Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/5966A982513411EC87153C3CD8A014CE.roa
File:                     5966A982513411EC87153C3CD8A014CE.roa (raw, json)
Hash identifier:          XiML3N/Ks2DTKm6yJyQZ8MauTZzboO/Tl8GClySWfiw=
Subject key identifier:   AC:FF:20:2C:C9:4D:46:5B:B0:C5:25:4A:F8:EE:C3:52:A0:4F:C8:05
Certificate issuer:       /CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
Certificate serial:       02
Authority key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/5966A982513411EC87153C3CD8A014CE.roa
Signing time:             Mon 29 Nov 2021 16:49:42 +0000
ROA not before:           Mon 29 Nov 2021 16:49:30 +0000
ROA not after:            Sun 29 Nov 2026 16:49:30 +0000
asID:                     327960
IP address blocks:        102.219.144.0/22 maxlen: 24
                          2c0f:f2a8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 00:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
        Validity
            Not Before: Nov 29 16:49:30 2021 GMT
            Not After : Nov 29 16:49:30 2026 GMT
        Subject: CN=61a504a6-871e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:08:0d:72:73:3b:d5:3f:f0:16:c5:ba:c3:9a:
                    46:1d:15:ae:d9:28:63:47:7f:2d:ca:82:62:0f:ae:
                    75:33:bd:2e:e3:45:cd:40:f3:f7:50:34:76:4c:d6:
                    93:0f:73:4c:4f:0d:2b:25:c8:ad:80:97:66:78:1c:
                    6d:bd:66:75:58:1e:79:45:5c:e2:8f:2b:02:27:5e:
                    69:32:d5:1b:c5:5e:d8:59:5d:8a:99:a6:53:46:40:
                    34:30:90:f8:b7:fc:bc:11:96:41:9f:33:65:a6:90:
                    f3:ec:4c:e2:85:58:b0:74:02:65:2d:d7:61:ce:2f:
                    71:01:55:17:20:33:cc:b8:29:7f:17:d2:f8:18:09:
                    8a:70:39:10:c0:5f:1b:90:38:b2:6f:1d:87:39:ad:
                    ac:f9:96:54:5a:74:85:99:ed:3d:75:82:74:9f:22:
                    3a:00:3c:8f:e1:3e:47:cb:92:e9:58:2e:78:0e:40:
                    fc:12:35:08:30:66:b1:46:59:f4:63:b1:6d:72:59:
                    88:d7:bc:65:1a:b5:2a:3d:be:76:d3:f2:76:8e:19:
                    7f:c9:8e:57:03:97:2d:f6:d7:f6:e1:9e:18:3a:84:
                    dc:f2:69:a8:55:fa:ed:73:00:c6:1f:41:be:ef:23:
                    d7:2f:65:43:b2:e3:59:d3:83:96:e4:6a:c9:7e:77:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FF:20:2C:C9:4D:46:5B:B0:C5:25:4A:F8:EE:C3:52:A0:4F:C8:05
            X509v3 Authority Key Identifier:
                keyid:3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/5966A982513411EC87153C3CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.144.0/22
