Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148CB3BA44A511F1A1D4F6C1CE1D38B0.roa
File: 148CB3BA44A511F1A1D4F6C1CE1D38B0.roa (raw, json)
Hash identifier: tmuLhltRlLaTNgDkIT3yoYiOrRToKuTHNAZKptkpylM=
Subject key identifier: E5:60:46:EC:B9:05:D6:AF:B3:5E:65:7A:4E:25:87:9C:CD:AA:A5:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B046
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148CB3BA44A511F1A1D4F6C1CE1D38B0.roa
Signing time: Thu 30 Apr 2026 14:58:43 +0000
ROA not before: Thu 30 Apr 2026 14:58:38 +0000
ROA not after: Wed 10 Jun 2026 14:58:38 +0000
asID: 61254
IP address blocks: 45.196.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110662 (0x1b046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 14:58:38 2026 GMT
Not After : Jun 10 14:58:38 2026 GMT
Subject: CN=69f36e23-15db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:fb:93:54:2a:34:97:2f:fc:ff:24:7c:da:
88:e3:55:6a:10:71:90:db:d9:9f:51:b5:59:a2:76:
5f:cd:17:42:7e:f2:46:f4:06:fe:95:63:d9:88:42:
95:30:04:75:c4:75:16:00:b2:c3:da:61:3b:fa:7e:
5f:5c:50:3b:3e:da:29:45:8d:ec:91:67:17:99:c0:
ba:3a:12:29:e5:d2:7b:1c:c3:29:71:d3:8b:d4:6a:
07:fe:be:10:2e:ae:a8:12:f5:4c:d1:a5:b1:cb:e9:
ef:20:0c:de:c1:4a:1a:1a:d4:2a:5a:24:04:a4:72:
41:1e:54:e3:dd:24:fd:a1:f8:a7:08:02:b1:49:7a:
f1:f3:01:42:20:0b:e8:64:82:b1:1d:35:e4:83:2d:
e4:b0:d6:ec:b1:22:02:74:b9:ee:f1:13:bf:3f:24:
4b:ac:5b:20:26:0f:1d:ea:15:f9:7c:f0:cc:3d:91:
83:17:73:08:7b:63:09:da:fc:57:71:05:5d:76:f7:
99:57:0f:33:c0:76:0f:e3:8a:1d:d8:12:aa:da:8b:
5c:d5:8e:1a:fb:a0:4a:47:c7:4d:3c:e6:98:e4:33:
fa:c8:9d:3d:f8:d6:3b:57:50:c6:2a:4e:93:b9:c0:
ae:74:0e:70:90:7f:fe:53:08:3e:88:82:34:8d:6f:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:60:46:EC:B9:05:D6:AF:B3:5E:65:7A:4E:25:87:9C:CD:AA:A5:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/148CB3BA44A511F1A1D4F6C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4e:5b:3d:05:16:8e:18:67:f0:70:8c:ea:95:ae:9a:06:9b:
2e:d2:67:7d:e7:a0:95:ff:b7:a5:62:95:b5:99:e8:55:35:06:
c6:5f:1a:6b:fc:f3:9d:54:01:3c:44:40:17:9a:2b:00:dc:cc:
a0:c8:6d:5a:96:8e:f6:29:7f:71:ce:9c:85:23:90:b9:34:ec:
64:73:8b:5f:34:62:2f:ff:e2:dd:9f:b1:08:23:0a:92:24:9b:
d7:21:49:14:59:75:5f:04:31:bf:62:4d:d4:71:22:9b:00:c2:
15:b4:65:89:c7:2d:9a:61:d5:b5:b5:b2:a7:09:35:5e:cd:9f:
6e:f4:2c:bd:fa:cf:9d:49:62:13:72:5c:1c:e2:59:2e:95:e0:
9b:a9:99:99:59:9a:43:9f:5c:3b:ec:a1:43:49:f4:ae:2c:ac:
47:b5:e6:39:4c:f2:a2:ac:31:b6:8b:9a:24:ab:37:04:e3:ee:
09:21:af:dd:bd:3a:ad:e3:4e:4e:cd:a9:b9:ed:ef:1c:f8:a0:
a9:7c:5b:ab:ba:0a:03:44:69:37:66:d7:ec:cf:2d:49:67:18:
47:e6:19:3d:e2:a6:a4:22:65:45:78:d4:da:7a:6c:a9:83:b9:
d6:76:ce:00:a1:83:e5:64:9a:68:a3:59:b0:35:17:54:a4:d0:
4b:b5:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:53 2026 by rpki-client