Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B57F3756D41211F0B0181489DAE4EC9C.roa
File: B57F3756D41211F0B0181489DAE4EC9C.roa (raw, json)
Hash identifier: xa9DuIfA0SMDb/B4cDD5NRsxBaKpUGL1qLgONTb6LhE=
Subject key identifier: A8:70:96:7B:35:8C:C9:B1:E6:B7:19:14:48:21:D3:B4:ED:64:B0:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B57F3756D41211F0B0181489DAE4EC9C.roa
Signing time: Mon 08 Dec 2025 08:48:47 +0000
ROA not before: Mon 08 Dec 2025 08:48:42 +0000
ROA not after: Thu 18 Dec 2025 08:48:42 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109907 (0x1ad53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 08:48:42 2025 GMT
Not After : Dec 18 08:48:42 2025 GMT
Subject: CN=693690ef-e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:75:5f:14:f0:16:79:cb:b9:94:21:18:2f:73:
76:4e:4d:c4:a8:b1:b1:f2:47:49:f2:d5:0d:19:dc:
9b:e1:55:a8:de:ab:de:04:b6:99:19:71:49:57:59:
84:cd:7a:89:99:87:17:12:13:e8:5b:ee:c4:6b:6e:
77:c5:f5:87:c6:53:3c:2e:95:44:c7:ab:4a:50:ad:
63:39:cb:96:de:b8:1b:22:0d:e3:f2:f9:50:13:4a:
ca:75:45:2e:2c:5e:a8:31:9a:1d:9e:59:26:be:5c:
7d:25:cd:36:61:8b:48:35:e4:f8:05:7d:17:2c:82:
94:ed:39:78:5d:ee:8f:2b:dc:59:4d:d4:b8:97:e5:
5b:ee:bf:51:14:19:76:02:da:93:bd:e1:9c:6f:51:
0e:db:7a:d2:b0:5e:a3:e9:0e:24:ff:60:f4:e3:ee:
a1:af:d7:c4:03:47:e5:4a:07:c4:7e:e1:3f:d7:6c:
cb:33:42:5f:c3:f8:c7:59:25:1e:16:d0:05:ad:95:
70:02:19:c2:0d:a4:40:13:7d:f0:c1:e1:46:7b:32:
b8:7d:c7:7a:70:f3:13:8d:1e:b3:db:69:2f:6e:82:
e8:6d:b6:1d:59:7a:af:25:9f:c9:41:66:88:5f:87:
c6:f7:a4:ad:41:df:d2:e0:d6:4c:ea:bf:ba:b1:fb:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:96:7B:35:8C:C9:B1:E6:B7:19:14:48:21:D3:B4:ED:64:B0:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B57F3756D41211F0B0181489DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/24
154.203.153.0-154.203.159.255
154.203.164.0/24
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4d:e9:c2:94:0a:e6:53:15:64:3c:10:52:c3:54:0a:5f:4b:
70:3f:c3:d6:64:1b:51:4d:bf:ae:9b:e6:58:46:eb:c2:32:9f:
25:95:83:cb:b6:87:86:6a:24:e9:b2:37:98:f4:04:d4:e3:0e:
e1:2b:ce:61:f3:2f:36:ec:03:f4:d5:ce:e5:e8:41:30:ca:3f:
7e:bf:ed:99:32:63:8b:20:13:73:d7:24:65:26:1d:73:ef:35:
eb:3f:f8:9b:bb:f5:4f:f6:7c:c1:d0:e2:bc:22:7f:11:65:1a:
6f:7d:79:1e:16:3e:5a:96:02:1c:2d:7c:5d:20:e0:cd:73:45:
b5:04:38:75:f9:2b:0c:d2:bc:37:84:4a:69:aa:3c:bc:bb:02:
4b:24:a3:c0:18:cb:f5:50:1a:a6:61:84:f4:9c:49:10:42:71:
b3:f4:a9:69:5c:be:d0:ee:5b:2b:4c:28:41:6f:fe:97:12:ea:
63:9a:ad:65:cd:91:77:23:03:94:51:dd:48:d3:bc:7d:53:5f:
78:c1:3c:8c:b0:d9:06:1a:a3:2a:ff:8d:aa:c1:a2:04:68:9e:
4f:57:06:7c:48:c6:74:fa:d9:59:a6:7e:68:23:32:88:dc:70:
a9:ec:0c:60:b6:81:62:0d:cc:ba:f8:ca:12:83:cc:5c:c1:72:
3a:74:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:07:33 2026 by rpki-client