Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC6B8E80730611F1B771FC12CF1D38B0.roa
File: DC6B8E80730611F1B771FC12CF1D38B0.roa (raw, json)
Hash identifier: FPItVBl3OkAJ3wOgsIXrUZrvyvcW8rOXh8rPZkr29f8=
Subject key identifier: B1:42:83:5D:B7:BB:24:AD:AF:4E:5B:24:0F:D4:7C:CA:D9:31:DD:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C16F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC6B8E80730611F1B771FC12CF1D38B0.roa
Signing time: Sun 28 Jun 2026 15:34:33 +0000
ROA not before: Sun 28 Jun 2026 15:34:29 +0000
ROA not after: Thu 28 Jun 2029 15:34:29 +0000
asID: 17561
IP address blocks: 45.196.109.0/24 maxlen: 24
45.207.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115055 (0x1c16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:34:29 2026 GMT
Not After : Jun 28 15:34:29 2029 GMT
Subject: CN=6a413f09-b48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:82:a9:7d:ad:85:1e:1f:05:20:17:39:9d:
88:65:cc:5f:a1:c3:af:c3:61:6c:3d:48:f7:af:6c:
15:73:d8:a4:33:ad:30:29:7c:60:be:43:2a:82:54:
c3:f6:1c:2b:06:54:46:24:8b:71:be:a6:1a:f7:a5:
02:c0:1b:e0:8c:ad:fc:cf:b0:54:ed:d8:96:12:a9:
60:c8:7a:00:a4:72:b2:68:db:67:ed:c5:fa:40:15:
2c:51:4f:71:02:13:2b:f9:a2:32:a9:87:69:36:11:
27:7a:27:70:5f:84:40:c6:d8:61:c5:fa:62:1f:d5:
3e:0d:98:e7:bf:04:6f:5e:66:95:3c:d0:40:ae:45:
ae:4a:39:bf:8e:a3:b6:fd:a5:66:fc:25:1f:32:80:
d7:d3:6b:b7:dc:f2:6a:aa:af:22:ba:9b:36:36:32:
f1:25:f8:bd:de:9e:3b:62:38:12:52:ae:08:51:d8:
5b:86:da:ce:a0:18:84:5e:94:08:fd:9f:0d:d8:05:
b5:7b:46:85:96:44:0a:60:ad:8c:dd:eb:5f:91:5d:
db:19:f5:be:c7:e3:2c:0e:25:c1:51:33:10:53:4c:
ab:51:bb:3f:67:28:77:6c:5a:b3:49:ae:ae:bc:58:
cb:44:9a:81:9a:f7:ea:32:83:9b:b0:b9:6b:d9:3c:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:83:5D:B7:BB:24:AD:AF:4E:5B:24:0F:D4:7C:CA:D9:31:DD:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC6B8E80730611F1B771FC12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.109.0/24
45.207.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f1:0c:10:e9:cb:9b:90:7b:c9:4f:44:eb:95:1f:54:69:bc:
60:c6:1b:85:ae:55:e7:91:0f:2f:ca:db:fe:7e:3f:94:1f:0e:
3f:a4:a9:b6:75:8b:90:2c:4b:07:68:b1:5a:73:b3:6e:7a:a6:
a7:ab:f0:99:09:25:16:49:2f:7f:bf:b2:b7:06:72:8e:2a:9f:
12:ad:33:00:b0:20:a9:ba:0a:bf:bd:5d:de:c6:e4:eb:f1:6b:
e3:71:7a:aa:fc:59:4a:36:6f:07:43:51:5c:a8:cc:d5:fd:65:
5f:74:e1:02:4c:1d:95:28:a7:9a:43:89:6d:17:99:32:94:ee:
3a:d4:05:4d:92:57:af:d4:70:bf:86:49:f3:f0:21:ce:cb:99:
19:1c:72:2e:5c:59:ca:e5:a3:80:7d:fd:9f:c0:04:1b:c0:44:
1b:01:9e:d9:80:c5:71:44:84:fb:b5:10:c3:78:25:6e:a6:3e:
28:2b:75:e2:df:8a:54:56:4a:ad:a0:15:64:24:ff:14:15:0a:
c6:4c:d5:ba:97:e8:9c:d1:8b:0e:d7:c0:68:55:a7:df:9d:b8:
80:96:db:e7:46:1b:90:da:b5:85:b2:67:1b:6e:49:ea:42:1a:
ce:b7:33:96:af:57:d6:54:0f:aa:d9:6a:4f:75:63:19:f1:50:
b2:3c:3d:40
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAcFvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI4MTUzNDI5WhcNMjkwNjI4MTUzNDI5WjAYMRYw
FAYDVQQDEw02YTQxM2YwOS1iNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt8mCqX2thR4fBSAXOZ2IZcxfocOvw2FsPUj3r2wVc9ikM60wKXxgvkMq
glTD9hwrBlRGJItxvqYa96UCwBvgjK38z7BU7diWEqlgyHoApHKyaNtn7cX6QBUs
UU9xAhMr+aIyqYdpNhEneidwX4RAxthhxfpiH9U+DZjnvwRvXmaVPNBArkWuSjm/
jqO2/aVm/CUfMoDX02u33PJqqq8iups2NjLxJfi93p47YjgSUq4IUdhbhtrOoBiE
XpQI/Z8N2AW1e0aFlkQKYK2M3etfkV3bGfW+x+MsDiXBUTMQU0yrUbs/Zyh3bFqz
Sa6uvFjLRJqBmvfqMoObsLlr2TwpkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFC
g123uyStr05bJA/UfMrZMd12MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQzZCOEU4MDczMDYxMUYxQjc3MUZDMTJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcRtAwQALc+pMA0GCSqGSIb3
DQEBCwUAA4IBAQB+8QwQ6cubkHvJT0TrlR9UabxgxhuFrlXnkQ8vytv+fj+UHw4/
pKm2dYuQLEsHaLFac7Nueqanq/CZCSUWSS9/v7K3BnKOKp8SrTMAsCCpugq/vV3e
xuTr8WvjcXqq/FlKNm8HQ1FcqMzV/WVfdOECTB2VKKeaQ4ltF5kylO461AVNklev
1HC/hknz8CHOy5kZHHIuXFnK5aOAff2fwAQbwEQbAZ7ZgMVxRIT7tRDDeCVupj4o
K3Xi34pUVkqtoBVkJP8UFQrGTNW6l+ic0YsO18BoVaffnbiAltvnRhuQ2rWFsmcb
bknqQhrOtzOWr1fWVA+q2WpPdWMZ8VCyPD1A
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:55 2026 by rpki-client