Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5253F60EA5AE11F0966C658DDAE4EC9C.roa
File: 5253F60EA5AE11F0966C658DDAE4EC9C.roa (raw, json)
Hash identifier: saU6T8SqgcPlp6J8dl/iP+Xib6PShDqJnzvnZ0ife70=
Subject key identifier: A6:CA:D8:6E:70:26:40:50:3D:08:EA:D7:30:8C:A6:8D:56:FE:F5:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A325
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5253F60EA5AE11F0966C658DDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:54:18 +0000
ROA not before: Fri 10 Oct 2025 07:54:13 +0000
ROA not after: Sun 19 Oct 2025 07:54:13 +0000
asID: 203020
IP address blocks: 154.203.32.0/21 maxlen: 24
154.203.40.0/22 maxlen: 24
154.203.44.0/22 maxlen: 24
154.203.48.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107301 (0x1a325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 07:54:13 2025 GMT
Not After : Oct 19 07:54:13 2025 GMT
Subject: CN=68e8bba9-d284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:1e:c5:3f:51:da:8c:cd:7a:3d:fc:bb:43:
7c:1b:23:2b:ff:3f:62:e3:d8:38:0b:c4:9d:84:81:
88:4d:b9:dc:8b:29:f9:dd:c3:66:75:37:de:b2:47:
7d:7b:4f:9f:bc:ce:97:f5:1c:64:0f:5b:96:6c:d3:
74:74:71:b1:89:4d:ce:96:38:72:e3:18:40:4a:83:
4d:87:52:23:85:07:fc:ed:40:34:c3:3f:71:cf:78:
4b:8f:40:48:e4:31:25:1b:4f:2c:66:ab:33:06:0a:
2d:7f:f3:73:07:4c:4f:33:12:a0:49:c4:82:c1:45:
52:f7:e9:b6:7c:a2:c7:47:70:7c:f4:b2:d4:2b:bb:
d0:29:56:74:43:3c:34:4b:69:5e:b5:44:f5:c9:0c:
21:a9:fa:bc:23:6c:b5:ae:8a:f4:5e:97:ac:30:de:
18:52:a5:73:72:05:de:ba:03:44:96:6d:03:eb:42:
03:01:f2:3b:0c:4e:13:87:e0:76:56:c2:db:c4:26:
7a:1e:12:d0:fa:1f:b8:bb:7a:d7:bb:ba:8a:ae:6e:
27:23:1e:43:bc:ea:1c:20:14:29:36:bc:a0:59:c6:
ac:72:50:c3:6e:21:10:db:05:a6:dd:63:40:12:cc:
a5:3e:f7:10:81:b9:39:a7:90:95:60:73:b8:e2:47:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:D8:6E:70:26:40:50:3D:08:EA:D7:30:8C:A6:8D:56:FE:F5:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5253F60EA5AE11F0966C658DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.32.0-154.203.49.255
Signature Algorithm: sha256WithRSAEncryption
c3:fb:61:dd:21:fb:70:05:fc:6e:02:9a:e9:05:2f:da:76:fa:
7e:f0:4b:2e:5a:1b:37:80:98:9f:61:9f:e0:fc:b2:31:ce:a1:
bc:7b:ad:f1:b3:e3:43:9d:7b:30:5d:e6:ae:03:6f:f2:2d:6b:
c6:69:20:94:ee:e1:f7:d6:d0:e5:9a:b8:c2:c0:e5:b4:02:d0:
2b:78:99:3a:c1:b0:95:a2:43:cc:11:68:bc:14:e2:f5:c7:1d:
d2:f6:1d:6c:82:8c:a0:fd:9a:62:dc:b1:ce:fa:e4:07:4a:a5:
fd:f1:8d:c3:67:13:2f:9a:43:52:5c:56:c0:da:4a:ee:ba:f4:
25:81:a3:93:15:99:e8:ab:aa:83:0b:a5:01:57:34:0c:66:fb:
8b:95:8b:78:a1:ca:a3:e0:24:53:7c:22:de:1a:56:32:ec:c4:
21:1c:08:ae:40:f6:38:7c:02:56:b4:74:26:ed:71:b9:6f:d4:
c5:6d:f3:f2:9f:03:f0:74:7b:47:4c:45:54:b6:10:b2:01:aa:
25:bc:45:c0:32:7c:6c:f5:d4:4c:93:05:61:87:0f:bf:0a:8a:
02:97:b3:9d:f0:d7:8e:fa:c3:41:a5:a3:93:dc:f5:12:8b:f1:
41:72:43:85:c2:6a:2e:64:3b:65:b7:54:f1:e0:04:eb:de:ed:
64:86:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:22 2025 by rpki-client