Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC4410E90FF11F08E3F977CDAE4EC9C.roa
File: 6EC4410E90FF11F08E3F977CDAE4EC9C.roa (raw, json)
Hash identifier: dVtftMemAYkFff1i28h/RQIdFVc6UZDAdFYRoUYud5A=
Subject key identifier: 23:55:BC:0B:6A:D6:4F:EC:B1:14:00:91:1D:18:38:E6:57:1F:E5:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC4410E90FF11F08E3F977CDAE4EC9C.roa
Signing time: Sun 14 Sep 2025 00:12:00 +0000
ROA not before: Sun 14 Sep 2025 00:00:55 +0000
ROA not after: Sun 19 Oct 2025 00:00:55 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106389 (0x19f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 00:00:55 2025 GMT
Not After : Oct 19 00:00:55 2025 GMT
Subject: CN=68c60850-33fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:13:ce:b4:ae:10:20:79:8c:c7:03:b2:f0:
40:6e:49:9c:07:63:90:4b:42:1c:d3:5a:e2:6b:aa:
f1:e8:8f:ce:2b:0c:4e:e6:fb:6b:c8:86:11:6e:8d:
fc:4e:65:03:0d:83:99:40:b6:c6:44:1f:ca:ac:9d:
ea:a7:bd:65:0e:94:0f:42:53:d0:e5:1d:54:42:fd:
f1:8d:ee:38:76:fa:e5:6e:3e:29:31:0b:07:69:17:
20:da:9c:28:8b:8e:43:d6:d8:69:0c:fc:30:2f:39:
ea:07:48:5f:4f:94:59:13:b0:c6:4e:70:93:31:33:
c5:8a:c5:13:5f:91:bc:d0:5b:9b:a7:e9:83:40:8b:
40:7d:db:bb:2d:9a:7e:e1:c2:e6:ea:c9:1a:48:54:
90:ce:e4:d7:50:53:a1:ab:89:10:f0:77:3a:75:c2:
09:7d:fe:a6:50:e9:5e:b3:77:8e:1e:e8:50:af:99:
23:4a:e2:8e:5f:c4:7d:65:94:1b:65:f0:73:d2:4c:
bf:fa:36:7e:98:4a:c8:75:be:f0:59:b5:e7:a6:b0:
ae:bc:d1:f2:43:07:e9:4e:66:0a:ea:9c:58:9f:72:
9e:bb:75:27:56:e0:03:a8:6c:8b:2b:25:05:8a:d3:
34:36:0c:e0:13:db:cb:85:e8:f4:33:9a:ee:1b:40:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:BC:0B:6A:D6:4F:EC:B1:14:00:91:1D:18:38:E6:57:1F:E5:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC4410E90FF11F08E3F977CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c3:2c:ba:7b:a2:aa:a4:1e:d2:d3:2a:a3:a2:1e:f8:bf:d8:a5:
5e:00:ac:f7:67:6c:22:ec:12:09:0b:3a:80:32:d5:f0:c9:63:
e2:4a:5d:ab:85:a0:9b:88:79:eb:20:cc:1b:4d:7a:13:1d:11:
f9:38:f9:0b:1b:52:60:94:28:4a:3e:d5:bd:46:ce:dd:23:ef:
f3:0d:bd:f5:a2:e5:91:1c:d9:0e:c1:38:f8:92:fe:d0:d2:00:
0d:55:dd:c9:84:f5:61:6c:ab:c5:40:2f:97:c7:61:85:dc:80:
92:bc:cf:17:50:5b:31:d6:50:7c:12:1b:27:df:f0:d5:d3:1d:
e3:8d:95:34:0a:0f:1a:cd:2d:b5:50:99:c5:05:18:45:89:80:
67:a7:14:bf:62:2f:08:47:b9:5c:69:04:7b:ea:26:bd:ef:28:
b1:37:41:73:4c:20:bc:61:25:a3:73:c8:5d:3c:b6:ec:0a:40:
7f:12:8c:14:b9:69:93:46:b8:d1:08:47:94:82:fb:7d:aa:4a:
2f:09:b2:fd:07:4e:b9:b1:4f:c8:63:00:3f:c7:1d:6f:58:04:
f7:6b:42:c1:dd:80:67:07:41:b9:63:ad:7b:01:b7:2c:2c:50:
0b:e8:87:f5:63:d2:02:27:0a:a3:84:f3:0b:97:56:80:41:c4:
0b:fb:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:57 2025 by rpki-client