Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEDE634E920411F0A249E8A8DAE4EC9C.roa
File: BEDE634E920411F0A249E8A8DAE4EC9C.roa (raw, json)
Hash identifier: GLHaYFbHutvGL6cYMDqaUB1/MvKcpc7NReH1EJRXIyU=
Subject key identifier: 78:F6:90:B0:D9:93:45:FC:BD:41:02:FB:A5:5A:74:E8:EA:12:01:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEDE634E920411F0A249E8A8DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 07:22:33 +0000
ROA not before: Mon 15 Sep 2025 07:22:28 +0000
ROA not after: Sun 19 Oct 2025 07:22:28 +0000
asID: 6079
IP address blocks: 154.83.160.0/20 maxlen: 24
154.89.240.0/20 maxlen: 24
154.90.80.0/20 maxlen: 24
154.90.96.0/19 maxlen: 24
154.92.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106406 (0x19fa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:22:28 2025 GMT
Not After : Oct 19 07:22:28 2025 GMT
Subject: CN=68c7beb9-e4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:8e:d5:51:34:a9:fb:3a:10:b5:e3:32:10:
78:11:19:69:a5:f9:14:ab:bd:d6:99:c6:a3:36:b0:
d3:9a:e3:e7:a2:2e:a9:31:43:6e:fa:79:76:68:7e:
75:52:3b:87:2c:7e:0b:b7:c4:60:a8:d2:cd:29:b4:
2b:e1:09:87:19:dc:01:13:90:c7:e4:46:4e:86:80:
7e:0e:6b:7e:36:71:16:f3:a3:f6:88:54:66:c0:ff:
e3:e1:84:c4:10:e2:f9:ea:a1:7d:01:13:35:b8:04:
4f:b3:74:ae:f3:a6:1a:68:c2:f9:64:cc:19:56:06:
45:4d:ab:f6:78:93:15:cb:38:e4:60:48:cf:b5:c8:
b8:81:a6:01:ea:7d:9c:1c:6b:9c:87:7c:3b:f9:61:
11:02:89:4a:cd:f9:4d:22:f9:98:73:98:07:a4:9f:
f5:ea:ae:b4:8c:b6:95:b5:43:dd:97:05:0e:a0:9b:
f3:4e:26:fd:51:f6:9f:5f:1f:a4:8b:a8:d5:bb:cf:
a2:d5:5a:2d:58:01:fc:d1:08:39:70:bb:6c:50:80:
f4:7e:ad:4e:50:84:e1:dc:8b:55:95:68:fe:44:6d:
02:76:be:88:ff:e3:a7:8b:3a:c8:fd:60:28:67:37:
bb:95:87:e9:99:d5:60:ec:31:59:08:17:e5:52:63:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:90:B0:D9:93:45:FC:BD:41:02:FB:A5:5A:74:E8:EA:12:01:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEDE634E920411F0A249E8A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.160.0/20
154.89.240.0/20
154.90.80.0-154.90.127.255
154.92.144.0/20
Signature Algorithm: sha256WithRSAEncryption
24:06:71:07:1f:49:e4:60:93:01:07:75:9b:1e:89:49:3c:94:
ba:f8:00:9e:13:e7:a2:79:91:b2:7f:f2:6e:22:07:be:3b:08:
f1:0e:d2:9b:9b:cf:67:4b:df:7a:bb:dc:19:d0:3d:7d:a8:79:
64:20:e1:5c:b9:8b:d8:13:36:04:25:46:48:6a:8a:1f:84:36:
9a:bc:99:2c:a2:b1:ed:2b:2d:34:0b:d1:61:b0:be:4a:cd:1b:
de:fa:5a:8d:57:8c:df:37:15:79:e4:bd:bd:7b:87:00:7f:44:
92:41:b5:a0:20:13:67:05:58:28:f5:2d:9e:2a:8a:37:40:13:
6c:ab:8d:58:2d:f3:af:1e:0d:40:d1:fd:02:9d:4d:89:d7:19:
c4:69:3e:9d:23:6b:ec:dd:4f:58:2a:16:6c:c5:af:32:e4:c5:
f5:10:50:d9:07:f8:b1:df:b4:9e:4d:aa:61:0a:d3:65:9b:d6:
73:55:6f:29:48:d9:4e:81:05:58:2a:ab:4c:4b:f6:bd:3d:e7:
22:cd:f6:55:fa:a9:5a:8f:8d:74:67:f0:be:0a:73:fe:a4:ed:
e6:e8:25:9f:91:44:db:19:15:2e:b7:79:af:55:1e:b4:f4:a5:
d5:09:a5:de:81:af:b5:0d:b3:3a:26:7a:7d:2a:82:ff:00:23:
46:48:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:26 2025 by rpki-client