    79:32:2c:32:2e:12:2a:6c:4d:95:87:fe:54:67:31:
                    43:95:23:9d:42:d2:b8:f1:39:de:c1:3f:56:46:05:
                    8e:1d:51:67:46:e2:46:72:4a:33:7f:b4:4b:2a:bf:
                    f4:46:a1:1b:75:a0:b7:dd:7a:74:2c:b5:21:16:03:
                    e6:3c:3c:b8:5f:f0:d7:4b:12:f4:1f:cf:35:ec:0d:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C6:A0:05:55:4F:DA:86:CA:B0:6F:3C:41:EE:B0:1B:1E:09:63:B7
            X509v3 Authority Key Identifier:
                keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/9D9A3A6C955B11E8A202E380F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ef58::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:d8:cc:c7:e2:e8:b3:40:db:47:16:86:e5:74:b4:e6:ee:
         9f:10:59:15:bf:82:44:60:a0:53:c7:d0:60:a4:1b:1d:d3:ba:
         da:7a:25:d6:4c:cc:e9:5c:a6:30:ad:c0:93:a5:5f:46:16:5e:
         d7:07:0b:62:e2:54:d3:8a:29:cf:9b:c2:02:b3:8f:d6:ba:7f:
         b2:22:04:ad:a0:9b:46:e1:fb:ea:41:15:9b:46:04:b4:f5:04:
         1a:c0:a5:1c:e5:b5:e1:c6:45:b4:78:63:59:d6:fc:fa:7a:0a:
         27:f4:e7:19:89:69:e5:cf:41:89:20:19:55:56:cb:47:dc:77:
         fc:fa:4e:98:73:65:55:e8:14:d4:83:e2:cb:0d:9b:c5:0d:3a:
         e9:44:25:60:2f:e9:f1:c0:5d:7d:63:b3:38:5e:3b:d9:ca:0d:
         ec:87:29:52:3a:04:e8:28:e6:d6:aa:23:9e:99:36:93:11:59:
         6f:22:14:5c:be:df:77:24:45:31:7c:de:9a:22:a1:27:1b:d5:
         bb:04:45:01:5d:c3:db:66:1b:95:c5:9b:a9:8c:89:1d:03:68:
         ea:3e:c5:7f:6c:b0:3d:fc:73:1a:7f:bf:6b:cd:08:15:0b:81:
         93:00:33:3d:d2:77:5e:16:ad:74:5c:50:1a:ea:bc:6f:b2:a8:
         fd:a2:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----