Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95ED48C64EE511F1B735CD18CF1D38B0.roa
File: 95ED48C64EE511F1B735CD18CF1D38B0.roa (raw, json)
Hash identifier: tDdjNSsvdQB9srXPOrADMm8brUMYPCoEz3r6q1sMrk0=
Subject key identifier: 27:A4:51:4A:6D:97:80:CA:DF:61:D6:7A:FD:FC:24:19:00:62:9D:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B451
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95ED48C64EE511F1B735CD18CF1D38B0.roa
Signing time: Wed 13 May 2026 16:05:40 +0000
ROA not before: Wed 13 May 2026 16:05:32 +0000
ROA not after: Sun 28 Jun 2026 16:05:32 +0000
asID: 16125
IP address blocks: 45.194.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111697 (0x1b451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 16:05:32 2026 GMT
Not After : Jun 28 16:05:32 2026 GMT
Subject: CN=6a04a154-4b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:76:5a:b9:92:96:ef:35:73:e3:4a:c1:8a:
95:f2:9b:1f:7d:b0:74:01:0e:67:ad:ce:63:52:ba:
b7:bb:0d:93:ee:c1:0a:40:a9:03:95:80:75:fc:d9:
33:dc:5e:46:c8:be:ca:cf:96:ec:89:fb:9d:4d:ad:
eb:01:e8:c6:3e:6c:54:f8:bf:40:9d:47:1f:02:91:
0e:f1:e1:fe:5b:ac:9d:4d:8e:42:a5:1b:a7:24:a2:
19:55:fe:9b:eb:48:d2:2b:58:5c:e8:a1:f1:1d:24:
dd:c6:bb:33:f0:09:f9:9f:12:bd:c0:d2:39:ae:2f:
2f:3f:0f:ce:a3:be:06:53:cf:ac:73:3a:3f:97:19:
cf:38:79:b9:54:f7:5a:7c:70:df:3a:78:98:b9:ff:
e7:e7:10:b0:0f:c8:37:05:06:e0:11:99:01:d2:e8:
1f:ec:69:d5:56:f1:ed:c4:82:0a:34:88:c2:de:a5:
05:dd:e7:1f:49:00:9c:25:eb:e5:d6:b7:b3:e4:c7:
40:9a:44:80:e7:cf:43:78:ff:50:0a:20:fc:61:9e:
7a:6b:2b:0b:0d:46:e3:3c:d6:cb:90:bc:9f:88:e9:
28:70:dc:2e:8d:aa:80:a0:08:76:f4:ac:27:e4:5b:
8e:8e:e5:bd:2e:bd:6f:8f:d3:d3:34:a3:a7:8e:a4:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A4:51:4A:6D:97:80:CA:DF:61:D6:7A:FD:FC:24:19:00:62:9D:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95ED48C64EE511F1B735CD18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:4b:a1:25:48:4a:e2:ab:a8:aa:6a:de:30:11:77:bb:17:c4:
32:e3:5a:20:78:67:18:3e:a8:d7:d0:86:95:1e:df:37:f2:3e:
90:0e:a3:ca:fc:6d:70:68:28:83:29:8d:72:1a:fd:06:bb:1d:
a8:b6:6b:d2:f4:80:71:80:b2:96:29:d2:60:60:1d:91:97:5b:
e1:c1:4f:7f:74:a7:cf:b2:f1:ac:a7:bb:f9:92:09:76:b0:e5:
de:67:b0:c7:2e:3c:a8:c3:5e:cc:ea:5c:46:7d:4c:df:a8:3d:
95:b6:12:94:56:8d:d5:21:80:e3:6b:33:9b:ad:97:01:47:11:
34:10:98:85:3b:06:37:bf:3a:30:ad:a7:b1:34:d1:6a:b6:c9:
58:e6:03:66:5a:8b:c4:b4:0e:5b:ee:c3:5d:82:f5:75:0b:1f:
72:b0:0a:cf:28:a5:d6:a8:d6:06:7a:ab:ce:51:42:80:cb:df:
7f:ce:65:fc:12:cb:53:12:e1:92:2d:e2:2b:a2:61:f0:bf:76:
c5:12:88:81:d1:a1:f8:5e:f6:9f:43:ca:0c:1c:2f:f5:ae:15:
ac:9a:6d:f2:df:01:9d:10:55:27:10:22:e0:a1:e8:b5:81:45:
1c:83:30:05:02:1e:87:da:fa:fe:61:d9:72:e4:a3:58:96:af:
2a:4e:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:09 2026 by rpki-client