                IPv6:
                  2c0f:f2a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:51:ab:93:14:c5:a8:f8:95:50:a1:ba:d8:de:08:9c:4e:
         23:17:46:ca:09:b6:e0:98:c6:32:96:0d:c3:18:b5:cd:15:57:
         6a:86:a1:6e:06:94:c8:a7:fc:04:eb:f0:3d:13:e3:96:a5:3e:
         79:f6:59:ba:62:2c:26:38:a8:99:1b:c1:3f:0d:7a:a8:7f:3e:
         e9:51:c6:2f:df:13:32:c3:3a:a5:b8:33:78:0f:1c:17:9d:15:
         f0:8d:ac:c2:fd:6d:70:b1:7e:49:09:1f:26:20:af:39:9a:97:
         8c:d0:94:b4:04:63:58:52:7f:11:9c:84:47:8f:4f:b1:1c:20:
         7e:d8:68:71:ac:c4:00:06:92:a1:d7:04:f9:45:41:fe:a4:c6:
         7f:6c:fc:b9:af:9f:5c:0a:d3:a6:98:6a:e2:0b:6c:21:0d:85:
         9a:1a:93:fd:2e:ae:71:4c:64:25:73:1c:5f:b2:83:d2:df:8c:
         9c:36:f2:32:ab:0c:40:9e:ef:0c:e4:6a:49:2f:86:4c:c1:69:
         41:f6:7c:e3:13:79:66:f1:80:66:4f:81:56:0b:50:d5:ee:44:
         a5:76:0e:21:ae:62:97:51:16:9d:d6:bc:d6:71:c1:56:c4:04:
         4d:ba:ea:f2:bf:55:e1:8c:2e:48:78:8f:df:fd:71:bd:d0:3f:
         ea:ee:fe:e2
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
QzMyOEFGMTEwLwYDVQQFEygzQThGMzA4QzExREYyREJCNzRGRUI2Q0M1OUM2NjQw
OTg2QzlDQjY1MB4XDTIxMTEyOTE2NDkzMFoXDTI2MTEyOTE2NDkzMFowGDEWMBQG
A1UEAwwNNjFhNTA0YTYtODcxZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPIIDXJzO9U/8BbFusOaRh0VrtkoY0d/LcqCYg+udTO9LuNFzUDz91A0dkzW
kw9zTE8NKyXIrYCXZngcbb1mdVgeeUVc4o8rAideaTLVG8Ve2FldipmmU0ZANDCQ
+Lf8vBGWQZ8zZaaQ8+xM4oVYsHQCZS3XYc4vcQFVFyAzzLgpfxfS+BgJinA5EMBf
G5A4sm8dhzmtrPmWVFp0hZntPXWCdJ8iOgA8j+E+R8uS6VgueA5A/BI1CDBmsUZZ
9GOxbXJZiNe8ZRq1Kj2+dtPydo4Zf8mOVwOXLfbX9uGeGDqE3PJpqFX67XMAxh9B
vu8j1y9lQ7LjWdODluRqyX53gbsCAwEAAaOCArQwggKwMB0GA1UdDgQWBBSs/yAs
yU1GW7DFJUr47sNSoE/IBTAfBgNVHSMEGDAWgBQ6jzCMEd8tu3T+tsxZxmQJhsnL
ZTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkMzMjgvM0Q5QkJDNzA1MTFGMTFFQ0I3RDU1RjdERDhBMDE0Q0UvT284d2pC
SGZMYnQwX3JiTVdjWmtDWWJKeTJVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvT284d2pCSGZMYnQwX3JiTVdjWmtDWWJKeTJVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkMzMjgvM0Q5QkJDNzA1MTFGMTFFQ0I3RDU1RjdERDhB
MDE0Q0UvNTk2NkE5ODI1MTM0MTFFQzg3MTUzQzNDRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmbbkDANBAIAAjAHAwUALA/y
qDANBgkqhkiG9w0BAQsFAAOCAQEAnX9Rq5MUxaj4lVChutjeCJxOIxdGygm24JjG
MpYNwxi1zRVXaoahbgaUyKf8BOvwPRPjlqU+efZZumIsJjiomRvBPw16qH8+6VHG
L98TMsM6pbgzeA8cF50V8I2swv1tcLF+SQkfJiCvOZqXjNCUtARjWFJ/EZyER49P
sRwgfthocazEAAaSodcE+UVB/qTGf2z8ua+fXArTpphq4gtsIQ2FmhqT/S6ucUxk
JXMcX7KD0t+MnDbyMqsMQJ7vDORqSS+GTMFpQfZ84xN5ZvGAZk+BVgtQ1e5EpXYO
Ia5il1EWnda81nHBVsQETbrq8r9V4YwuSHiP3/1xvdA/6u7+4g==
-----END CERTIFICATE-----