Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14ADF6964A0511F1BC8BD1F7CE1D38B0.roa
File: 14ADF6964A0511F1BC8BD1F7CE1D38B0.roa (raw, json)
Hash identifier: 2hNkBTy6/Vgzli60neIZvvPTef5+p7t180yDEUVzl7U=
Subject key identifier: EC:C6:FD:8B:92:B6:D6:1E:C4:18:3A:AE:39:86:C4:BB:66:F0:CD:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B23A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14ADF6964A0511F1BC8BD1F7CE1D38B0.roa
Signing time: Thu 07 May 2026 11:08:31 +0000
ROA not before: Thu 07 May 2026 11:08:27 +0000
ROA not after: Wed 10 Jun 2026 11:08:27 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111162 (0x1b23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:08:27 2026 GMT
Not After : Jun 10 11:08:27 2026 GMT
Subject: CN=69fc72af-2f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:de:2b:36:9e:1c:dc:cf:4c:76:17:21:be:
da:b4:35:06:64:94:36:04:c5:07:7c:08:42:7c:82:
f4:21:7c:e3:11:76:dd:eb:aa:ec:92:c1:b8:33:47:
d2:6e:41:a6:a3:fa:f1:b0:20:54:dd:14:70:a0:35:
b4:3d:59:4f:48:05:a1:74:da:6a:4b:84:fc:4e:93:
7a:bb:d5:61:7a:a4:7b:45:0e:b3:bc:16:b2:d3:8f:
7d:05:cf:55:c1:5d:7b:ab:89:5a:d1:84:6a:32:4f:
f0:5d:3f:3a:49:e4:36:d6:46:a1:dd:0f:23:3d:08:
c9:bd:31:5b:c5:1c:9f:56:11:67:80:1c:d1:a8:b5:
43:51:0f:81:1e:f5:a6:76:a2:05:ee:26:8e:d2:5c:
4a:e0:f7:d0:8c:1c:12:b6:8d:a6:bd:9b:18:92:e9:
ed:c4:f2:a7:d6:9f:5b:c5:41:21:31:c0:ae:83:7d:
2b:df:8f:34:8e:03:ff:b3:d6:8d:83:da:0b:13:f1:
d8:57:04:19:10:78:7e:47:33:bc:c9:33:06:d5:d8:
46:74:5d:5d:a0:5d:9f:0d:a8:e2:ad:b2:da:70:b8:
67:24:71:6a:e9:15:cb:d2:2f:06:2d:ba:a3:9c:8d:
ce:16:03:81:82:0e:81:0f:00:e9:79:b4:7e:5e:f7:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:FD:8B:92:B6:D6:1E:C4:18:3A:AE:39:86:C4:BB:66:F0:CD:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14ADF6964A0511F1BC8BD1F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
99:d0:9d:8c:e7:06:d8:a8:c4:fa:37:cb:3f:96:de:c7:09:2b:
cd:63:20:06:cc:7c:82:f1:2d:6e:e2:0c:1e:53:6d:48:82:4e:
1f:42:27:48:f7:b1:52:82:96:75:71:f9:91:ac:cd:02:db:ac:
6a:53:f1:1b:c3:a5:ee:75:12:81:33:c8:37:19:f2:d0:76:69:
1b:6b:7b:cc:20:a8:b9:0a:c7:a4:fb:1e:a1:c0:5a:b9:11:aa:
ef:76:fd:1c:6f:10:f5:37:6b:b4:4c:f5:f2:20:49:b4:de:be:
b4:27:11:a2:99:d1:b2:d2:70:7a:7d:f8:ad:9c:96:cc:4b:0b:
8b:bb:28:1b:9f:66:e0:1b:59:f7:64:57:1e:64:0d:14:66:50:
e5:b2:30:51:ee:16:db:21:fe:cc:36:87:6d:09:1d:3a:85:7b:
0c:24:d5:ad:e6:fc:aa:11:c6:d9:a2:2a:1c:e5:b5:03:0e:38:
87:75:48:91:2e:64:b3:5a:ef:81:71:10:9a:c1:33:c5:95:92:
8f:4c:72:0b:94:04:81:f4:59:43:48:39:ce:f2:ac:ed:56:ef:
fd:c4:ee:b4:0f:87:fc:c8:a6:b4:bb:28:f1:f2:87:55:0d:ec:
a9:8a:b6:b7:9d:a3:e8:a3:c4:28:ce:63:19:74:be:ce:ab:d3:
c0:86:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:17 2026 by rpki-client