Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5710DA16A02E11F086007ADEDAE4EC9C.roa
File: 5710DA16A02E11F086007ADEDAE4EC9C.roa (raw, json)
Hash identifier: yZ+m2oO+PpyoOUyivmAmdDZsb6jepRRYPOcTqYEbrDA=
Subject key identifier: 0E:C2:73:3E:28:C6:1E:53:AB:EF:74:64:B6:BA:D2:DC:21:B6:43:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A22B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5710DA16A02E11F086007ADEDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 07:55:34 +0000
ROA not before: Fri 03 Oct 2025 07:55:29 +0000
ROA not after: Sat 18 Oct 2025 07:55:29 +0000
asID: 209242
IP address blocks: 154.84.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107051 (0x1a22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 07:55:29 2025 GMT
Not After : Oct 18 07:55:29 2025 GMT
Subject: CN=68df8176-5e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:cb:d6:44:c6:ee:d1:a9:21:9a:d4:85:e0:
09:bc:ce:4d:f7:93:ff:c1:31:5e:10:c8:02:4b:3c:
16:99:57:34:2e:93:74:b9:ce:29:f3:8b:f4:ba:cf:
ac:be:f1:18:2b:d8:11:c5:3d:10:85:2f:6c:6c:61:
4e:29:2a:2e:ed:a6:c0:13:76:3f:06:dc:44:92:65:
3c:3c:3d:80:9b:f6:07:4c:ff:3c:82:5e:c6:6a:66:
54:ff:b3:b2:6a:ae:65:8f:22:45:b6:e9:38:86:ed:
52:a4:1b:c7:e7:68:30:9c:b7:6f:59:7f:70:95:80:
2f:9f:c2:e6:d6:1e:1f:c7:cf:4c:f6:f3:e0:0c:e5:
f9:be:6c:5d:b4:d7:79:51:48:df:1d:e5:02:f6:8e:
ed:f4:61:e0:f3:19:77:5d:bc:5b:35:68:6d:ac:15:
e5:38:ef:00:fa:32:00:1c:bd:6d:b2:e4:3b:79:96:
33:88:31:5b:20:a6:77:58:57:b3:a5:75:0a:b9:23:
de:81:80:27:e7:75:a4:0b:e1:8c:f1:88:c0:be:cf:
50:d4:5c:31:c8:26:af:b5:c5:b8:65:a9:3b:5d:1f:
0d:1e:2d:16:b9:fd:de:d0:f8:9c:2c:48:48:39:83:
09:51:82:8d:9a:d5:9d:b3:58:11:1c:8f:65:66:8f:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:73:3E:28:C6:1E:53:AB:EF:74:64:B6:BA:D2:DC:21:B6:43:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5710DA16A02E11F086007ADEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:25:b4:e4:9f:64:33:ba:ca:8a:6c:06:f9:18:86:f3:0f:6e:
3e:56:bd:e5:ac:aa:cb:d4:06:d4:1f:0b:f9:8e:cc:e6:04:e4:
6e:68:b8:75:af:2f:74:5e:ed:ad:ec:14:f7:30:b1:9d:d6:a5:
f0:7b:f2:33:04:0e:b4:3e:90:a2:c4:a1:b6:40:fa:84:74:f9:
09:4b:55:7c:f1:42:1e:57:d0:05:c8:ee:11:73:81:cf:65:99:
d0:f3:de:1f:fe:89:01:f8:46:bf:47:78:a7:33:df:8e:b0:a5:
19:a0:d5:8c:76:69:15:42:9e:57:53:fd:6e:e9:98:cf:6c:c1:
d3:8b:d5:60:36:2c:8c:5d:c0:43:22:eb:9a:69:c7:d6:2e:f1:
8a:03:fb:36:2e:c5:f6:9d:87:f7:76:6c:b0:88:80:7b:26:2c:
59:75:3c:a2:bc:09:48:c0:17:12:c6:1c:fa:7a:ac:eb:21:11:
0e:31:fa:00:84:59:06:e7:98:ed:5d:09:7b:68:6b:a0:36:84:
c5:8c:d7:f3:dc:c6:aa:1e:53:3e:a3:6d:c5:cc:7e:c7:f8:f0:
0b:c3:51:4d:ea:f4:4a:c7:47:d4:84:ee:4a:ac:ff:93:74:28:
55:7e:8a:9d:55:0e:69:97:f2:bb:eb:74:e5:3a:5d:d2:43:aa:
d8:db:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:33 2025 by rpki-client