Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3A83D6097111F1876853A0DAE4EC9C.roa
File: EE3A83D6097111F1876853A0DAE4EC9C.roa (raw, json)
Hash identifier: cUQRNfFLqV3xu+7rMene6Kazkajj/lO4d4yUafgFIOo=
Subject key identifier: E5:0B:36:8B:15:4F:62:B6:80:95:89:25:87:38:63:3D:1D:C7:A9:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3A83D6097111F1876853A0DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 06:53:56 +0000
ROA not before: Sat 14 Feb 2026 06:53:51 +0000
ROA not after: Sat 21 Mar 2026 06:53:51 +0000
asID: 52468
IP address blocks: 45.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105836 (0x19d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 06:53:51 2026 GMT
Not After : Mar 21 06:53:51 2026 GMT
Subject: CN=69901c04-aaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:cf:42:dc:26:cf:59:76:bc:d4:6e:58:9d:
9e:15:f5:07:f3:31:76:ba:08:2b:d1:fc:80:22:88:
a2:64:c0:e9:ea:02:2a:66:41:2b:08:cb:1b:60:07:
0a:27:9d:96:a1:7e:2f:f0:14:24:f1:89:21:76:36:
a3:79:ba:3a:8f:8d:be:90:a5:ff:b2:d8:f9:73:e1:
b3:66:be:cc:1b:88:5d:48:aa:86:73:b8:4b:36:0b:
63:35:81:d6:5d:5c:46:8d:d1:55:f8:1f:0b:91:44:
ca:4b:cd:a7:cc:21:6a:82:51:e0:66:00:a9:71:f4:
15:17:95:85:32:87:d7:8d:f3:05:70:d8:2d:33:63:
85:2d:42:4f:df:ec:c8:52:20:a0:6a:65:6b:57:a0:
c2:1a:ff:1a:1d:35:c4:8b:bc:67:2d:7e:2f:e6:2b:
64:fc:f4:dd:95:b8:2d:20:54:80:71:09:3c:7d:41:
fc:dc:54:b4:16:38:5f:6f:18:89:a6:78:7d:6b:d3:
15:79:69:fe:29:ec:62:10:39:6d:a0:00:fa:e4:23:
7f:f6:40:28:47:68:32:83:8c:b8:8e:bf:bf:7f:42:
65:23:91:2e:4d:05:57:ec:f6:a2:d5:c4:70:81:67:
bd:17:a8:03:f6:55:82:b9:a8:46:bf:f4:e8:2b:77:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:36:8B:15:4F:62:B6:80:95:89:25:87:38:63:3D:1D:C7:A9:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE3A83D6097111F1876853A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8a:14:4f:79:81:f5:a8:98:4a:4d:4c:04:ed:c8:0f:e0:47:
4f:fd:2b:6d:a5:5c:44:2a:ad:9a:cb:bc:7c:f8:0b:9c:c0:32:
67:a9:50:bb:ed:c6:1b:36:d4:1e:5d:a3:d4:63:50:dd:ab:4e:
5b:a9:37:43:35:3d:f0:25:1f:a4:48:c2:3c:60:65:79:4f:99:
69:07:38:05:42:46:83:42:be:72:cb:0a:0f:05:cc:2d:1e:5d:
8b:2b:27:9d:e2:6a:9e:fa:d2:06:83:60:31:cf:92:81:b1:fb:
1c:30:3a:6f:d6:81:7a:54:f9:05:48:b3:1a:ae:23:cb:1c:18:
93:28:5b:95:59:f2:cc:b0:c5:43:b7:e6:04:81:d7:c9:dd:71:
34:c5:a1:4b:c2:b7:fa:93:0c:b9:b4:93:ed:1d:f5:48:70:a5:
70:78:33:70:bf:9c:5f:bf:7d:5e:78:35:7f:91:3c:79:05:e0:
0d:75:97:91:8d:60:ad:46:65:55:22:a1:89:86:e6:d8:72:ae:
40:5d:5b:93:37:be:cc:b0:7a:0b:82:a1:c2:d3:ae:9a:6f:05:
41:24:26:0e:43:a5:58:53:6c:84:20:5c:1b:0c:ca:c1:ac:ad:
9b:36:93:f5:1e:de:37:9e:27:e8:eb:52:d0:3b:7a:25:84:74:
50:c5:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:50 2026 by rpki-client