Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6B61C6365D11F18B7CC3F7CE1D38B0.roa
File: CC6B61C6365D11F18B7CC3F7CE1D38B0.roa (raw, json)
Hash identifier: zlH450795QwqLwLIOPAGmGkv8GIL/Bfxe1xc1Td2PS4=
Subject key identifier: D1:CD:55:EA:3C:E7:27:E8:C8:41:14:99:5E:BD:DB:16:6B:D4:AE:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6B61C6365D11F18B7CC3F7CE1D38B0.roa
Signing time: Sun 12 Apr 2026 10:53:12 +0000
ROA not before: Sun 12 Apr 2026 10:53:06 +0000
ROA not after: Thu 12 Apr 2029 10:53:06 +0000
asID: 17561
IP address blocks: 154.214.140.0/24 maxlen: 24
154.214.141.0/24 maxlen: 24
154.214.142.0/24 maxlen: 24
154.214.143.0/24 maxlen: 24
154.214.144.0/24 maxlen: 24
154.214.145.0/24 maxlen: 24
154.214.146.0/24 maxlen: 24
154.214.147.0/24 maxlen: 24
154.214.148.0/24 maxlen: 24
154.214.149.0/24 maxlen: 24
154.214.150.0/24 maxlen: 24
154.214.151.0/24 maxlen: 24
154.214.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115900 (0x1c4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 10:53:06 2026 GMT
Not After : Apr 12 10:53:06 2029 GMT
Subject: CN=69db7998-5692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:70:09:a0:73:4f:f2:4f:d2:7a:05:7f:66:
f9:7c:d2:b4:37:bb:0a:a3:8f:e9:8a:e4:0e:ff:0d:
6e:9d:ef:12:1b:e2:a5:00:e9:df:9a:ae:7f:58:6d:
25:ee:5f:c2:dd:a6:8b:eb:65:2c:9b:7b:dc:25:43:
6f:0e:ed:fb:ed:5b:21:2f:04:1e:e7:0e:89:e3:6d:
a5:f0:fa:b0:43:e5:a5:6d:e6:a6:3b:72:0b:93:3c:
e6:6d:22:a8:79:bf:c4:c6:c2:2f:0f:21:7d:76:3d:
18:8e:76:cd:01:4f:0d:6c:fe:56:50:6d:e2:b6:a8:
9c:49:53:91:95:4d:0d:3b:89:f8:08:09:44:30:98:
e4:8e:96:94:8c:d1:71:e4:cf:d1:ab:a2:0a:d5:45:
41:0d:e7:b5:38:77:5b:43:ad:76:a8:82:74:36:8d:
6e:be:01:e6:96:fa:04:f5:7e:fe:18:88:0a:89:d2:
99:ef:48:37:fc:92:ce:dc:8f:b3:dc:55:33:bd:36:
c2:90:b5:08:91:2a:d4:16:74:01:30:99:f9:bc:85:
87:a8:8c:d2:52:7f:0b:f1:ba:a1:5a:32:96:60:dc:
ed:3f:9a:e3:17:e8:38:c3:83:75:0e:07:88:ba:c6:
ac:0b:79:29:8e:c8:f3:b1:44:c5:c4:49:e8:f3:a6:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:55:EA:3C:E7:27:E8:C8:41:14:99:5E:BD:DB:16:6B:D4:AE:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6B61C6365D11F18B7CC3F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.140.0-154.214.152.255
Signature Algorithm: sha256WithRSAEncryption
ac:16:da:67:f6:50:cf:c5:fb:6c:5d:d3:cd:87:fb:da:ac:2e:
48:72:10:b0:00:ba:9c:cc:16:f1:24:1f:37:e3:55:5f:3e:d6:
0a:e1:32:ff:a1:5e:96:b8:f8:c6:79:70:1c:42:b5:7b:92:22:
de:db:fb:74:73:70:23:3f:38:76:2c:4b:53:81:00:dc:f4:b4:
11:b0:ec:46:3d:6c:d3:b9:b0:56:ca:93:81:7f:de:65:a8:d6:
74:94:7f:47:40:08:ab:0e:d8:ca:4a:45:01:fe:76:b9:96:c9:
24:da:32:f7:f2:ae:cb:63:8f:0f:be:b2:9a:81:09:45:ce:69:
5a:0c:cb:c3:ab:03:f0:ba:ee:66:29:e0:c3:cf:0e:a4:ef:58:
62:75:d2:a7:44:d4:b5:b3:a9:9d:60:62:9f:f8:92:84:20:49:
ad:5d:31:ac:81:bc:e0:ea:d2:ff:4a:41:a5:1b:d6:40:a1:e8:
85:06:2b:5c:0c:c0:ac:2b:f3:f0:84:ac:fe:c6:3b:b8:96:3b:
3f:35:2e:06:3b:73:7a:6f:47:5b:f9:51:2a:67:7f:61:3f:42:
e6:44:0b:11:7b:a8:95:19:5f:50:c8:e4:b0:60:00:ed:02:67:
01:93:cb:e4:fd:10:90:e8:bf:6f:16:a3:81:5b:ab:54:82:01:
95:92:01:8a
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAcS8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNDEyMTA1MzA2WhcNMjkwNDEyMTA1MzA2WjAYMRYw
FAYDVQQDEw02OWRiNzk5OC01NjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1I9wCaBzT/JP0noFf2b5fNK0N7sKo4/piuQO/w1une8SG+KlAOnfmq5/
WG0l7l/C3aaL62Usm3vcJUNvDu377VshLwQe5w6J422l8PqwQ+WlbeamO3ILkzzm
bSKoeb/ExsIvDyF9dj0YjnbNAU8NbP5WUG3itqicSVORlU0NO4n4CAlEMJjkjpaU
jNFx5M/Rq6IK1UVBDee1OHdbQ612qIJ0No1uvgHmlvoE9X7+GIgKidKZ70g3/JLO
3I+z3FUzvTbCkLUIkSrUFnQBMJn5vIWHqIzSUn8L8bqhWjKWYNztP5rjF+g4w4N1
DgeIusasC3kpjsjzsUTFxEno86av3wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNHN
Veo85yfoyEEUmV692xZr1K7pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQzZCNjFDNjM2NUQxMUYxOEI3Q0MzRjdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKa1owDBACa1pgwDQYJ
KoZIhvcNAQELBQADggEBAKwW2mf2UM/F+2xd082H+9qsLkhyELAAupzMFvEkHzfj
VV8+1grhMv+hXpa4+MZ5cBxCtXuSIt7b+3RzcCM/OHYsS1OBANz0tBGw7EY9bNO5
sFbKk4F/3mWo1nSUf0dACKsO2MpKRQH+drmWySTaMvfyrstjjw++spqBCUXOaVoM
y8OrA/C67mYp4MPPDqTvWGJ10qdE1LWzqZ1gYp/4koQgSa1dMayBvODq0v9KQaUb
1kCh6IUGK1wMwKwr8/CErP7GO7iWOz81LgY7c3pvR1v5USpnf2E/QuZECxF7qJUZ
X1DI5LBgAO0CZwGTy+T9EJDov28Wo4Fbq1SCAZWSAYo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:07 2026 by rpki-client