Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273C4634BAED11F09A626CCBDAE4EC9C.roa
File: 273C4634BAED11F09A626CCBDAE4EC9C.roa (raw, json)
Hash identifier: pyZ0RWybaoFi3o3szjzjPP6CoRWBLtmQZyGmRNouHZk=
Subject key identifier: E2:E1:A7:D6:0F:3B:FC:EE:ED:F8:A4:98:46:63:DB:9A:13:4C:DB:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018507
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273C4634BAED11F09A626CCBDAE4EC9C.roa
Signing time: Thu 06 Nov 2025 08:46:58 +0000
ROA not before: Thu 06 Nov 2025 08:46:53 +0000
ROA not after: Sat 15 Nov 2025 08:46:53 +0000
asID: 43350
IP address blocks: 45.200.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99591 (0x18507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 6 08:46:53 2025 GMT
Not After : Nov 15 08:46:53 2025 GMT
Subject: CN=690c6082-e696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:66:86:91:66:30:51:fd:a7:2e:f3:2d:79:
70:5a:80:20:fd:94:f8:98:88:c2:3f:48:39:3b:f9:
2a:9f:96:55:64:ed:f2:3b:d7:24:dd:f5:e6:fc:aa:
e9:02:61:17:c4:cc:31:28:dd:95:1b:cc:78:11:8b:
c8:c0:16:b9:35:95:65:6e:88:1b:47:32:44:09:49:
00:f2:11:e1:8a:fa:87:41:15:9b:3b:23:f9:03:e0:
88:23:a4:62:ee:70:e7:28:67:7e:8d:90:b5:e7:03:
fe:c2:4a:20:ec:62:0a:72:24:aa:68:72:4a:40:56:
d9:f3:8a:41:50:29:73:5d:55:1a:d7:79:6e:63:e3:
ff:d3:45:e6:85:c4:50:ad:59:aa:8b:95:fa:09:16:
de:dd:fb:33:e7:cc:98:c6:e7:1d:fb:a1:7f:57:57:
de:16:d9:90:e0:84:e1:2a:f1:9a:5d:96:f1:71:7a:
45:9c:b7:22:3f:c0:ba:49:be:91:a4:b3:6b:a8:d3:
a0:d2:7f:30:b9:bb:ab:c8:26:1d:0b:3e:23:15:97:
ad:07:10:39:02:f4:89:57:75:6f:b1:8c:a6:50:12:
d6:65:0f:66:5b:34:c5:64:4f:a2:1f:10:d2:51:40:
69:b0:6f:c7:d9:20:c4:c4:e7:af:b3:aa:da:c4:b2:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E1:A7:D6:0F:3B:FC:EE:ED:F8:A4:98:46:63:DB:9A:13:4C:DB:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273C4634BAED11F09A626CCBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.88.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7c:cc:a4:e3:92:70:b0:a9:38:64:3a:da:3a:56:77:7d:06:
7d:73:16:5f:35:0a:8d:90:42:04:10:0f:7f:1d:bc:20:85:ee:
e9:50:3a:23:ae:3f:3b:4b:aa:8f:26:fa:e3:82:8e:d0:23:a0:
ed:17:a3:2d:94:5f:3d:44:22:2a:e3:19:5a:82:3d:6b:6b:60:
5c:4a:72:c8:ed:b1:b2:91:1a:a3:eb:13:40:e3:f3:21:3a:8a:
31:16:6e:32:27:f1:b7:97:a1:38:40:e8:f4:41:c9:d7:86:e7:
ea:db:5f:61:5b:2b:0d:be:a1:49:b4:fb:66:ff:2f:0e:47:a7:
65:85:78:e4:80:49:73:15:d5:d1:d2:5a:2c:c4:ae:83:60:b9:
b2:00:71:57:12:a1:28:46:1f:6f:10:6a:11:c6:36:52:84:95:
c9:99:4f:34:51:78:f3:49:a1:83:4c:d0:53:e4:77:47:6c:98:
c4:ba:57:34:6e:3b:5e:53:c5:fb:0f:10:a2:11:19:1c:48:f0:
39:9d:49:ba:65:dc:8e:65:1a:24:3a:39:04:b1:fe:76:fa:d9:
35:1a:0e:f0:5b:b7:70:c1:40:92:dd:e7:e6:02:7f:70:23:f4:
08:61:e5:b3:94:82:b9:15:b0:de:76:e5:0d:81:eb:94:02:c9:
93:18:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 00:45:46 2025 by rpki-client