Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E71410A6E8611F1B85B79ABCE1D38B0.roa
File: 7E71410A6E8611F1B85B79ABCE1D38B0.roa (raw, json)
Hash identifier: 4nn8MKl4bF9ND7YpGPahVnIT3tU8mqB4NKpIS920ZnI=
Subject key identifier: 3F:13:AC:6D:C4:76:BA:3A:2F:D9:FD:96:5C:89:73:F4:72:F6:21:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D461
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E71410A6E8611F1B85B79ABCE1D38B0.roa
Signing time: Mon 22 Jun 2026 22:05:36 +0000
ROA not before: Tue 23 Jun 2026 22:05:28 +0000
ROA not after: Thu 23 Jul 2026 22:05:28 +0000
asID: 49453
IP address blocks: 154.193.188.0/24 maxlen: 24
154.193.189.0/24 maxlen: 24
154.193.190.0/24 maxlen: 24
154.193.191.0/24 maxlen: 24
154.208.112.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119905 (0x1d461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 22:05:28 2026 GMT
Not After : Jul 23 22:05:28 2026 GMT
Subject: CN=6a39b1af-d07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:6b:9f:36:fb:c9:75:5c:95:93:8e:b5:e3:
24:b0:c8:76:d0:87:18:22:15:fc:ef:b3:18:9f:de:
64:a9:ff:90:18:c9:a4:9d:05:9a:c8:3b:cd:b0:0c:
4e:90:ec:c0:70:ce:31:7f:70:b9:f0:1a:7c:73:78:
9c:b7:97:52:a4:5a:32:50:dd:93:e8:b6:0b:7a:7c:
95:bc:04:5a:37:a2:8e:15:ff:bc:6f:29:75:ba:cf:
c5:78:99:07:4e:a9:db:e7:25:df:f5:40:3b:92:55:
fd:fa:68:b8:ff:bf:71:2f:c8:c3:b9:28:b4:af:49:
c6:d4:f0:b8:98:04:b2:bf:b8:21:18:78:7c:5d:4c:
57:3f:ec:cc:77:6f:1c:f1:0a:9d:5f:43:e8:0a:d3:
38:0a:95:f6:c9:ce:29:ac:bb:4d:24:6f:0f:2b:c9:
5a:63:cb:c4:7e:7c:ff:aa:03:05:90:c4:cf:15:57:
a5:d5:62:01:77:dc:93:28:48:8f:eb:a8:4c:c8:5b:
4e:c6:5f:ff:4c:04:ba:0f:a8:16:d5:28:2e:cb:a6:
35:96:c9:be:58:ae:8c:f7:f7:aa:98:0d:87:4d:c1:
9d:48:53:b5:58:42:39:40:00:91:be:e2:13:3e:ee:
34:9c:0d:21:e4:08:7b:18:2f:14:34:12:9f:bf:f0:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:AC:6D:C4:76:BA:3A:2F:D9:FD:96:5C:89:73:F4:72:F6:21:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E71410A6E8611F1B85B79ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.188.0/22
154.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ea:6d:86:db:19:bd:07:f7:fa:c1:22:b7:2b:4b:e2:cd:c9:
9e:8d:95:13:89:26:8d:76:c2:90:e3:8f:2f:b4:f7:4a:cf:fb:
ea:bd:fa:12:92:90:da:34:fb:4c:51:73:27:1f:8f:56:5b:14:
06:3f:90:ae:83:20:39:cd:0b:d3:cd:c8:95:ec:e2:a8:78:74:
59:9e:04:1a:84:cc:42:4a:7d:bf:58:16:92:11:b1:91:d7:db:
cf:16:f6:f7:ae:1d:ba:a6:14:7d:1e:08:e9:25:86:30:32:eb:
ab:8a:97:60:6f:fe:d6:48:2b:7c:c1:17:63:7c:92:89:e8:ef:
d9:ab:37:47:33:e0:74:bf:87:70:fb:f8:ff:71:46:55:1d:62:
91:3b:48:dc:2a:c5:3b:1e:3c:84:df:0c:73:fc:0a:7e:8d:18:
b1:e9:de:67:36:8b:c6:7d:50:c6:1c:e4:7d:82:9f:15:c7:6a:
b3:61:d1:c4:ac:e5:e3:27:17:4b:0a:30:32:31:88:20:d1:bf:
41:db:63:75:c5:11:64:23:eb:fc:ed:fc:90:b7:4d:df:37:d7:
27:c7:a9:9c:e6:8a:96:e2:8f:b3:c6:f0:ef:ae:47:d2:12:d0:
9f:fc:4c:8f:ff:1f:35:2b:62:d9:cd:51:1b:c4:f4:38:88:e8:
5a:83:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:46 2026 by rpki-client