Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60CFB094581C11F1BAE857BFCE1D38B0.roa
File: 60CFB094581C11F1BAE857BFCE1D38B0.roa (raw, json)
Hash identifier: 4ks+HLkdJlH5+WXfLMj4rQ/gWD2H1yDPxf39E0RVTuQ=
Subject key identifier: 23:D0:19:7A:5A:33:FF:8D:D6:4B:5A:16:73:1F:C0:30:3B:83:99:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60CFB094581C11F1BAE857BFCE1D38B0.roa
Signing time: Mon 25 May 2026 09:30:34 +0000
ROA not before: Mon 25 May 2026 09:30:29 +0000
ROA not after: Sat 06 Jun 2026 09:30:29 +0000
asID: 140227
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118620 (0x1cf5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 09:30:29 2026 GMT
Not After : Jun 6 09:30:29 2026 GMT
Subject: CN=6a1416ba-b281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:90:2d:eb:ab:82:23:ea:9e:8a:31:52:19:6e:
4c:b8:09:b3:b0:a1:ff:52:b9:54:d2:ad:49:fb:a4:
cd:17:ea:95:06:3a:c7:7b:47:1f:fc:43:30:50:bb:
bc:74:4b:89:80:bc:99:fc:56:c1:3b:3d:3a:87:bd:
31:33:b2:12:41:a1:ec:54:86:06:60:44:e6:1f:cb:
db:2a:02:50:bd:bb:41:c3:15:e3:7a:b2:75:ee:30:
4d:f3:35:be:8a:66:d4:37:a3:8b:fb:04:92:3b:cd:
03:38:7b:95:4d:4e:47:37:b2:35:1e:40:2e:a8:1c:
74:58:4f:e6:26:e8:88:d7:97:e3:38:d2:23:bd:61:
89:9e:60:a1:69:66:aa:f5:32:b6:03:fa:94:01:66:
c1:2f:73:f4:72:e0:29:7c:e3:f5:28:2d:04:75:03:
d8:43:ea:1f:de:1c:87:22:35:d1:5a:9f:6d:a0:36:
07:83:fd:f2:95:f5:78:25:36:6a:e4:e9:08:8d:99:
eb:e1:4f:ac:62:50:4d:78:bf:a2:bf:3c:71:4d:f2:
4e:ca:c1:7c:e2:63:72:b4:ea:87:26:a9:54:c0:7f:
4d:58:48:05:26:98:08:d3:71:e6:82:2c:18:2a:b9:
a0:f1:67:d4:19:49:d4:46:40:c7:84:6f:98:95:ad:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:19:7A:5A:33:FF:8D:D6:4B:5A:16:73:1F:C0:30:3B:83:99:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60CFB094581C11F1BAE857BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0-154.86.20.255
Signature Algorithm: sha256WithRSAEncryption
93:d7:9c:80:3b:4b:32:98:5e:54:08:61:82:02:00:42:a9:24:
6a:9f:74:27:b8:1f:12:48:71:4a:bc:86:af:7e:4d:a5:11:d9:
86:d8:54:22:ad:42:30:34:f2:76:14:80:1c:12:ea:96:d6:4b:
d7:9c:89:ad:2c:86:ec:43:7b:fa:d7:62:1b:9d:c5:bf:91:3f:
c3:68:49:d6:ea:33:e3:94:ce:91:0e:d8:22:80:80:b7:7e:e9:
30:ad:e2:f3:1d:82:37:57:87:11:46:37:1f:17:da:fd:b3:0b:
61:a2:0e:93:40:58:80:5c:2d:0d:f1:83:f9:50:d5:0f:20:3c:
18:54:81:89:1d:38:27:29:b8:6b:38:32:ac:06:a8:bc:dd:83:
2d:ca:d2:a9:c8:b6:54:66:f4:f5:7d:ed:93:cf:2f:8a:a0:fb:
fa:89:75:ba:00:1b:67:49:ad:d8:bd:53:70:2b:a9:fa:7f:fd:
55:6f:d6:1a:34:a2:78:b8:0a:6c:12:a7:c0:49:de:c2:63:b8:
c8:da:15:f9:ed:78:d1:e7:77:07:c4:70:e4:34:ae:8c:e9:2c:
30:22:a1:3e:55:1b:73:1c:5c:a8:e6:8f:ab:ca:85:b8:f9:1f:
71:88:88:ed:7f:ed:71:87:c1:13:f8:4c:ae:46:99:db:48:3f:
3e:f2:80:bb
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAc9cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNTI1MDkzMDI5WhcNMjYwNjA2MDkzMDI5WjAYMRYw
FAYDVQQDEw02YTE0MTZiYS1iMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA55At66uCI+qeijFSGW5MuAmzsKH/UrlU0q1J+6TNF+qVBjrHe0cf/EMw
ULu8dEuJgLyZ/FbBOz06h70xM7ISQaHsVIYGYETmH8vbKgJQvbtBwxXjerJ17jBN
8zW+imbUN6OL+wSSO80DOHuVTU5HN7I1HkAuqBx0WE/mJuiI15fjONIjvWGJnmCh
aWaq9TK2A/qUAWbBL3P0cuApfOP1KC0EdQPYQ+of3hyHIjXRWp9toDYHg/3ylfV4
JTZq5OkIjZnr4U+sYlBNeL+ivzxxTfJOysF84mNytOqHJqlUwH9NWEgFJpgI03Hm
giwYKrmg8WfUGUnURkDHhG+Yla38ewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCPQ
GXpaM/+N1ktaFnMfwDA7g5nbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MENGQjA5NDU4MUMxMUYxQkFFODU3QkZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaVhADBACaVhQwDQYJ
KoZIhvcNAQELBQADggEBAJPXnIA7SzKYXlQIYYICAEKpJGqfdCe4HxJIcUq8hq9+
TaUR2YbYVCKtQjA08nYUgBwS6pbWS9ecia0shuxDe/rXYhudxb+RP8NoSdbqM+OU
zpEO2CKAgLd+6TCt4vMdgjdXhxFGNx8X2v2zC2GiDpNAWIBcLQ3xg/lQ1Q8gPBhU
gYkdOCcpuGs4MqwGqLzdgy3K0qnItlRm9PV97ZPPL4qg+/qJdboAG2dJrdi9U3Ar
qfp//VVv1ho0oni4CmwSp8BJ3sJjuMjaFfnteNHndwfEcOQ0rozpLDAioT5VG3Mc
XKjmj6vKhbj5H3GIiO1/7XGHwRP4TK5GmdtIPz7ygLs=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:07 2026 by rpki-client