Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160C34048E2511F0A68AD992DAE4EC9C.roa
File: 160C34048E2511F0A68AD992DAE4EC9C.roa (raw, json)
Hash identifier: yecaLZcIVp/hQEWNcU8tWEVmXmQAMWE6xq18JA8SzDg=
Subject key identifier: 59:6C:DB:68:05:7E:BE:72:AE:85:18:71:48:80:EA:FB:6E:5F:04:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160C34048E2511F0A68AD992DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 09:03:59 +0000
ROA not before: Wed 10 Sep 2025 09:03:54 +0000
ROA not after: Sat 18 Oct 2025 09:03:54 +0000
asID: 20326
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106300 (0x19f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 10 09:03:54 2025 GMT
Not After : Oct 18 09:03:54 2025 GMT
Subject: CN=68c13eff-912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:5c:7f:68:97:36:22:05:e5:6c:c6:f2:bc:
b3:e6:e7:bd:95:38:60:d7:ed:a3:a5:66:c6:c8:c8:
ff:68:f4:97:4c:b4:a6:cc:b7:fc:73:fc:bf:bf:53:
36:d9:d0:df:38:74:a5:b1:56:0f:81:b6:b5:96:83:
cf:8b:74:fa:0f:0c:1d:50:97:f9:0c:b2:cc:37:67:
4d:80:3d:65:b0:3a:a0:03:ca:5d:d6:cd:7a:a8:39:
aa:59:db:a3:5b:26:26:9f:5a:fe:df:7a:87:e2:99:
2d:8d:df:78:3c:e6:ef:64:ef:b3:51:a6:a6:47:6a:
e8:d7:8f:e4:67:d3:78:30:4d:b4:d3:bd:ad:76:44:
48:a6:99:31:c1:90:84:86:88:dd:05:cd:4d:d6:41:
c8:ce:95:60:b9:6c:0e:cf:7c:86:f3:c2:ad:80:95:
27:d8:72:e8:94:df:51:48:31:57:cd:be:a2:62:9c:
9d:d5:b9:ff:75:0a:d7:10:24:96:0f:d9:0a:96:7e:
22:19:08:ab:29:97:7c:26:e8:8e:5b:25:97:16:9c:
09:22:77:c3:e6:0d:10:26:6c:24:b6:64:d5:e0:4e:
8e:9d:b5:e7:a3:a9:59:5d:3b:b1:5a:b8:15:f8:91:
61:74:5c:8e:04:d4:62:97:0c:47:e4:43:0e:3e:0c:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:DB:68:05:7E:BE:72:AE:85:18:71:48:80:EA:FB:6E:5F:04:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160C34048E2511F0A68AD992DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
22:46:b7:1f:5d:58:8b:1c:83:05:6e:75:ec:b3:35:3b:39:5e:
e4:79:a7:77:bf:46:dc:a5:01:a1:5b:cd:29:f8:da:47:5a:2a:
17:43:08:27:8c:5b:43:12:91:3e:5f:29:d6:3f:54:1c:d5:e9:
b0:98:81:98:db:28:30:55:93:01:14:16:b0:2e:61:8b:54:cd:
8f:ef:a5:33:a2:ea:77:72:b6:f0:44:a0:31:eb:66:04:36:bc:
98:47:58:7a:d8:20:6a:d7:6f:85:5c:1d:e9:a0:d9:f5:95:0b:
6f:ef:eb:99:48:47:d1:29:e2:fe:56:e6:ac:3d:da:b4:ec:cd:
01:1a:b2:1c:5b:5e:23:46:d9:65:b6:2f:07:ad:a7:8a:29:36:
19:27:22:e9:04:f0:c7:c3:29:28:23:17:b2:97:69:f4:00:42:
9b:0b:5e:32:c9:50:cd:10:68:e7:2b:2a:a9:3b:74:e8:3f:b1:
a9:48:74:41:96:af:ff:a7:59:b3:ca:e0:f2:61:48:52:ef:2a:
33:fa:cc:e8:c4:8c:82:6f:e6:6c:34:01:80:b0:0b:7f:fc:1b:
c2:48:9d:65:56:5d:34:47:8c:8f:a5:f5:c1:1a:42:77:e5:8e:
0e:7e:e7:7c:70:d0:5a:48:c0:ff:fe:c6:75:87:d2:0b:e1:2f:
70:28:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:21 2025 by rpki-client