Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C4B6A0A02B11F0BCF3F4CADAE4EC9C.roa
File: 53C4B6A0A02B11F0BCF3F4CADAE4EC9C.roa (raw, json)
Hash identifier: 5b6I4a3QNJdQUxSSBpE8Md7mWjpJoFPMu1B8mMIPWpI=
Subject key identifier: CA:60:BF:3E:EC:3C:A4:97:70:FE:76:94:D1:C7:2C:66:5C:D6:04:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A225
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C4B6A0A02B11F0BCF3F4CADAE4EC9C.roa
Signing time: Fri 03 Oct 2025 07:34:00 +0000
ROA not before: Fri 03 Oct 2025 07:33:55 +0000
ROA not after: Sat 18 Oct 2025 07:33:55 +0000
asID: 209242
IP address blocks: 154.84.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107045 (0x1a225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 07:33:55 2025 GMT
Not After : Oct 18 07:33:55 2025 GMT
Subject: CN=68df7c68-64b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:f5:16:65:61:25:0e:3d:df:22:3d:fc:74:
37:b7:25:2f:5a:8e:4e:9f:de:5d:e7:cb:eb:2d:87:
c4:1a:1e:2b:3d:71:2a:7a:9c:92:24:71:03:8b:31:
48:b1:18:8b:9f:c3:09:69:a1:42:f9:fc:3c:6a:09:
81:85:90:37:40:62:b0:c9:e9:d8:8f:b5:39:23:e6:
1f:d5:ec:f1:82:ab:7c:00:00:ad:05:9f:c6:90:6a:
c0:40:83:fe:dd:9e:4f:62:6b:b7:42:f4:e5:52:b2:
ad:a8:bc:09:78:38:6f:72:54:cd:36:4a:48:78:91:
5a:4a:d4:ab:26:a4:c5:a8:db:3e:69:6c:0e:f8:64:
29:ce:77:3c:ec:1a:84:bb:69:dc:2c:ce:02:bc:cd:
7a:fc:09:c6:09:b7:69:8b:2b:f6:1c:92:23:5d:59:
d9:f3:a6:c4:ca:37:dd:b9:d8:e9:4c:22:82:db:65:
63:25:e1:0c:f4:5b:02:87:71:fc:1d:e8:8a:9f:c1:
4c:be:2e:1b:27:e4:87:0d:ef:01:45:e4:5f:81:cb:
aa:fe:af:94:27:6c:51:8a:7a:51:90:bd:aa:df:9f:
87:0b:3f:4b:fa:5a:86:b5:60:b5:70:5b:53:b8:62:
1c:61:fb:cf:74:0c:3f:78:29:ef:58:90:68:ee:4d:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:60:BF:3E:EC:3C:A4:97:70:FE:76:94:D1:C7:2C:66:5C:D6:04:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C4B6A0A02B11F0BCF3F4CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.16.0/21
Signature Algorithm: sha256WithRSAEncryption
60:43:35:17:b6:38:aa:3f:e3:73:9c:fb:b7:34:e1:c8:04:bc:
11:55:61:f6:01:a1:21:74:97:8e:5f:87:d9:9b:bb:68:1d:48:
5d:8f:1b:ed:0d:ba:4d:d9:04:25:6b:65:81:e4:88:41:1e:93:
ba:94:8d:20:13:83:fd:3c:c7:f0:2e:13:18:bb:a9:fb:9a:97:
1c:75:95:c6:dd:75:85:94:ab:a2:a3:31:a9:91:05:31:29:06:
7d:06:f6:a8:ca:a3:07:34:e5:d9:64:ac:56:f4:30:0e:fa:99:
c5:bb:2e:e1:42:e5:00:f9:e3:d0:56:39:07:00:4b:99:13:b9:
8a:61:e5:2c:5d:57:3f:73:cf:96:67:ba:30:f0:74:96:23:7c:
43:ed:41:7d:9d:07:9b:76:06:6a:a7:76:54:6b:aa:10:c4:95:
ba:d6:94:5c:a8:dd:56:e1:9a:d2:30:74:b3:be:bf:a5:aa:7b:
39:0f:b2:30:c2:82:6a:98:ee:9e:c9:55:20:9c:f4:14:af:51:
a2:ae:2c:d4:c8:c9:69:ba:05:a3:af:46:f7:c7:33:d9:89:27:
56:74:db:6b:63:db:40:79:8a:71:5d:44:f5:0f:54:e6:eb:5e:
d6:a6:cc:22:26:88:14:b6:60:25:5f:bd:9a:cd:5a:e7:18:b8:
b0:7c:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:11 2025 by rpki-client