Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/E21E90EE210D11F0934A7996DAE4EC9C.roa
File:                     E21E90EE210D11F0934A7996DAE4EC9C.roa (raw, json)
Hash identifier:          iUS+8IiwQWTC3KosgvVLrgeHR5LzZ/YYi+HkfN+5rAw=
Subject key identifier:   20:8A:00:20:B8:C8:EC:58:97:08:FD:04:23:49:F2:22:A4:20:F8:A1
Certificate issuer:       /CN=F363DCF2AF/serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
Certificate serial:       61
Authority key identifier: 24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/E21E90EE210D11F0934A7996DAE4EC9C.roa
Signing time:             Thu 24 Apr 2025 13:13:16 +0000
ROA not before:           Thu 24 Apr 2025 13:13:11 +0000
ROA not after:            Mon 31 Dec 2035 13:13:11 +0000
asID:                     30992
IP address blocks:        2c0f:f660::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DCF2AF, serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
        Validity
            Not Before: Apr 24 13:13:11 2025 GMT
            Not After : Dec 31 13:13:11 2035 GMT
        Subject: CN=680a38ec-a7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:2e:08:2f:ea:13:6f:00:3e:85:78:c5:ea:
                    9f:09:cc:b0:b5:cb:1b:f4:eb:d3:e7:fa:e0:c9:8c:
                    3e:25:4c:6b:b9:98:48:88:ca:1f:c1:a5:12:e6:f2:
                    64:8a:0f:27:20:75:04:30:e0:e8:e8:6e:19:9f:74:
                    89:1f:b2:23:3d:2e:dd:99:67:2c:a9:3f:f7:5b:29:
                    c9:f6:b4:c6:8e:2b:04:81:3a:ed:55:53:9b:cb:a8:
                    68:f0:88:e5:7a:c7:7e:77:30:31:57:fb:9a:78:b5:
                    b3:16:00:3b:b8:e0:44:3d:36:a2:b8:2e:df:48:1f:
                    fb:1f:5a:5c:b8:2e:5b:e7:04:11:f7:d5:a4:bc:e2:
                    59:6e:38:06:a4:70:bb:fb:ef:0d:06:d7:96:ca:fe:
                    17:b3:45:93:be:b6:2e:f4:8c:79:04:d1:5f:bb:8f:
                    47:71:e7:a8:2d:c8:2d:d3:f4:ad:2f:12:31:42:b3:
                    ba:ce:41:54:06:70:1c:92:b7:f4:d8:54:dc:9d:d1:
                    dd:2a:fe:44:ec:56:3e:d3:97:55:83:02:ee:54:49:
                    59:49:92:24:63:03:ee:07:4a:98:54:c4:79:9b:10:
                    4d:d0:40:4e:48:bf:08:c8:4b:26:c8:c4:1e:fc:d5:
                    76:8d:81:6e:56:b9:20:81:10:27:04:d3:3f:9c:44:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8A:00:20:B8:C8:EC:58:97:08:FD:04:23:49:F2:22:A4:20:F8:A1
            X509v3 Authority Key Identifier:
                keyid:24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/E21E90EE210D11F0934A7996DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f660::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:9e:9f:c3:82:10:51:44:4c:48:44:73:6a:e5:15:93:3e:
         cb:90:de:5a:94:93:c7:c6:07:8a:02:d3:4c:ce:92:00:08:c9:
         7c:48:81:02:4b:cf:25:22:b0:22:0a:8a:3a:ef:f0:0e:3b:47:
         fa:03:ee:c5:bd:84:b7:9e:8c:fc:9a:50:c0:fc:c3:f6:c1:25:
         84:03:76:6b:24:31:bf:87:7e:50:26:b5:aa:9d:2a:c4:92:a5:
         24:9b:e2:13:6a:0d:28:3e:fc:43:41:a9:97:6e:f0:00:8c:e7:
         86:3d:a2:bb:8e:38:68:7b:cf:bb:61:63:ed:06:f2:72:41:01:
         a7:09:0b:a8:d5:c3:b3:f6:fb:16:71:17:aa:7f:74:d5:2a:e4:
         82:c1:55:63:7b:52:4e:17:4f:57:38:fc:1a:1c:e9:68:1d:91:
         a3:2d:18:6c:53:23:76:5f:9d:37:ec:4e:fc:1b:8f:dd:0f:e5:
         5c:09:43:da:05:e9:23:38:bc:2b:bc:d5:29:9d:86:d7:c6:d2:
         75:32:7b:7f:74:a2:79:7c:ba:08:cc:06:6e:b1:42:d6:46:6a:
         2c:c7:7e:25:54:2c:44:8b:e4:d8:3d:ab:a5:5f:22:19:5c:1b:
         39:c1:08:58:ef:ca:d4:0a:91:0b:46:70:9b:1e:2b:94:8d:73:
         1a:b9:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----