Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCFCED2A64D511F195F7770ECF1D38B0.roa
File: CCFCED2A64D511F195F7770ECF1D38B0.roa (raw, json)
Hash identifier: uKQoN9l7YjWbBcsYRcbTeC2q8xVUyPefxOpSisKgiR4=
Subject key identifier: CE:C2:63:70:B1:E4:37:3F:5E:32:28:FA:0F:A6:6E:96:3A:FB:00:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCFCED2A64D511F195F7770ECF1D38B0.roa
Signing time: Wed 10 Jun 2026 14:08:06 +0000
ROA not before: Wed 10 Jun 2026 14:08:01 +0000
ROA not after: Fri 17 Jul 2026 14:08:01 +0000
asID: 54801
IP address blocks: 156.229.128.0/19 maxlen: 24
156.239.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113888 (0x1bce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 14:08:01 2026 GMT
Not After : Jul 17 14:08:01 2026 GMT
Subject: CN=6a296fc6-36cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:11:4a:6c:74:27:b0:f3:65:39:f9:65:d3:
17:b4:43:30:bc:bd:ef:af:84:c9:47:a0:24:55:52:
7a:d5:9e:01:2c:ab:29:23:fa:05:e3:a4:91:63:89:
cb:e8:48:a9:2c:af:2f:98:cc:3f:b0:89:53:b4:d0:
fa:2e:38:7c:8b:33:ca:c6:fa:df:f3:7f:fd:40:c8:
79:eb:e1:c0:93:74:f1:ab:e6:84:40:0f:7e:e3:f1:
d7:1a:e8:a9:1a:4d:c7:8f:9d:47:3e:2b:14:1a:a6:
28:72:57:27:68:8b:ec:e5:3a:0d:1f:6e:03:36:87:
fc:d2:87:5e:43:1c:38:17:32:ab:25:ee:d0:cb:2d:
76:8f:66:12:7f:b7:66:6a:8e:62:ea:75:b9:73:2d:
65:dc:1a:12:a1:f9:21:77:e0:ec:54:f9:da:3a:64:
83:c3:b1:52:18:96:9d:92:bc:c8:ae:02:ba:b3:e9:
e6:32:18:a1:49:da:8d:31:54:dc:2e:b6:a4:0b:6c:
35:80:42:93:ad:5e:3b:d3:be:d7:66:94:b2:10:9f:
22:35:e5:8c:5b:99:68:a1:90:19:4d:ce:62:1d:69:
00:ba:1c:cf:f8:28:65:b0:54:f5:6b:bb:fb:13:76:
24:7a:6c:45:77:c1:1f:63:7b:78:9a:ff:da:1b:5e:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:63:70:B1:E4:37:3F:5E:32:28:FA:0F:A6:6E:96:3A:FB:00:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCFCED2A64D511F195F7770ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/19
156.239.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:2c:f3:c8:d2:1b:f4:0d:90:f5:0f:58:50:e2:06:55:a3:98:
55:84:6e:fa:18:40:91:05:4f:f4:64:13:80:5c:29:1a:07:1e:
50:9d:eb:fa:b8:b0:25:bf:64:d6:e9:a2:47:a9:21:d8:6a:a8:
89:04:3f:37:c6:fc:2b:fe:e8:8f:a9:a4:2e:e9:8e:56:c9:a5:
1a:fe:75:7c:11:a9:c8:2d:34:1b:60:56:ca:3e:e9:ab:a9:be:
59:62:d6:01:03:c2:89:0a:20:5e:fa:fe:a0:7a:7f:dc:98:3e:
9e:66:85:74:09:11:ff:0f:03:fe:21:d9:88:ae:4c:7a:29:4e:
c1:f2:12:18:a0:d4:6b:18:b6:46:81:66:af:78:1e:5d:9a:2f:
bc:a8:7f:f3:e8:2f:8c:e3:cd:a3:b9:22:4d:23:9c:c9:7f:2a:
66:3c:78:98:42:b2:31:a6:55:4c:87:f2:18:ff:4c:56:d3:d4:
c9:0e:5c:31:9a:86:1b:a4:0b:a9:83:76:96:a8:64:5b:98:fd:
10:9b:fa:7a:ff:67:d2:9c:0c:c0:a0:c3:82:cb:80:c3:3f:9f:
60:47:81:13:3d:d5:96:ab:fb:32:8b:5a:87:d6:6b:00:a0:d9:
f2:59:ae:e4:63:85:f4:6a:a1:16:00:56:10:a7:43:dd:06:e5:
81:41:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:47 2026 by rpki-client