
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FC363634B511F1BAE2DED5CE1D38B0.roa
File: 14FC363634B511F1BAE2DED5CE1D38B0.roa (raw, json)
Hash identifier: +2MA3jCYdtuYftaCcTYWx2xW4dadb7vHmisD+YzLqvU=
Subject key identifier: 0B:6E:DE:32:43:93:DA:46:2C:B0:64:C5:45:B5:02:DB:0E:72:50:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FC363634B511F1BAE2DED5CE1D38B0.roa
Signing time: Fri 10 Apr 2026 08:12:57 +0000
ROA not before: Fri 10 Apr 2026 08:12:53 +0000
ROA not after: Sun 17 May 2026 08:12:53 +0000
asID: 54801
IP address blocks: 45.197.1.0/24 maxlen: 24
45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.199.137.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109472 (0x1aba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 08:12:53 2026 GMT
Not After : May 17 08:12:53 2026 GMT
Subject: CN=69d8b109-54c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:35:60:36:99:f4:19:eb:06:5a:d8:18:2d:
09:68:aa:70:c5:cb:99:3d:66:6e:93:84:11:04:35:
9e:45:fa:1e:90:ba:77:ba:13:3e:35:2e:c2:d0:f3:
69:9c:8d:4b:ea:9d:03:29:96:1f:8e:e4:11:20:c2:
00:4d:20:09:bd:2d:d0:b0:91:10:dc:10:6d:48:5d:
6c:7e:f6:c4:e9:cb:52:60:3f:d8:6c:b7:3e:5f:a0:
c8:b3:48:f2:7a:21:ac:6d:36:47:12:3e:6d:da:14:
68:fb:50:8d:8d:75:db:38:4f:7a:aa:19:49:6a:6a:
12:ba:99:9d:1b:fe:c1:d4:86:07:6a:6e:24:32:e3:
c1:6c:a1:68:00:5a:ab:94:24:70:17:de:4b:d4:52:
67:ec:4e:70:fd:14:c4:b2:fa:6a:cd:3b:1a:46:e5:
78:b4:21:46:79:5f:2c:97:78:d6:f5:e0:1d:d7:fb:
d8:87:df:b9:29:1f:77:06:92:e1:24:de:04:d5:df:
23:f6:45:5f:14:94:47:29:7f:c7:5b:87:5a:4f:4f:
75:24:fd:30:33:dd:af:9d:1c:4f:37:c8:31:3a:0d:
4b:7e:6e:68:56:e4:b4:ed:77:ff:6f:4c:90:75:b2:
7e:08:48:9b:a7:f1:e9:b7:aa:2c:de:7a:af:26:8e:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6E:DE:32:43:93:DA:46:2C:B0:64:C5:45:B5:02:DB:0E:72:50:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FC363634B511F1BAE2DED5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.1.0-45.197.2.255
45.197.4.0/23
45.199.137.0/24
45.199.191.0/24
Signature Algorithm: sha256WithRSAEncryption
90:34:d4:6c:35:95:c8:c7:2d:a9:1f:84:21:f8:ec:ae:8c:99:
45:ac:1e:fe:6e:6c:47:89:41:64:18:f4:2d:87:98:c8:11:9d:
ed:c7:4e:ae:a9:49:6f:ec:1d:14:e4:61:3f:44:b1:9b:a6:63:
86:ed:e0:c7:96:bf:af:65:20:f1:00:8d:9f:60:fc:08:39:44:
cd:67:f4:51:65:6f:fc:23:d3:7c:9c:c0:12:af:16:f1:fb:98:
ba:8e:5d:6e:70:96:39:7e:93:6b:97:0d:34:26:b8:90:f8:70:
d7:b9:3e:98:dc:7c:97:97:1f:d5:3d:60:fc:41:24:aa:34:97:
1d:95:6c:39:19:ad:ca:0c:ad:24:48:40:c5:57:ea:17:31:4a:
a7:16:1c:99:8a:94:12:7b:f7:fa:4c:ee:b9:49:20:0a:d5:5c:
bf:97:39:dc:56:3b:66:70:56:df:31:c9:a3:52:87:91:d6:ec:
30:1f:b7:5b:2e:5c:fe:75:ce:c6:95:1b:07:9d:58:37:88:2c:
65:a3:4d:ea:d6:fe:94:d5:57:05:26:f4:cd:99:71:34:8a:f7:
51:9a:1a:dd:fd:b0:b1:e1:2d:d1:87:56:33:fc:f6:f0:a9:95:
71:e7:75:8a:53:ed:64:3e:ee:da:d4:be:13:71:5c:1b:aa:93:
b5:e0:81:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:36 2026 by rpki-client