Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426194F254A611F187E7F109CF1D38B0.roa
File: 426194F254A611F187E7F109CF1D38B0.roa (raw, json)
Hash identifier: bvRpIMj4RyV2kF9RYckrQ6CqvNbI4W5m6bt8tHCSJHE=
Subject key identifier: E9:B5:42:68:EB:CC:BC:80:93:76:0E:FB:32:B2:25:4D:56:8B:94:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426194F254A611F187E7F109CF1D38B0.roa
Signing time: Wed 20 May 2026 23:47:28 +0000
ROA not before: Thu 21 May 2026 23:47:23 +0000
ROA not after: Fri 19 Jun 2026 23:47:23 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 May 2026 22:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118034 (0x1cd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 23:47:23 2026 GMT
Not After : Jun 19 23:47:23 2026 GMT
Subject: CN=6a0e4810-c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:d7:43:f6:41:27:77:fa:f3:69:81:2c:5f:
56:ad:25:cd:42:05:15:ef:0d:fd:eb:eb:3b:30:02:
5a:e5:1b:c6:74:d9:da:74:ec:f8:27:5c:f2:3d:1a:
51:56:47:90:44:95:8e:10:03:20:b6:8f:d4:66:c7:
8b:6f:99:62:60:3b:e9:f4:31:c7:cd:d1:ea:c4:6b:
31:fb:44:9e:98:21:48:78:78:ab:9a:e9:c2:c2:ec:
bb:e3:e7:45:73:50:a4:f4:6c:66:83:c2:99:a8:4a:
44:4f:81:99:e7:c7:b6:b8:a4:af:2e:db:19:97:79:
b1:6b:05:07:d9:f2:1c:47:9e:fe:2c:c4:56:9d:ed:
44:44:90:7d:62:1b:41:43:a7:5c:35:07:4d:50:5b:
fd:94:7c:92:7a:d7:5b:30:a8:eb:be:94:7c:b2:ca:
f5:a7:0c:2a:2a:92:b3:58:04:ef:bb:ed:53:73:eb:
63:b0:04:71:b2:02:17:68:48:b8:49:cd:30:66:39:
13:7e:a3:cd:91:92:8b:ef:20:16:55:5b:11:a5:eb:
5b:ce:03:bb:3e:ad:b8:8b:bb:e0:2d:34:a0:e3:31:
5a:d0:ee:9a:f0:d7:3e:bc:7f:8f:0e:e5:0f:fc:07:
a4:54:5f:68:56:74:be:f6:ab:0f:9b:b8:aa:9b:56:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B5:42:68:EB:CC:BC:80:93:76:0E:FB:32:B2:25:4D:56:8B:94:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/426194F254A611F187E7F109CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
d2:2c:31:31:6e:7a:d0:a2:1e:2a:51:ff:1b:d3:7d:a5:62:6e:
62:dd:b6:b4:89:b5:62:5a:19:7d:bc:8b:81:51:6b:86:74:a2:
4e:71:2b:63:9a:25:ad:fc:8c:71:a2:1a:46:43:dd:90:a4:b7:
1f:d2:b3:a0:c8:8e:af:24:01:b2:dd:61:4b:b9:10:60:ef:d4:
f8:6a:2f:99:5f:c7:7f:55:e0:14:93:1b:0d:93:24:09:35:68:
64:2f:a7:d3:17:55:bd:b0:4e:55:57:bf:ad:3a:57:f3:60:81:
ec:d5:a4:e1:d7:d1:ff:fc:5e:ef:19:9b:11:0e:41:cf:3c:ff:
97:23:e5:ca:77:34:68:b8:a2:69:c3:b5:38:fe:d5:c4:fa:ef:
1d:18:17:a5:a6:ce:0b:15:78:f2:d4:9c:0f:57:5c:91:82:79:
4a:1d:d7:ca:c9:15:a8:04:68:b9:ec:b8:0f:73:cc:f7:32:c8:
d6:2f:ec:18:ae:8f:d0:79:f8:d8:92:98:3a:cd:ae:20:2a:7f:
15:92:8d:0c:09:5b:dc:6c:fc:54:50:cf:35:56:e0:36:b1:fd:
94:84:0b:79:c0:2f:18:6f:86:45:47:bb:27:7f:e9:f1:25:bb:
d1:98:44:7a:b4:0d:a9:cf:93:f3:26:00:0c:d7:6c:e4:a6:1d:
aa:9e:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 06:53:41 2026 by rpki-client