Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25B33E2EA02D11F0B83296D7DAE4EC9C.roa
File: 25B33E2EA02D11F0B83296D7DAE4EC9C.roa (raw, json)
Hash identifier: 67meIf9f7/EAwN7yLzQZpGXS6J3XbLMb7QPpvfudn/4=
Subject key identifier: F4:28:9F:21:D9:6D:CB:48:9F:0A:9C:D5:0D:95:D4:14:E1:2C:8B:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A227
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25B33E2EA02D11F0B83296D7DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 07:47:02 +0000
ROA not before: Fri 03 Oct 2025 07:46:55 +0000
ROA not after: Sat 18 Oct 2025 07:46:55 +0000
asID: 211392
IP address blocks: 154.84.16.0/24 maxlen: 24
154.84.18.0/24 maxlen: 24
154.84.19.0/24 maxlen: 24
154.84.21.0/24 maxlen: 24
154.84.22.0/24 maxlen: 24
154.84.23.0/24 maxlen: 24
154.84.24.0/24 maxlen: 24
154.84.25.0/24 maxlen: 24
154.84.26.0/24 maxlen: 24
154.84.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107047 (0x1a227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 07:46:55 2025 GMT
Not After : Oct 18 07:46:55 2025 GMT
Subject: CN=68df7f76-4629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:ab:ee:07:6e:1f:e9:27:47:47:10:a3:29:
f9:d4:5a:78:ef:9d:bd:66:99:2e:29:48:ae:87:45:
fc:2f:49:d1:97:96:99:72:da:c2:e0:f8:16:5e:fb:
22:b6:5d:19:c5:8d:f5:63:72:71:d3:89:77:cf:39:
99:7f:43:87:f1:e0:bb:39:cc:93:1b:0d:67:0f:be:
d4:8f:df:3e:a2:12:d0:b7:01:4e:c7:6b:44:e5:a1:
b0:e2:98:ad:b3:f3:16:27:49:f7:f5:71:e0:08:73:
4b:ed:91:0c:e4:c1:45:cc:47:91:48:bb:93:d2:b9:
2f:94:54:cd:4e:06:c1:ee:61:3c:2e:5d:66:3c:88:
2a:3a:38:36:3e:39:fa:1a:a3:c3:0d:59:c7:7f:c7:
ca:7b:f4:fd:9b:2e:af:9a:04:c5:0c:c1:f5:c4:37:
f0:e7:b5:0e:66:0e:7f:96:80:8c:86:f7:cf:b9:dc:
4c:fa:be:b5:30:aa:16:08:8e:53:57:34:23:69:4e:
fe:38:42:b4:26:92:78:54:2f:43:fc:e5:04:e1:76:
db:48:08:e7:83:83:a7:78:01:83:03:69:a7:58:8a:
d9:18:f9:c6:a3:8a:fe:c5:e3:ce:6e:66:78:a1:94:
c0:2e:e5:d3:73:cf:a8:ab:10:2c:70:64:6e:91:b9:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:9F:21:D9:6D:CB:48:9F:0A:9C:D5:0D:95:D4:14:E1:2C:8B:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25B33E2EA02D11F0B83296D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.16.0/24
154.84.18.0/23
154.84.21.0-154.84.27.255
Signature Algorithm: sha256WithRSAEncryption
b0:01:a7:1a:be:7a:46:a4:ae:58:f7:7a:85:c8:84:35:64:c5:
e3:6d:d3:b8:0d:c0:8f:40:d5:e9:c9:a5:de:a3:68:dc:64:e3:
a0:f4:0e:47:0c:ba:52:b7:d0:4e:3d:1e:79:9c:79:0e:5d:63:
af:d6:4d:82:d6:8c:40:48:ef:92:35:1b:31:f8:43:45:2f:dc:
d6:ef:98:b6:d5:e1:03:a0:f0:c2:bf:2d:c5:35:a9:22:94:b0:
64:33:a3:50:bf:26:fd:1b:14:42:41:e9:5d:0d:d0:d2:6e:07:
38:bf:49:cf:84:d1:d9:a9:54:72:c6:18:90:30:eb:dc:50:3a:
f2:62:3f:c2:6b:e2:3b:28:90:72:66:8c:89:3f:be:04:a3:36:
42:4b:d7:fd:ed:85:44:68:87:d3:88:38:6e:32:74:cd:f2:21:
f4:46:51:0a:1b:07:eb:d3:a6:c4:12:4a:dc:0a:1b:ca:9a:33:
f9:79:01:8e:4f:bb:da:12:55:49:a1:ce:8c:29:51:34:52:30:
d1:3a:e6:81:ca:9e:d9:25:55:16:8a:4b:fc:75:d5:dd:48:a9:
93:7b:5e:81:db:64:1b:ca:95:bd:68:d2:f1:a4:49:4b:68:18:
e1:fb:a9:fc:f7:b7:68:c2:ab:67:0e:0c:7c:d8:26:67:34:f7:
17:4a:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:56 2025 by rpki-client