Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95F47B8E581B11F192A803BBCE1D38B0.roa
File: 95F47B8E581B11F192A803BBCE1D38B0.roa (raw, json)
Hash identifier: X5t9mNrOE887vw/2E5JzAJRplpp1Ks2m32SDFztkayc=
Subject key identifier: B5:76:21:7B:6F:6D:22:34:E9:32:83:18:C2:9C:AC:4A:6E:67:C1:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95F47B8E581B11F192A803BBCE1D38B0.roa
Signing time: Mon 25 May 2026 09:24:53 +0000
ROA not before: Mon 25 May 2026 09:24:48 +0000
ROA not after: Sat 06 Jun 2026 09:24:48 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118618 (0x1cf5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 09:24:48 2026 GMT
Not After : Jun 6 09:24:48 2026 GMT
Subject: CN=6a141565-67a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:ed:5d:15:d8:ce:5a:13:19:b6:c0:61:41:
8e:f3:6f:94:ab:7f:44:63:e4:91:d0:4e:31:44:04:
c6:ff:3a:a5:a0:4c:4f:07:00:7f:69:90:9f:d5:01:
0e:39:52:54:ac:dd:3f:77:43:56:67:68:5a:ce:d1:
f4:33:19:02:c1:7f:3e:f1:96:f8:c0:90:b6:b5:2a:
9e:f2:c1:aa:50:09:05:21:9f:96:0d:68:33:7f:5b:
bb:75:f4:b0:34:ed:b1:1b:9c:4c:8e:a3:c3:bb:3a:
32:83:c5:27:69:18:94:f6:7f:3d:f0:f9:af:da:2e:
d8:c3:33:07:28:ec:bd:d8:a0:92:42:5a:62:e1:0b:
a0:38:67:e9:86:88:74:6d:3c:c4:4f:b5:70:2d:54:
75:5f:f5:82:ac:a4:d9:a5:69:04:44:59:50:b2:c3:
9a:61:7b:89:b1:e8:9a:7f:c2:5c:78:07:09:4d:d9:
63:e4:f8:68:30:b3:26:80:68:b1:bc:db:e4:49:0b:
20:3f:d9:8c:0e:0f:90:27:f9:c9:68:f8:e2:85:3b:
ad:13:f0:65:94:ff:d1:19:ff:3e:11:ef:bb:fa:18:
fa:37:43:67:b9:91:c0:58:3a:d4:71:0c:73:de:a5:
d4:eb:c5:2b:eb:3f:51:74:10:d2:6a:ae:64:5c:e7:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:76:21:7B:6F:6D:22:34:E9:32:83:18:C2:9C:AC:4A:6E:67:C1:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95F47B8E581B11F192A803BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:75:1e:5d:c5:3f:84:ec:12:93:25:28:c3:9d:0f:ee:f3:54:
50:d1:08:7d:ab:3c:4c:9c:e5:f8:ae:ac:41:55:74:1b:c6:68:
04:8b:41:19:98:cd:88:d2:25:50:e4:3e:1b:f0:0b:15:c6:b3:
d0:7e:75:b4:1f:cb:e4:08:38:6d:e4:c4:da:99:da:18:90:6b:
ef:4f:d2:36:b4:05:1b:e3:3b:60:dd:b9:6d:71:c5:ec:10:45:
e2:ed:f2:af:38:e8:1f:00:a8:59:bb:09:14:50:92:22:df:76:
a6:e9:bd:b6:69:f8:e2:31:25:a5:9a:37:d6:f9:1e:67:08:e4:
6a:bd:14:d2:9a:0c:ab:68:34:c0:28:ea:b1:14:ea:75:f5:da:
e3:c3:d4:08:6d:a1:29:f5:0c:83:20:80:bb:e5:b1:5f:6a:93:
d3:82:48:d7:61:54:51:16:e2:80:9a:c5:91:d2:a8:83:b0:ae:
bc:71:ec:ca:b1:8c:33:82:6a:a9:f9:b6:c8:59:7a:b2:e3:bd:
fc:47:03:fa:ba:f6:4d:d6:a3:32:72:36:33:7b:48:e5:78:2a:
01:f8:52:01:3b:82:d8:22:64:53:12:91:6b:85:8e:6e:f3:65:
39:c8:35:7e:af:59:ee:c2:88:59:96:57:73:4a:dd:66:43:42:
e4:c1:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:05:58 2026 by rpki-client