Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7A573C920911F0BAA049C4DAE4EC9C.roa
File: 0F7A573C920911F0BAA049C4DAE4EC9C.roa (raw, json)
Hash identifier: maZRFEHND2MI6WsEDija99eHEO5dMyJLMHXtu0zBrEw=
Subject key identifier: 94:E0:E4:D3:34:82:DC:58:FA:04:FC:A5:B8:3E:01:25:57:C5:AA:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7A573C920911F0BAA049C4DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 07:53:26 +0000
ROA not before: Mon 15 Sep 2025 07:53:21 +0000
ROA not after: Sat 18 Oct 2025 07:53:21 +0000
asID: 135983
IP address blocks: 154.200.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106410 (0x19faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:53:21 2025 GMT
Not After : Oct 18 07:53:21 2025 GMT
Subject: CN=68c7c5f6-9648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:a9:c8:5c:64:49:14:fb:bb:36:5f:8d:7b:
e2:76:04:66:0c:74:23:4d:10:e7:28:bb:a5:52:90:
7f:20:aa:a0:b5:a6:42:d1:34:70:26:49:68:9b:76:
23:85:93:a1:3f:05:de:57:09:ce:4f:11:3c:54:6f:
0a:5f:0d:4a:f6:75:74:1e:21:78:d8:ea:ed:e5:75:
10:ea:f9:ca:58:67:88:1b:72:fc:2e:ca:bf:fa:0a:
74:d6:fd:d8:4a:dd:2a:78:d7:77:9f:ee:95:88:69:
9d:2d:13:0c:ea:97:2c:8c:c2:30:1a:51:6d:8c:09:
93:10:66:83:3a:44:4c:99:c4:73:c3:88:82:76:f2:
12:7e:fa:f6:3f:5b:e9:9b:dd:c0:d9:b6:f3:46:68:
1f:f4:89:0e:3c:f3:7d:3e:16:dc:4e:37:e1:d1:e6:
3e:27:cb:c2:a2:ac:12:5a:ca:a2:5f:4a:5b:d6:cc:
3d:09:fa:0f:44:03:4d:80:b1:93:c8:c5:8d:ce:6b:
ad:bc:6b:4a:23:df:f3:a1:91:1e:67:4f:be:c3:75:
8c:16:d9:91:0d:26:a0:12:89:67:54:a8:d9:04:c6:
b4:c5:56:a0:34:ca:de:94:ff:c6:28:86:7e:84:ad:
5d:4e:b3:bf:45:c8:5a:41:a8:4a:2c:bb:04:27:49:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:E4:D3:34:82:DC:58:FA:04:FC:A5:B8:3E:01:25:57:C5:AA:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7A573C920911F0BAA049C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:3e:c6:89:01:7d:68:5b:c5:19:3d:72:fc:b7:65:bc:60:4a:
47:c8:91:a8:71:1a:b1:3f:b9:ab:8a:3c:3a:53:3d:7b:93:5c:
8f:4a:e5:33:6b:5f:c7:c6:a0:e9:2e:06:9b:00:d0:05:94:ef:
d4:15:cf:87:48:33:ad:ea:22:4b:02:41:b2:e0:fd:84:7b:39:
39:df:3d:26:91:0b:5f:78:62:94:3a:4e:97:60:fb:b9:ba:20:
55:a8:94:44:1a:17:d9:0f:3c:82:28:68:3d:8e:2d:32:1d:1b:
e6:2d:2b:ca:88:bb:31:59:ca:68:e1:29:66:58:94:47:a7:ec:
5f:df:88:4a:38:36:c5:d7:87:f7:ab:88:4b:47:a2:d3:47:bc:
4f:42:70:89:0d:54:2d:85:b1:c6:18:4c:52:74:43:3c:38:64:
b2:c7:de:bd:78:5e:d3:2c:ad:11:5c:b1:a8:af:7e:ef:9d:bf:
30:5a:a6:b9:dd:db:13:99:49:77:d6:c0:92:57:5b:d1:96:e1:
8a:c9:02:32:68:bd:5a:09:6f:49:b9:97:55:32:91:40:ed:d7:
2e:4b:3b:49:69:cb:07:9c:f3:1c:b4:13:e0:c8:c9:3f:ef:d0:
02:b2:47:1c:d5:fa:65:de:1f:54:34:da:4a:c6:b9:e3:66:3b:
b1:22:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:53 2025 by rpki-client