Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa
File: C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa (raw, json)
Hash identifier: f7+/OwcLs2vETrfnT8wudo6+umbH7FS0gnrek0hKon0=
Subject key identifier: F2:5B:A5:B1:96:10:FF:9C:6A:AE:47:06:14:DB:09:BF:04:58:4A:D0
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 03E9
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 10:17:03 +0000
ROA not before: Tue 07 Oct 2025 10:16:55 +0000
ROA not after: Tue 31 Dec 2030 10:16:55 +0000
asID: 15964
IP address blocks: 195.24.192.0/19 maxlen: 19
195.24.192.0/24 maxlen: 24
195.24.193.0/24 maxlen: 24
195.24.194.0/24 maxlen: 24
195.24.210.0/24 maxlen: 24
195.24.211.0/24 maxlen: 24
195.24.212.0/24 maxlen: 24
195.24.213.0/24 maxlen: 24
195.24.215.0/24 maxlen: 24
195.24.216.0/24 maxlen: 24
195.24.217.0/24 maxlen: 24
195.24.219.0/24 maxlen: 24
195.24.220.0/24 maxlen: 24
195.24.222.0/24 maxlen: 24
195.24.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Oct 7 10:16:55 2025 GMT
Not After : Dec 31 10:16:55 2030 GMT
Subject: CN=68e4e89f-baf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:2c:13:82:c7:1a:fa:7e:90:6b:f4:b6:a8:
56:e7:01:05:27:66:f2:0e:af:95:d6:13:d8:bf:82:
d0:1b:ea:24:93:21:fb:06:77:67:73:3c:a4:a5:b3:
ff:55:97:02:70:37:b2:41:3c:93:aa:31:7d:be:73:
92:08:f2:73:39:84:f3:a3:26:45:55:5b:65:92:38:
45:c0:35:8b:48:47:57:6c:8d:80:51:a7:83:4c:80:
6b:4e:99:f4:a7:f2:39:85:cd:c0:eb:b4:91:6b:07:
d7:24:7d:b4:23:fc:bb:1c:fd:25:39:d7:3a:33:09:
69:98:20:0b:65:bf:a3:d1:4a:79:34:c6:46:1a:1d:
0a:44:94:fa:08:57:ab:1e:0b:a6:5f:25:fb:26:69:
14:e4:43:53:47:5b:9d:95:b8:b0:bd:cc:a4:78:ab:
57:65:05:79:50:4b:30:83:c0:3b:16:5a:3f:88:64:
fb:a1:a3:8f:b7:90:ba:d9:da:95:f3:93:9d:5a:f3:
0c:7e:e1:cf:df:0d:ba:64:e1:e1:72:c9:1e:f5:f3:
61:9b:48:3b:b8:44:78:2c:c9:92:d2:39:b0:39:27:
15:3d:a7:54:f6:cf:43:bc:89:29:01:8f:22:a8:c6:
24:97:f8:c4:0f:80:c3:99:af:e3:34:89:1b:9c:24:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:A5:B1:96:10:FF:9C:6A:AE:47:06:14:DB:09:BF:04:58:4A:D0
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.24.192.0/19
Signature Algorithm: sha256WithRSAEncryption
79:63:5a:71:ff:87:6e:57:ec:4b:6e:fc:b1:bc:1f:17:b8:74:
5b:aa:6d:55:f9:33:12:04:a9:47:c5:73:d5:c9:57:09:ba:8f:
13:df:8c:81:25:8d:5e:89:af:2c:3a:4a:d7:90:dc:ee:b1:0b:
39:8f:f3:7d:e4:da:a9:a9:62:c1:54:b6:de:37:1a:a5:9d:c5:
33:58:3d:52:58:7f:16:a7:44:75:82:4e:22:1b:8c:9a:3e:91:
70:d8:93:96:03:d2:9b:fd:e5:a2:fa:6b:08:71:f7:49:ec:f9:
0d:2d:8d:7e:ac:c3:da:da:80:5d:b8:22:96:d4:58:12:a3:d9:
47:eb:87:1e:0a:7c:4f:8c:71:d4:be:71:9a:01:c7:cf:ff:9e:
95:2b:d0:6d:da:57:7f:52:a1:cc:ee:8b:a6:c8:39:55:03:56:
cf:71:1f:13:f6:67:6b:da:78:82:ec:c7:7c:f4:28:13:2d:39:
16:46:d6:41:2e:70:f8:d6:14:4d:cd:26:b0:b8:ea:75:d0:64:
84:6a:72:61:0f:b9:ba:6e:e1:9c:47:65:5a:17:3c:a0:e3:ec:
2d:d8:69:8a:2f:40:85:6a:10:56:03:67:e1:55:2f:00:75:49:
f5:d6:3e:0c:45:42:53:e4:44:f2:38:a1:2a:a7:76:33:f3:95:
64:4e:49:a6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNSSTExMC8GA1UEBRMoRENGRUEzODQ3NzIyRDJGRUM3QTAzOUU5OTAzOEY3
NTM4MjU5RDAzMTAeFw0yNTEwMDcxMDE2NTVaFw0zMDEyMzExMDE2NTVaMBgxFjAU
BgNVBAMTDTY4ZTRlODlmLWJhZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA6iwTgsca+n6Qa/S2qFbnAQUnZvIOr5XWE9i/gtAb6iSTIfsGd2dzPKSl
s/9VlwJwN7JBPJOqMX2+c5II8nM5hPOjJkVVW2WSOEXANYtIR1dsjYBRp4NMgGtO
mfSn8jmFzcDrtJFrB9ckfbQj/Lsc/SU51zozCWmYIAtlv6PRSnk0xkYaHQpElPoI
V6seC6ZfJfsmaRTkQ1NHW52VuLC9zKR4q1dlBXlQSzCDwDsWWj+IZPuho4+3kLrZ
2pXzk51a8wx+4c/fDbpk4eFyyR7182GbSDu4RHgsyZLSObA5JxU9p1T2z0O8iSkB
jyKoxiSX+MQPgMOZr+M0iRucJCE3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8lul
sZYQ/5xqrkcGFNsJvwRYStAwHwYDVR0jBBgwFoAU3P6jhHci0v7HoDnpkDj3U4JZ
0DEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIyNDY4LzNQNmpo
SGNpMHY3SG9EbnBrRGozVTRKWjBERS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzNQNmpoSGNpMHY3SG9EbnBrRGozVTRKWjBERS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIy
NDY4L0M0NUZGQjg0QTM2NjExRjBBM0REQTBDNURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXDGMAwDQYJKoZIhvcNAQELBQAD
ggEBAHljWnH/h25X7Etu/LG8Hxe4dFuqbVX5MxIEqUfFc9XJVwm6jxPfjIEljV6J
ryw6SteQ3O6xCzmP833k2qmpYsFUtt43GqWdxTNYPVJYfxanRHWCTiIbjJo+kXDY
k5YD0pv95aL6awhx90ns+Q0tjX6sw9ragF24IpbUWBKj2Ufrhx4KfE+McdS+cZoB
x8//npUr0G3aV39Soczui6bIOVUDVs9xHxP2Z2vaeILsx3z0KBMtORZG1kEucPjW
FE3NJrC46nXQZIRqcmEPubpu4ZxHZVoXPKDj7C3YaYovQIVqEFYDZ+FVLwB1SfXW
PgxFQlPkRPI4oSqndjPzlWROSaY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:55:04 2025 by rpki-client