Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A11994581311F1A2E79A07CF1D38B0.roa
File: 57A11994581311F1A2E79A07CF1D38B0.roa (raw, json)
Hash identifier: RnTbdexeOzswvvzfzPv1iYI9RriF7hQEuM4Ht6MJ5zI=
Subject key identifier: 21:CD:79:7F:6A:0B:AF:9C:A1:6A:20:96:7D:2D:DD:67:24:8B:95:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A11994581311F1A2E79A07CF1D38B0.roa
Signing time: Mon 25 May 2026 08:25:54 +0000
ROA not before: Mon 25 May 2026 08:25:48 +0000
ROA not after: Sat 06 Jun 2026 08:25:48 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118593 (0x1cf41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 08:25:48 2026 GMT
Not After : Jun 6 08:25:48 2026 GMT
Subject: CN=6a140792-54a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:a8:d4:ce:64:bb:22:b3:17:f4:66:71:c2:
92:d0:b2:0a:5a:17:86:72:2a:28:29:c5:89:67:89:
bc:99:83:74:cb:87:12:97:83:51:5b:e8:e5:61:a0:
4f:2a:e4:50:b1:eb:4c:e7:9e:aa:81:a8:58:3d:fe:
1e:5e:21:16:99:5f:14:81:c6:72:7f:2e:d1:1e:6f:
68:7d:c4:9a:e6:73:bb:35:3d:aa:95:de:42:4b:d2:
2f:5c:ef:f4:6d:0d:8c:3d:9e:28:c4:56:ec:63:48:
22:d5:5a:3f:54:06:00:9d:66:11:25:00:11:cc:e3:
f0:b2:83:07:28:d3:8c:22:bd:f2:a4:00:0f:b7:cc:
1e:d2:32:8e:83:94:c0:5f:ea:9b:a7:d4:a0:38:e0:
33:ce:56:a0:9f:2c:00:b1:a8:73:4c:64:7c:34:0d:
70:cc:08:72:86:9c:d8:e1:a1:93:da:43:dd:04:2c:
b7:03:1a:84:45:50:1d:c3:4a:0f:5c:11:c0:ff:60:
96:57:a2:92:37:36:92:b5:d9:fb:ac:24:29:44:53:
8a:86:23:40:91:6c:7f:c3:c4:99:4f:f1:99:5f:c6:
b5:43:09:92:0d:38:9c:08:8f:2a:4c:a8:53:c2:1d:
7f:fb:ca:47:53:2e:18:b5:22:20:5e:b9:a7:1d:c2:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:79:7F:6A:0B:AF:9C:A1:6A:20:96:7D:2D:DD:67:24:8B:95:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A11994581311F1A2E79A07CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
47:e9:80:f5:24:45:4b:b8:61:b9:09:01:75:00:a4:49:6c:25:
af:5a:9b:ae:82:ab:6f:f0:51:55:b9:2e:94:d9:ad:dc:0f:7a:
07:b3:82:9b:9d:f9:09:a7:b8:76:a6:84:e3:08:f5:a8:eb:43:
42:6e:b2:3f:bc:ea:b3:cd:b2:00:4e:77:18:fa:a1:1f:79:fb:
6b:8a:ee:be:a6:82:9d:84:6a:98:cf:c4:77:13:d6:7b:fe:3e:
8a:6e:b0:27:00:3d:13:94:b8:3e:25:db:25:b5:c9:d6:c1:80:
f5:f3:96:bf:ac:a7:b8:0d:97:e8:87:f8:f7:0f:69:ef:1a:10:
54:f5:2f:77:60:f4:bc:ee:a5:55:c7:06:00:cf:93:48:7b:7d:
67:cb:a3:eb:54:83:c7:2b:8a:f2:d1:b1:a9:25:be:f6:a1:f0:
ac:b2:1f:0b:24:88:39:84:05:d9:0b:d0:b9:b8:82:47:8e:f1:
8c:e4:fd:4d:f0:ba:20:03:f0:94:02:6e:29:2d:6b:8f:83:b6:
9d:10:10:60:0e:01:7a:e2:3c:ea:03:9e:f9:74:11:2c:eb:dd:
36:30:1e:f0:10:a7:6d:8d:47:a4:f3:94:66:cc:13:4a:6a:06:
aa:21:6f:06:f1:89:8e:f4:ee:99:dd:3c:a9:8f:aa:86:7d:2e:
47:35:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:03 2026 by rpki-client