Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5860A7B29A2411F08B7E88B5DAE4EC9C.roa
File: 5860A7B29A2411F08B7E88B5DAE4EC9C.roa (raw, json)
Hash identifier: awVl+ZflGGhTi+XMDkkH39EWUv5oVXcFyVaV186aLr0=
Subject key identifier: 22:E7:BF:F0:37:F7:32:9D:BF:2C:5C:3E:64:21:2D:13:AA:AD:28:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A103
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5860A7B29A2411F08B7E88B5DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 15:28:54 +0000
ROA not before: Thu 25 Sep 2025 15:28:49 +0000
ROA not after: Sat 18 Oct 2025 15:28:49 +0000
asID: 203020
IP address blocks: 154.82.24.0/21 maxlen: 24
154.85.24.0/23 maxlen: 24
154.88.10.0/23 maxlen: 24
154.88.18.0/23 maxlen: 24
154.90.160.0/21 maxlen: 24
154.90.168.0/22 maxlen: 24
154.90.176.0/21 maxlen: 24
154.90.184.0/22 maxlen: 24
154.94.10.0/23 maxlen: 24
154.94.20.0/23 maxlen: 24
154.94.24.0/21 maxlen: 24
154.94.54.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106755 (0x1a103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 15:28:49 2025 GMT
Not After : Oct 18 15:28:49 2025 GMT
Subject: CN=68d55fb6-fc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:f8:66:fc:60:1a:39:03:57:8a:ee:42:35:
1c:84:cf:ef:9f:e9:d5:af:f3:f4:37:14:e3:11:f6:
4f:ee:be:a7:41:b2:83:4e:5b:b1:d2:bf:d5:45:34:
1a:05:ee:a6:ab:25:03:2d:09:b9:95:46:96:79:91:
bd:f4:8d:c5:f3:5a:2a:c6:c5:26:6a:3d:33:e2:89:
2e:70:8a:02:3e:d6:11:75:1c:00:d7:c2:a0:eb:09:
87:62:0c:77:a6:6e:93:3c:a2:31:1f:d9:f4:95:88:
d6:5a:b1:12:54:c7:d4:48:ea:8b:10:92:fb:d6:cd:
18:42:88:5a:65:5a:23:33:97:fd:01:c7:ad:a1:6c:
56:eb:fe:c0:27:76:10:87:6a:b7:24:ca:ae:3f:31:
9f:dc:ac:10:c2:ec:e7:f9:cc:3b:4b:30:c7:07:03:
65:df:23:ab:34:eb:f4:45:fa:ad:29:18:16:fa:95:
49:e6:e8:af:a5:a6:35:49:f8:33:7a:e8:fa:a2:44:
40:01:b2:20:a7:2b:e1:a6:40:7d:40:74:ca:ae:3f:
f9:eb:02:de:c8:a3:10:c6:2c:01:7a:32:79:e4:63:
f0:e4:c9:a3:82:bc:f9:ad:29:b5:c5:4a:69:13:fd:
c6:92:b6:70:94:65:e8:66:1e:76:f8:1c:be:56:5d:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:BF:F0:37:F7:32:9D:BF:2C:5C:3E:64:21:2D:13:AA:AD:28:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5860A7B29A2411F08B7E88B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/21
154.85.24.0/23
154.88.10.0/23
154.88.18.0/23
154.90.160.0-154.90.171.255
154.90.176.0-154.90.187.255
154.94.10.0/23
154.94.20.0/23
154.94.24.0/21
154.94.54.0/23
Signature Algorithm: sha256WithRSAEncryption
80:51:0a:2e:0b:dc:db:df:40:62:95:49:8c:c2:df:51:2f:17:
56:ab:6d:f8:cc:6a:4e:39:fc:d2:71:42:72:09:7f:3b:1d:8d:
10:8b:fe:ef:26:30:4d:37:cd:03:44:10:8c:70:f3:11:fb:cb:
d7:7c:3b:67:30:67:38:8b:07:36:8b:7f:47:fe:df:bb:a0:5a:
31:d6:b7:4b:0d:ee:8d:75:83:75:c0:8c:0f:98:90:a7:94:65:
3e:e6:01:f2:ee:ca:94:84:65:80:1b:68:17:27:be:5b:cc:b8:
e0:1e:37:fa:d1:47:65:d5:13:81:b7:de:dc:3b:37:90:02:20:
4e:62:07:8a:0e:7a:a8:a9:9f:03:a4:fc:85:a0:52:69:68:7a:
21:56:4d:82:20:c2:3c:c8:05:82:7e:04:19:74:97:26:db:c6:
ae:40:b7:00:14:ba:b3:f2:26:4c:69:e9:43:bf:3b:9f:1f:d4:
73:5f:7b:c9:f6:65:0b:25:55:34:fc:24:db:d2:7f:6e:00:28:
9b:24:4c:3b:3c:39:5d:a6:a3:91:a0:96:62:8e:97:d2:73:86:
f7:4b:c8:3a:4c:4e:a8:92:b4:33:5f:67:5d:b7:20:d4:81:b6:
3e:79:4f:0e:2b:7a:5f:5a:be:14:f8:da:f2:9a:36:25:67:e1:
8b:5c:db:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:40 2025 by rpki-client