Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D01A5B20A8B11F1A6CD99D7DAE4EC9C.roa
File: 7D01A5B20A8B11F1A6CD99D7DAE4EC9C.roa (raw, json)
Hash identifier: sz7L9PXKuzCQoZq9YrsqZS2tFD/P2kW2XkQA5OGFXtA=
Subject key identifier: F2:1A:31:21:05:AA:18:DD:78:9C:84:1B:0E:01:1F:4F:1C:A8:40:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B97C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D01A5B20A8B11F1A6CD99D7DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 16:29:24 +0000
ROA not before: Sun 15 Feb 2026 16:29:20 +0000
ROA not after: Sun 22 Feb 2026 16:29:20 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113020 (0x1b97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 16:29:20 2026 GMT
Not After : Feb 22 16:29:20 2026 GMT
Subject: CN=6991f464-24d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:78:d9:e6:bb:4e:10:45:41:6a:89:34:ce:
b2:4a:a0:71:a6:22:34:0f:30:93:21:54:66:2a:42:
bb:95:d4:31:ef:f5:60:74:50:cc:5d:76:19:f5:03:
5e:ee:89:16:4a:cd:8b:63:5e:46:be:16:21:3a:75:
e7:25:3d:b4:78:aa:c2:96:f7:2a:1f:0c:2f:37:25:
ca:e0:a2:ba:a8:73:ca:59:19:cf:22:8d:2d:07:15:
da:f0:eb:45:6d:19:bf:84:f7:7c:a2:3e:5d:8e:07:
f5:6d:7d:7d:55:bd:22:74:13:85:99:15:11:4c:bf:
fc:69:e0:49:1e:61:9d:8b:8a:9a:8b:96:33:b1:61:
5e:f7:72:0d:16:aa:e0:33:a0:41:e9:42:1d:40:38:
aa:57:3a:2a:ca:d4:e7:16:6e:ef:c2:93:3b:34:0c:
a3:20:eb:85:d4:1b:67:6a:05:0e:ee:42:45:09:e6:
52:53:e3:95:59:1d:94:f2:97:80:59:80:cf:c3:7b:
b1:3e:ae:54:4f:ae:54:b8:f2:4e:64:12:8e:88:b6:
4d:d4:1f:40:6a:96:2c:f7:82:c7:1a:bb:f5:dd:48:
f0:75:de:a3:28:6c:c3:d4:5b:e1:83:7a:78:62:aa:
f0:61:dd:b5:94:6b:60:bc:1b:5e:9d:05:91:b2:8c:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:31:21:05:AA:18:DD:78:9C:84:1B:0E:01:1F:4F:1C:A8:40:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D01A5B20A8B11F1A6CD99D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c9:99:11:a4:03:13:3a:90:e2:d2:88:2b:a2:39:8b:f3:9b:
0c:7f:9e:ef:07:96:25:62:1d:ff:03:f2:6e:bd:32:ac:12:ca:
ee:95:78:27:5b:09:6f:a6:be:7b:b8:dc:b6:85:f4:ac:c1:77:
ba:58:4e:cd:c0:a8:ae:d1:62:7a:8e:e3:92:17:11:39:e2:94:
bd:e7:11:b6:55:3c:d0:16:03:f4:b8:8b:17:27:26:9f:70:54:
f2:ba:c0:f4:7d:49:a2:7e:22:fa:bf:9c:64:aa:ce:6f:bd:b5:
1d:8a:4e:16:69:93:6b:a9:ae:85:5e:40:cf:52:4d:db:af:a4:
de:a6:6c:e3:32:25:ea:6d:7a:ce:2a:ed:96:62:41:96:65:2f:
89:71:58:8c:a9:5c:0e:9b:c9:68:bc:c9:d8:1c:76:f5:4c:57:
59:e8:b3:2f:b9:fd:2c:bb:c8:74:2a:a4:2f:bd:83:13:b3:0c:
cd:e6:c8:d9:b5:bc:9b:99:27:6d:9d:48:9d:c2:44:79:57:87:
59:08:97:30:3f:dc:7b:61:df:d6:1e:41:da:23:af:76:02:fc:
8a:5d:9c:d6:33:b7:f3:99:7c:9a:8a:1b:45:a2:ec:b9:db:ce:
ab:6d:76:00:54:09:50:17:d7:88:51:ad:b7:fd:b4:f9:21:51:
af:7a:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:57:56 2026 by rpki-client