Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/795D8BF06DA111F19D6015C1CE1D38B0.roa
File: 795D8BF06DA111F19D6015C1CE1D38B0.roa (raw, json)
Hash identifier: zDneGMVutcu9TheJqlfZGnLf9qQWwxGhMVGEL5SHo5s=
Subject key identifier: 33:C2:65:C3:A1:C1:5E:8F:5A:81:DA:E5:7D:AA:46:B8:56:48:C8:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/795D8BF06DA111F19D6015C1CE1D38B0.roa
Signing time: Sun 21 Jun 2026 18:46:12 +0000
ROA not before: Sun 21 Jun 2026 18:46:08 +0000
ROA not after: Tue 21 Jul 2026 18:46:08 +0000
asID: 52468
IP address blocks: 45.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114517 (0x1bf55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 18:46:08 2026 GMT
Not After : Jul 21 18:46:08 2026 GMT
Subject: CN=6a383174-f408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:6a:60:82:21:42:76:03:b5:18:0a:7c:e7:
cd:6f:4d:21:59:91:67:da:cf:e9:49:41:ec:95:b9:
b8:7d:7b:f8:81:07:1f:85:23:85:b6:d9:b6:d8:f6:
29:6e:df:4f:58:03:5a:97:0c:cd:76:16:13:5e:cd:
d7:11:ed:78:09:92:e3:9e:88:6f:33:c0:e9:35:40:
e3:a7:ea:62:e2:fd:5f:18:d6:b0:1e:28:fa:fd:b5:
a8:86:29:6d:9c:fc:b6:86:56:a2:c6:c9:80:f3:30:
0f:0f:31:1b:5a:92:04:d3:20:e3:9a:e3:c3:34:75:
e0:bb:65:ea:c8:4b:10:2c:3a:7e:7c:98:5d:d9:49:
f5:32:98:72:e6:05:95:14:0d:85:38:0c:08:5e:e8:
39:5b:84:30:e0:59:2c:87:97:31:cc:72:d6:b4:52:
e4:81:3e:75:56:50:72:8c:1b:82:c8:86:a8:b4:22:
7d:9e:68:27:9e:73:66:b6:6d:c4:70:3d:80:4a:24:
5c:96:fd:8a:6d:9e:cb:3c:79:99:58:c3:a5:0e:3c:
98:8e:1a:6d:a9:8b:ee:31:93:cb:03:bd:c7:0d:df:
6f:01:ac:da:88:f5:fe:7e:1b:b1:94:0a:88:61:13:
9c:f3:ff:cb:fb:4a:b7:14:68:d5:01:9c:a8:89:bd:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:65:C3:A1:C1:5E:8F:5A:81:DA:E5:7D:AA:46:B8:56:48:C8:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/795D8BF06DA111F19D6015C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:af:a1:71:cf:89:60:dd:7b:4a:62:2b:f0:58:5d:bd:c1:08:
cf:fc:11:67:77:34:df:bb:ba:f7:f8:c6:1b:84:29:20:fb:c6:
a5:8c:8e:bd:ef:00:f4:42:09:17:da:a0:66:2f:64:36:77:79:
d6:1f:43:68:6f:81:a7:aa:81:a3:bc:de:7d:61:7f:2f:39:fb:
c9:75:61:08:60:5f:38:c7:c3:4b:33:fc:2b:5a:78:dc:bf:28:
57:c1:44:41:78:d1:be:17:5a:d1:62:8d:22:3c:4a:32:89:f9:
40:1d:43:d2:f3:20:0f:38:e9:ee:e4:24:bf:6b:c8:3f:79:97:
74:02:e8:df:2a:b8:60:91:ff:68:bd:0e:ae:e7:a7:18:f8:41:
40:2a:43:cb:9c:1f:63:fa:91:47:e0:d1:e8:2b:f8:b0:7c:1a:
69:98:21:9b:44:31:a8:a7:f9:f1:6b:7b:72:38:65:26:1f:b5:
75:94:1f:b6:54:f2:64:12:75:06:ae:8a:b1:28:b1:a9:b5:74:
eb:64:e5:1c:27:7d:6c:fa:df:51:0d:1e:33:db:1f:e4:54:c9:
fb:53:0b:63:3c:14:7a:8d:02:f3:6f:a4:87:c9:e8:5e:3c:1c:
73:3f:dd:c2:0d:08:13:14:f5:a0:45:87:79:4b:f2:50:98:4b:
2b:9a:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:05 2026 by rpki-client