Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1279E07E581511F1B09B5A13CF1D38B0.roa
File: 1279E07E581511F1B09B5A13CF1D38B0.roa (raw, json)
Hash identifier: IVr0bmXEKMMunSCBoS1hdsmtxxdN7uhG+JUnd4EkpW8=
Subject key identifier: 3E:1A:5A:6E:0F:61:4E:15:C0:94:5E:3E:A1:2C:43:10:4D:F0:F4:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1279E07E581511F1B09B5A13CF1D38B0.roa
Signing time: Mon 25 May 2026 08:38:16 +0000
ROA not before: Mon 25 May 2026 08:38:11 +0000
ROA not after: Sat 06 Jun 2026 08:38:11 +0000
asID: 140227
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118598 (0x1cf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 08:38:11 2026 GMT
Not After : Jun 6 08:38:11 2026 GMT
Subject: CN=6a140a77-79d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:69:89:9c:b4:24:7b:54:8b:e2:18:a8:63:
80:16:d2:38:b6:8e:d1:d0:c1:16:c2:59:09:99:77:
5a:54:0c:87:7a:d9:15:04:18:08:e0:49:57:d8:d3:
e0:6f:47:c2:4e:19:b2:43:cd:b4:90:aa:95:01:2a:
c2:3b:03:f6:03:7b:31:9c:36:01:47:f9:68:61:01:
94:00:d8:75:18:83:7a:31:21:83:33:81:8c:6d:20:
7f:4c:c7:4b:dd:e0:df:46:2a:5a:f1:dc:c1:64:6e:
bc:77:7c:77:cf:92:5a:0b:32:28:34:2c:e0:c2:66:
94:3b:95:9a:e5:6a:69:64:69:94:78:47:21:34:5d:
b4:50:8e:67:b4:a8:c6:ca:75:85:2c:0a:b5:ab:3b:
3c:93:01:15:f4:0e:d4:19:6f:b3:bd:38:f4:f8:65:
8d:3e:e5:07:c1:c2:d0:55:f6:1d:77:9d:77:08:cc:
5a:67:e2:0d:36:fb:e4:c4:2e:23:4c:fe:fc:ed:7c:
03:2f:22:3a:ff:85:9d:ec:59:d3:4e:d0:d3:85:89:
09:af:c5:b2:ee:b6:e1:f2:a7:79:8a:15:95:e0:8f:
1e:21:70:7b:cd:4f:9e:4a:89:de:a5:2f:6d:db:79:
9a:65:6d:74:22:40:21:27:40:fc:d0:79:dd:73:1e:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:5A:6E:0F:61:4E:15:C0:94:5E:3E:A1:2C:43:10:4D:F0:F4:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1279E07E581511F1B09B5A13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.20.255
Signature Algorithm: sha256WithRSAEncryption
18:37:04:6d:a5:d3:82:1c:d4:48:a2:af:5a:10:49:21:dd:b1:
90:6b:38:60:81:67:72:c6:f9:5b:06:67:05:cd:b4:73:06:47:
63:21:68:41:cc:8b:4f:74:a3:4e:07:7d:ab:f9:0e:f6:c6:cb:
11:09:e3:47:c4:f2:94:89:42:64:ba:75:dd:53:0b:53:fe:59:
6e:8c:5e:c5:28:9d:83:d8:fd:b4:b2:0e:a0:31:a0:f2:5f:1b:
eb:ed:a1:29:0e:61:17:56:d1:c0:65:7f:1d:76:c0:89:a8:2a:
4a:3d:8a:66:36:6f:f2:75:77:fb:1d:7a:4b:9c:c0:61:96:1f:
83:e9:81:98:7a:9b:0b:c8:35:1f:2a:3d:30:eb:1e:85:e1:64:
01:e0:68:ba:46:66:6b:64:6f:7b:8c:92:4c:3f:b4:d5:be:0e:
64:af:80:0d:70:15:76:28:36:37:50:67:f4:4f:e0:20:ea:93:
0c:c2:1c:02:e5:97:c3:42:9b:6e:60:3e:12:47:cc:cd:a6:29:
ab:77:70:43:b4:67:55:d3:26:cc:f7:bd:0a:27:42:17:f3:95:
7c:0a:fb:7f:7c:a9:eb:7a:10:a7:db:17:e9:05:0e:f1:ef:60:
4e:0f:02:18:27:1b:b2:41:9e:9d:69:5c:b5:3f:59:94:d8:dd:
ed:22:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:49:27 2026 by rpki-client