Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/119664BC8FFA11F1A36A82E1CE1D38B0.roa
File: 119664BC8FFA11F1A36A82E1CE1D38B0.roa (raw, json)
Hash identifier: LajzBiW75MDzHXQgiwkVV8Dxg2z73q+sQSMZOPt0mNw=
Subject key identifier: 22:A8:2B:39:4E:AD:74:89:F7:27:C8:4A:A3:44:1D:8D:7A:A7:CC:2A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20A1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/119664BC8FFA11F1A36A82E1CE1D38B0.roa
Signing time: Tue 04 Aug 2026 11:46:03 +0000
ROA not before: Tue 04 Aug 2026 11:45:59 +0000
ROA not after: Fri 04 Aug 2028 11:45:59 +0000
asID: 14670
IP address blocks: 154.16.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Aug 2026 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8353 (0x20a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 4 11:45:59 2026 GMT
Not After : Aug 4 11:45:59 2028 GMT
Subject: CN=6a71d0fb-8cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:00:29:c2:94:b1:b3:4a:b8:e5:69:e4:d4:
28:f5:51:db:df:22:91:f3:b3:41:c2:2e:70:cc:e4:
7e:c1:33:c0:5c:1c:97:42:e5:31:c5:28:da:c2:cb:
bb:ce:04:0c:07:33:3d:b7:52:74:fa:f3:37:f1:6f:
44:91:fb:60:36:16:4f:7f:4b:23:3f:ed:6a:67:de:
af:8d:2a:4e:a7:6a:29:82:6e:bf:d4:90:2c:8e:0d:
22:b8:f2:90:24:23:02:05:77:1e:68:f3:40:1e:ca:
61:80:b6:3c:5f:f4:dc:d0:e5:0f:d2:6b:6f:44:1d:
4a:b6:84:2f:bf:9f:1b:56:79:58:ca:b9:1e:6e:0e:
07:8f:38:05:a3:0a:37:71:b5:9b:28:10:5c:46:cd:
98:41:aa:d1:ad:3f:74:c8:a2:e6:ec:cd:ae:83:e1:
37:38:19:30:0c:3d:49:ca:ae:ba:00:82:aa:14:e8:
3a:4c:e9:35:23:c5:a5:16:5a:0f:36:b3:e4:11:8b:
a4:b3:96:95:e5:12:09:92:63:3f:22:7c:1e:be:43:
78:77:82:39:9b:e5:5e:df:36:ca:eb:41:19:5d:f6:
3d:db:4a:c7:a6:0f:f8:f8:1a:0a:4f:86:21:cc:d9:
ac:02:e5:21:6e:1a:90:ea:f2:9d:20:54:67:d6:12:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:2B:39:4E:AD:74:89:F7:27:C8:4A:A3:44:1D:8D:7A:A7:CC:2A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/119664BC8FFA11F1A36A82E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e8:ee:30:a3:e9:ca:98:7d:2b:38:4a:df:cc:50:52:17:ab:
c6:71:9c:a6:e9:8c:d3:4a:1b:ee:6e:63:d0:ad:43:d5:03:d4:
cf:62:23:52:17:57:61:0d:18:21:6d:cf:65:34:bf:ac:bf:7a:
e0:fb:c1:05:6e:f2:d7:0c:78:6c:99:2b:bf:8e:6d:4c:8e:75:
9f:4e:e0:bf:5f:99:3f:33:25:8f:a6:70:1b:b8:8a:45:62:2c:
cf:83:58:52:df:38:97:2f:fd:16:37:b6:77:6d:86:d2:09:dd:
85:91:e0:33:6f:49:16:1e:15:c9:22:bb:c1:e7:9f:c3:a9:65:
30:65:d4:68:64:3c:89:8d:43:cb:f3:72:14:71:46:6b:c4:b6:
2b:37:e4:16:db:98:0c:e8:c4:ea:91:bf:a6:0d:20:fa:57:7c:
97:bf:16:5f:ab:73:95:a6:01:9a:a6:79:1c:e2:93:c0:e3:c0:
21:81:c1:07:bf:fa:8b:45:6d:f9:a2:3e:b3:3a:02:0c:7d:da:
47:d7:98:75:2f:b4:00:8e:83:d8:e3:28:9d:10:04:3f:84:11:
ff:9f:99:2a:43:4b:96:47:0c:75:55:a1:d6:98:41:2d:ef:0c:
90:66:6e:5d:8b:67:a4:af:8e:57:aa:77:6d:58:a2:ff:93:c3:
43:ec:4b:24
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIKEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA4MDQxMTQ1NTlaFw0yODA4MDQxMTQ1NTlaMBgxFjAU
BgNVBAMTDTZhNzFkMGZiLThjYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX1QApwpSxs0q45Wnk1Cj1UdvfIpHzs0HCLnDM5H7BM8BcHJdC5THFKNrC
y7vOBAwHMz23UnT68zfxb0SR+2A2Fk9/SyM/7Wpn3q+NKk6naimCbr/UkCyODSK4
8pAkIwIFdx5o80AeymGAtjxf9NzQ5Q/Sa29EHUq2hC+/nxtWeVjKuR5uDgePOAWj
CjdxtZsoEFxGzZhBqtGtP3TIoubsza6D4Tc4GTAMPUnKrroAgqoU6DpM6TUjxaUW
Wg82s+QRi6SzlpXlEgmSYz8ifB6+Q3h3gjmb5V7fNsrrQRld9j3bSsemD/j4GgpP
hiHM2awC5SFuGpDq8p0gVGfWEnhrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIqgr
OU6tdIn3J8hKo0QdjXqnzCowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzExOTY2NEJDOEZGQTExRjFBMzZBODJFMUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHMwDQYJKoZIhvcNAQEL
BQADggEBAKfo7jCj6cqYfSs4St/MUFIXq8ZxnKbpjNNKG+5uY9CtQ9UD1M9iI1IX
V2ENGCFtz2U0v6y/euD7wQVu8tcMeGyZK7+ObUyOdZ9O4L9fmT8zJY+mcBu4ikVi
LM+DWFLfOJcv/RY3tndthtIJ3YWR4DNvSRYeFckiu8Hnn8OpZTBl1GhkPImNQ8vz
chRxRmvEtis35BbbmAzoxOqRv6YNIPpXfJe/Fl+rc5WmAZqmeRzik8DjwCGBwQe/
+otFbfmiPrM6Agx92kfXmHUvtACOg9jjKJ0QBD+EEf+fmSpDS5ZHDHVVodaYQS3v
DJBmbl2LZ6Svjleqd21Yov+Tw0PsSyQ=
-----END CERTIFICATE-----
Generated at Tue Aug 4 20:26:30 2026 by rpki-client