Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD577885B4611F19C9429F8CE1D38B0.roa
File: CCD577885B4611F19C9429F8CE1D38B0.roa (raw, json)
Hash identifier: aPGwa3hMX849pERc+2SZ6VADXSBeuRQAZkpxEYP+Las=
Subject key identifier: 61:A7:25:A4:D4:69:7E:6E:EF:38:94:1F:6A:C1:DD:27:57:DD:29:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD577885B4611F19C9429F8CE1D38B0.roa
Signing time: Fri 29 May 2026 10:11:47 +0000
ROA not before: Fri 29 May 2026 10:11:42 +0000
ROA not after: Wed 01 Jul 2026 10:11:42 +0000
asID: 202656
IP address blocks: 156.233.9.0/24 maxlen: 24
156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.233.116.0/24 maxlen: 24
156.233.117.0/24 maxlen: 24
156.233.127.0/24 maxlen: 24
156.238.180.0/24 maxlen: 24
156.238.182.0/24 maxlen: 24
156.239.132.0/24 maxlen: 24
156.243.32.0/24 maxlen: 24
156.243.33.0/24 maxlen: 24
156.243.80.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.243.255.0/24 maxlen: 24
156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.174.0/24 maxlen: 24
156.246.175.0/24 maxlen: 24
156.246.179.0/24 maxlen: 24
156.246.180.0/24 maxlen: 24
156.246.181.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.183.0/24 maxlen: 24
156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.187.0/24 maxlen: 24
156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
156.248.21.0/24 maxlen: 24
156.248.23.0/24 maxlen: 24
156.249.100.0/24 maxlen: 24
156.249.102.0/24 maxlen: 24
156.249.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113334 (0x1bab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 10:11:42 2026 GMT
Not After : Jul 1 10:11:42 2026 GMT
Subject: CN=6a196663-36ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:a5:26:fc:8a:44:17:3b:06:e4:0e:e8:3e:
78:1c:b9:1e:98:ed:7b:db:e9:02:90:60:14:49:ad:
bb:9c:2b:fb:8e:c6:ff:63:0a:4a:87:65:2e:a5:83:
62:e9:d2:1b:ae:db:ce:9a:4e:39:6b:6a:cf:e9:29:
d5:bc:07:22:ee:2b:bc:0c:82:26:02:47:88:50:11:
68:fd:dd:8d:f7:34:f7:fc:03:9a:27:53:5a:f3:16:
eb:60:ec:04:f2:02:07:93:10:c9:0d:d2:00:65:16:
ef:8e:ef:26:7c:c0:20:54:a6:92:5c:fb:c8:df:dc:
a2:33:7c:b6:a8:27:2a:4c:50:d5:e3:60:d7:64:a9:
e1:98:f9:27:7f:08:a4:ba:e2:92:45:0b:50:66:e5:
6f:ad:f7:08:85:ab:4d:4e:51:54:fb:62:b4:56:12:
37:ce:93:1c:75:5c:76:68:e5:b4:da:60:b2:f9:cd:
f7:f7:f4:e6:00:51:92:ec:a8:7e:57:e8:b4:ad:c4:
ab:8e:64:ae:4f:3e:6d:d4:ba:e2:e4:8d:cb:f6:40:
fc:ad:d5:dd:5f:f6:15:aa:55:e0:20:35:13:2c:41:
6a:32:5d:43:35:9f:97:40:c2:d8:83:54:02:23:e5:
42:06:67:19:40:e0:5f:c0:ee:d9:b6:7a:b1:d0:26:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:25:A4:D4:69:7E:6E:EF:38:94:1F:6A:C1:DD:27:57:DD:29:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD577885B4611F19C9429F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.9.0/24
156.233.96.0/23
156.233.106.0/24
156.233.116.0/23
156.233.127.0/24
156.238.180.0/24
156.238.182.0/24
156.239.132.0/24
156.243.32.0/23
156.243.80.0/24
156.243.243.0/24
156.243.248.0/23
156.243.254.0/23
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.174.0/23
156.246.179.0-156.246.189.255
156.246.250.0-156.246.255.255
156.248.6.0/23
156.248.20.0/23
156.248.23.0/24
156.249.100.0/24
156.249.102.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:9c:44:ae:16:22:cc:20:58:1f:7e:b9:c1:f0:d7:d9:25:44:
0e:70:c0:ed:43:7e:70:64:1c:a6:36:63:a7:5f:be:83:f3:7d:
de:c8:b9:5b:af:6f:b4:88:04:44:9b:d4:2f:86:a2:f7:c2:58:
87:38:c3:45:78:17:1e:80:cf:8c:67:b2:42:9c:b1:ea:63:8a:
15:b1:9b:d0:bf:b6:a0:3d:46:57:46:ac:66:00:2d:a7:f1:8f:
10:34:47:52:1f:2c:36:df:df:9d:48:18:bf:07:44:25:1c:b1:
f7:68:ac:5a:4f:75:dd:04:28:99:58:b1:a8:97:e6:97:fe:5a:
24:f3:99:c0:39:c9:9b:05:e9:8e:9a:1a:af:c2:5f:da:cd:70:
31:7c:34:37:f1:62:ea:18:66:05:f3:1b:6f:bc:50:11:39:4e:
82:a7:84:7c:97:95:b9:cf:50:cb:82:44:ff:a7:c9:6e:46:34:
62:09:4a:d2:f5:ab:43:cb:ff:0e:f2:1c:14:ea:28:41:51:4c:
80:21:c3:29:a8:69:99:22:f8:a0:7c:35:d8:95:4b:f2:c3:11:
a2:39:6b:71:b7:08:bf:60:ce:eb:67:9e:b6:9c:16:db:7c:1b:
ed:1a:ce:54:53:80:5f:5f:59:10:28:d8:6c:82:8d:bc:89:4d:
a7:59:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:49 2026 by rpki-client