Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0CE184E491A11F1AB8BBEE8CE1D38B0.roa
File: B0CE184E491A11F1AB8BBEE8CE1D38B0.roa (raw, json)
Hash identifier: h6G7iN+oIy9HFAKNDniQfUf9jCqPigMo1Cjp1CkLtkk=
Subject key identifier: 5F:DA:4B:92:E0:B9:42:9F:9B:07:34:36:77:A6:AD:4D:78:20:A1:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C973
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0CE184E491A11F1AB8BBEE8CE1D38B0.roa
Signing time: Wed 06 May 2026 07:10:41 +0000
ROA not before: Wed 06 May 2026 07:10:37 +0000
ROA not after: Wed 13 May 2026 07:10:37 +0000
asID: 40115
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117107 (0x1c973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:10:37 2026 GMT
Not After : May 13 07:10:37 2026 GMT
Subject: CN=69fae971-500e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:ac:6d:32:96:bb:6b:e3:43:e5:9d:b6:5f:
43:51:a3:df:05:ac:9c:fd:b9:4e:f4:cf:ae:2c:93:
f2:3b:cc:83:a1:07:fb:4d:e8:1d:80:f3:8c:7f:f3:
5b:45:67:82:f7:96:a6:d1:14:16:1c:fa:c0:28:14:
ec:10:e6:89:6b:cc:cd:70:d5:94:23:c9:fc:2b:b7:
91:45:b6:2b:04:c9:3c:cf:fe:a9:4c:11:a5:5a:6b:
96:c5:21:c8:00:02:45:66:3a:45:f6:04:6e:33:84:
34:da:2b:56:59:a4:32:07:66:88:15:9a:14:7c:73:
1c:b6:a7:75:c3:fa:d2:4b:29:f1:05:6e:76:24:6c:
d1:17:d0:1c:0d:0e:6c:c9:95:6b:7b:9f:2c:dd:37:
2d:28:9f:fc:53:9b:3f:71:1d:0a:6d:20:08:32:ff:
70:57:a8:58:c6:27:43:38:ba:39:e9:ea:9c:33:e5:
e3:0e:27:02:a2:fd:f8:96:9f:4c:b9:b9:7f:f3:8c:
1b:0b:fe:24:f7:bb:0f:13:11:1c:b9:c5:7c:4d:a2:
c2:9e:1f:6a:0f:5e:00:48:c7:a8:88:2f:76:f2:ec:
e1:85:5f:c0:31:c1:11:a3:87:b9:5b:c6:88:a8:3d:
90:9b:77:18:26:ab:a0:26:09:ff:af:2d:f7:0b:d4:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:4B:92:E0:B9:42:9F:9B:07:34:36:77:A6:AD:4D:78:20:A1:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0CE184E491A11F1AB8BBEE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:f9:97:0b:6e:a8:8d:21:7a:ac:47:1f:db:23:c7:92:b5:b6:
29:be:b3:ea:9f:7a:27:43:38:5b:35:ec:a4:45:08:e7:a8:3e:
a2:4d:ff:1c:e8:cd:1f:af:05:9f:2d:21:37:2c:8d:51:27:1c:
4d:13:ba:6e:ee:93:82:d8:2f:c8:88:84:8d:fb:59:46:d2:2f:
5a:c2:51:ea:88:47:56:f9:e6:d9:be:57:06:fd:b1:74:95:77:
3c:f5:00:aa:af:14:c4:7c:03:77:f3:c7:6b:7a:96:d8:4d:01:
d9:16:08:f0:dc:89:88:77:38:c3:ab:23:64:29:43:e1:9a:e6:
86:e5:88:0c:5e:4c:ba:3c:9b:41:cc:9d:e3:7b:94:aa:ee:5b:
41:de:cf:e0:02:bc:79:6a:7d:36:9d:64:42:32:7f:2f:b6:4c:
34:85:e3:bd:8f:03:88:57:ae:8d:79:7f:6c:3f:06:67:59:0b:
a0:76:a5:1a:32:f6:ce:1e:3e:09:49:4f:b0:37:43:b0:d0:a5:
d7:12:7b:15:25:cb:ad:1b:65:1f:e2:cd:56:fb:97:09:c4:b2:
0f:60:ce:b0:a9:11:b5:3f:76:e0:9b:a9:5b:c5:bd:b3:21:39:
8e:eb:b6:a7:99:8e:e2:68:6d:3a:b0:f8:a6:f1:89:b7:0f:cd:
72:20:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:35 2026 by rpki-client