Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC2F60B6716511F19505AAADCE1D38B0.roa
File: CC2F60B6716511F19505AAADCE1D38B0.roa (raw, json)
Hash identifier: TVmnaZepkYO0sxxZDsdRmO4B5c3FCisSXdxUGLkh56Q=
Subject key identifier: 48:9D:63:2F:97:28:EF:9E:FE:06:EB:E3:1A:0D:F0:C5:69:D7:32:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC2F60B6716511F19505AAADCE1D38B0.roa
Signing time: Fri 26 Jun 2026 13:49:06 +0000
ROA not before: Fri 26 Jun 2026 13:49:01 +0000
ROA not after: Thu 30 Jul 2026 13:49:01 +0000
asID: 9304
IP address blocks: 156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114851 (0x1c0a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 13:49:01 2026 GMT
Not After : Jul 30 13:49:01 2026 GMT
Subject: CN=6a3e8352-dd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:7f:8a:5c:80:5d:c9:6c:3e:34:3c:30:76:
f8:47:ac:e6:ba:6f:28:22:69:0a:38:df:be:3b:36:
ca:2e:3e:00:a3:66:10:25:bf:a8:44:c1:46:9e:9a:
70:a4:56:1c:e7:48:ac:e5:ab:c4:ae:dd:2c:1c:3a:
95:42:e2:38:6e:dd:ac:5e:6d:0c:b0:a6:59:be:5e:
c6:a3:a9:8b:3c:55:3b:ee:88:0d:58:e4:f7:7e:c0:
c9:12:5a:1d:5d:54:ea:bc:7a:94:b9:53:24:15:e8:
8b:50:a9:4b:09:1f:12:e2:4d:86:5b:58:61:fd:f8:
c9:08:45:44:5c:15:f3:37:2b:65:45:7f:23:5a:97:
fb:ed:67:4d:3e:24:2f:26:5e:42:47:8b:26:90:a7:
55:6e:93:13:6b:ce:d1:68:1c:fa:06:e9:5e:42:38:
66:e7:2b:14:2b:d7:3c:26:f9:8d:bf:58:b9:fa:9a:
da:8c:16:fe:2d:24:28:bf:fd:c9:02:14:c8:f9:58:
4d:9c:12:2a:4d:57:a4:ec:ef:ad:52:7d:a5:33:79:
1e:65:40:f0:f4:5a:23:e7:4b:76:5a:2e:86:33:b6:
93:58:05:79:b3:a4:f5:bb:41:b9:79:fe:f5:c1:55:
19:b5:cb:e4:91:f7:7c:2c:53:04:33:27:94:3d:90:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:63:2F:97:28:EF:9E:FE:06:EB:E3:1A:0D:F0:C5:69:D7:32:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC2F60B6716511F19505AAADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.249.162.0/24
156.249.166.0/24
156.249.170.0/24
156.249.180.0/24
156.249.187.0/24
Signature Algorithm: sha256WithRSAEncryption
21:40:17:c7:4e:c1:28:50:54:b0:7a:70:78:9a:a0:17:fc:8e:
58:9a:b3:a8:a0:88:18:30:dd:f2:af:f8:87:a1:22:20:73:64:
38:68:a8:14:1b:c8:e9:e3:17:0c:12:23:8c:53:5c:08:c4:79:
d1:6e:7a:0b:ba:ae:2c:ba:ba:34:da:dc:a5:02:e8:49:de:63:
0d:81:82:3f:06:5a:2c:b3:6e:b6:3d:71:f5:23:7f:bc:72:ee:
59:fd:84:68:b6:79:76:db:2e:77:ad:de:35:f4:a8:9f:a2:cf:
61:cd:82:4a:ee:c4:7c:b4:d8:13:c4:60:ec:7d:c9:c8:98:a2:
5b:b3:28:f7:e6:8b:61:24:39:0f:14:4b:7d:e6:93:a2:6d:54:
7e:c0:61:b2:c3:c8:6c:0a:d3:f1:3e:6a:06:24:f9:f0:21:92:
73:be:dc:88:7d:c3:d2:4f:03:c7:e1:1e:f3:35:6d:ff:64:14:
00:b4:a7:eb:02:0a:4c:51:4b:ad:a2:bc:1e:04:2a:d4:9e:a4:
08:d9:50:51:69:1e:1e:74:63:06:1f:48:49:bf:34:0c:4b:c0:
69:ab:af:0a:d4:21:5e:f8:d1:04:bf:57:b2:0e:25:66:c8:a9:
be:7a:8b:61:71:19:a7:d6:74:c9:90:bc:2b:3b:1c:f9:9c:8e:
48:1e:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:41 2026 by rpki-client