Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7099B1C8720711F1B05BE609CF1D38B0.roa
File: 7099B1C8720711F1B05BE609CF1D38B0.roa (raw, json)
Hash identifier: VIxFtT0NVY9r+QMk5/A3IC26v2/93twTBycG8JMzdU8=
Subject key identifier: FC:F1:9F:37:6B:41:E7:9F:76:3C:57:7E:BF:A9:22:E6:AF:94:B3:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7099B1C8720711F1B05BE609CF1D38B0.roa
Signing time: Sat 27 Jun 2026 09:06:11 +0000
ROA not before: Sat 27 Jun 2026 09:06:06 +0000
ROA not after: Sat 01 Aug 2026 09:06:06 +0000
asID: 215925
IP address blocks: 45.198.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114908 (0x1c0dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 09:06:06 2026 GMT
Not After : Aug 1 09:06:06 2026 GMT
Subject: CN=6a3f9283-526f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:97:fc:dd:fe:01:f2:ec:59:0d:72:e1:64:
9d:fd:67:97:cc:84:eb:a7:bb:20:7e:fa:32:7b:33:
7f:51:4b:1a:45:09:68:17:ed:ce:05:88:01:10:57:
57:ad:b9:f6:57:52:05:f5:df:3f:d3:d3:6d:1c:12:
c1:e1:fc:a9:9c:db:6e:df:7d:00:82:a7:d2:ce:d2:
87:fa:49:ab:55:55:a9:ba:ac:eb:7f:d2:a4:62:03:
6a:29:ff:55:16:01:27:d1:94:a3:92:9f:1e:d7:a2:
23:78:88:56:7c:71:c2:10:35:31:22:17:ae:e0:11:
c6:02:20:03:e5:1b:76:95:87:44:e7:74:6a:a3:8b:
f6:44:d5:33:01:19:33:3b:8e:ac:10:7f:b3:bd:ef:
33:01:6f:ca:e4:df:a3:79:f4:2b:77:a9:ab:e8:27:
99:2f:6d:86:9d:12:8f:d2:65:54:38:a0:ae:9b:dd:
d7:5d:d6:a0:ad:d4:84:7f:47:1a:c8:f9:26:4b:b0:
a4:a1:72:c9:06:f0:34:31:ca:2c:5f:6b:e6:66:37:
29:4b:ee:3a:fe:b6:fa:f1:8d:3c:4d:d9:fd:22:62:
08:39:c1:39:1a:70:20:95:49:84:74:d3:6d:23:4e:
a4:e7:7f:a1:63:80:f8:85:75:e2:bb:59:3d:f2:50:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:9F:37:6B:41:E7:9F:76:3C:57:7E:BF:A9:22:E6:AF:94:B3:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7099B1C8720711F1B05BE609CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.224.0/24
Signature Algorithm: sha256WithRSAEncryption
16:af:db:5e:14:2d:f3:0c:54:16:fd:4a:ff:83:aa:25:1e:f8:
82:eb:e7:f9:b2:dd:d0:5a:ad:2c:73:76:ad:4d:5d:01:91:82:
51:4e:bf:e5:18:44:ff:93:c1:e4:9f:a1:1c:fb:a8:8b:c7:c3:
4d:54:1c:a1:8f:fb:fb:6c:45:6a:2c:fa:60:74:71:b4:d9:e0:
ce:e2:f8:46:b9:7c:2b:79:c9:74:db:07:4e:c1:4c:2b:12:18:
4f:fc:68:f3:51:87:c2:38:ea:95:57:4f:71:dc:41:e3:c1:22:
9a:08:b4:21:05:bd:f1:db:f6:f2:48:da:48:4c:0c:78:65:5b:
ed:16:fe:3d:be:30:9c:3b:99:64:96:4e:0a:57:ff:99:8e:a0:
bd:b7:23:9b:1d:f8:bd:56:c2:7a:b7:93:0d:9d:b3:66:54:fd:
eb:6d:e8:f5:b2:65:df:3f:7a:0d:c8:2a:0f:c4:78:58:fd:1c:
97:c7:ac:e6:14:40:70:80:61:95:da:bf:34:ee:9d:29:f6:94:
34:6a:bc:b3:24:7b:45:8e:0c:01:fe:31:01:d5:63:68:ce:6f:
73:b1:46:aa:24:6b:b0:06:e6:27:38:5a:20:02:f3:38:70:86:
b5:60:2e:20:b1:95:c9:c9:17:a8:55:cb:4c:36:15:d6:f4:2b:
69:a9:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:01 2026 by rpki-client