Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/45E09460492011EDA58FEACFF1222468.roa
File:                     45E09460492011EDA58FEACFF1222468.roa (raw, json)
Hash identifier:          W7ubFeQV8onhDcwxeg30ugXXalNtBd+ZG/y/BamgqXk=
Subject key identifier:   DC:37:3F:58:90:1B:7F:97:A0:78:68:2D:5F:66:00:C2:6E:BD:8E:4A
Certificate issuer:       /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial:       07
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/45E09460492011EDA58FEACFF1222468.roa
Signing time:             Tue 11 Oct 2022 04:50:48 +0000
ROA not before:           Tue 11 Oct 2022 04:50:44 +0000
ROA not after:            Wed 31 Dec 2042 04:50:44 +0000
asID:                     328977
IP address blocks:        102.217.156.0/22 maxlen: 24
                          2c0f:6300::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
        Validity
            Not Before: Oct 11 04:50:44 2022 GMT
            Not After : Dec 31 04:50:44 2042 GMT
        Subject: CN=6344f628-e02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:98:ee:0c:0e:17:d4:b5:22:08:1c:c8:d6:
                    64:8c:9e:35:83:5c:28:bd:e6:e7:e5:9d:b5:2c:2d:
                    31:09:fe:14:74:d4:55:e5:32:93:0a:b2:15:bc:2f:
                    17:a9:5a:7e:2f:4c:a5:03:ba:d5:cc:54:ad:bc:fa:
                    80:27:0d:01:14:51:6f:be:e8:1b:8d:84:e1:20:aa:
                    02:d9:de:ea:11:51:08:8e:cf:de:91:80:6e:0b:31:
                    02:6c:08:76:c7:21:bc:30:a7:50:c5:58:6f:ef:3c:
                    b8:70:df:df:55:e4:ba:53:92:b0:92:3c:64:7d:e9:
                    7c:45:ff:4e:8e:a2:e9:1a:7d:e1:22:ba:62:ec:11:
                    92:8f:46:6f:65:00:f2:f3:b5:36:3c:f6:a4:76:d1:
                    e3:6c:d8:59:18:df:ce:db:37:3e:20:91:6b:36:d9:
                    c5:8c:30:68:0d:a5:74:56:6d:9a:1e:83:e6:6a:6a:
                    ad:20:3b:62:c3:b3:a4:ff:bb:30:10:fa:2d:cb:1f:
                    7d:08:31:a3:b3:b6:2b:f1:bd:1c:82:5e:e8:46:fe:
                    f9:46:12:78:a0:1c:e2:f0:b5:f8:33:b0:df:36:96:
                    c8:38:77:b5:82:bc:87:73:4d:82:b7:24:bc:e7:b4:
                    58:0e:71:10:39:69:ee:79:98:16:c2:96:c6:37:45:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:3F:58:90:1B:7F:97:A0:78:68:2D:5F:66:00:C2:6E:BD:8E:4A
            X509v3 Authority Key Identifier:
                keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/45E09460492011EDA58FEACFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.156.0/22
                IPv6:
                  2c0f:6300::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:0f:14:71:85:05:f8:ea:da:c5:a3:4e:98:44:fa:79:2d:
         21:64:b0:a7:de:d2:a4:64:df:7a:42:41:dc:e0:b1:00:a4:e3:
         e2:38:ef:12:35:d7:64:83:5d:ac:d1:2a:31:83:17:6f:96:54:
         b8:24:f9:7f:a7:64:1a:30:55:bd:9e:64:63:b0:78:0d:23:a5:
         6f:ee:1d:e9:e0:c2:38:a2:f2:71:5c:9f:ff:77:69:cb:36:27:
         07:3b:1c:9c:15:9c:b6:5a:78:71:50:36:64:f2:c5:c3:47:a9:
         c3:66:83:94:e2:f5:36:d7:cd:66:c7:73:eb:f8:61:ae:1d:44:
         7c:5a:b2:b5:07:5a:90:fa:c7:89:ba:ef:7e:27:3a:0c:8a:25:
         28:56:01:0c:b5:cf:f0:4e:84:9f:48:b7:23:37:ad:f9:f0:c3:
         82:5f:1f:df:6e:89:77:12:e5:1a:ac:8c:cd:de:06:66:71:94:
         7a:f5:4d:62:54:f2:d9:66:3b:c4:d3:fb:05:d6:18:13:e4:ba:
         61:43:2f:2c:47:96:49:19:db:e1:b7:e6:7d:3e:fa:b8:8f:51:
         44:c4:9a:30:25:77:44:7b:85:90:bf:b6:28:10:a8:23:70:35:
         f0:5a:36:5c:b2:76:e5:62:00:1b:87:32:c2:fe:e4:c5:09:da:
         f8:1f:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----