Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C168AFB890FE11F0831494F6DAE4EC9C.roa
File: C168AFB890FE11F0831494F6DAE4EC9C.roa (raw, json)
Hash identifier: ADwbtTN76rgUzasbRI7wvIXZ3WYFncwRcqlLbjXnqj4=
Subject key identifier: 5D:D0:DC:8D:64:D8:D5:62:77:0A:44:C4:A3:F4:74:49:B8:18:29:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C168AFB890FE11F0831494F6DAE4EC9C.roa
Signing time: Sun 14 Sep 2025 00:07:09 +0000
ROA not before: Sun 14 Sep 2025 00:00:04 +0000
ROA not after: Sun 19 Oct 2025 00:00:04 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106387 (0x19f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 00:00:04 2025 GMT
Not After : Oct 19 00:00:04 2025 GMT
Subject: CN=68c6072d-88cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:e9:33:cb:3c:ba:95:a2:6b:39:37:62:80:
96:0e:e8:7f:6f:6d:1d:40:bb:e0:1f:43:58:68:db:
c4:0d:aa:cf:29:43:be:6a:80:1d:3f:c0:d6:7e:b3:
58:19:52:82:f3:cb:89:60:da:69:ec:e4:e4:e0:70:
3a:a5:d8:39:dd:a3:bc:0a:a2:e3:85:1c:6f:22:14:
05:22:dd:11:ec:f4:9d:f3:8e:b2:3a:14:fb:4d:5d:
de:72:d4:12:1d:b2:4e:94:e6:19:2d:e7:23:8a:8d:
12:eb:e6:10:94:84:c3:32:a6:94:ca:4d:91:f1:f1:
ee:90:f3:fd:ff:c2:c0:9e:a8:84:e7:20:37:28:99:
db:d9:6e:f5:8c:76:f0:7e:04:92:51:19:62:c4:53:
08:48:46:67:b1:e8:8f:31:00:90:1a:91:7f:3c:bb:
f1:93:54:fe:38:24:38:1d:6d:3d:c5:05:77:32:1d:
1a:dd:3d:b8:2c:89:59:1e:8d:77:b9:06:dc:d5:96:
86:b5:7e:a0:aa:71:60:41:45:7f:a2:a3:37:b2:a2:
e8:3a:fb:ce:16:33:40:a6:3c:57:7a:e6:e8:f6:3a:
f5:d5:36:f0:4c:75:41:97:50:5a:27:59:1e:06:21:
99:b6:20:9b:22:18:06:82:13:72:97:d2:1f:a2:b0:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:DC:8D:64:D8:D5:62:77:0A:44:C4:A3:F4:74:49:B8:18:29:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C168AFB890FE11F0831494F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
154.92.200.0-154.92.204.255
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f4:78:80:7b:d8:94:ee:22:fe:09:5d:e3:c1:03:a8:7e:0d:
45:31:65:04:02:d3:cb:5b:05:d5:f4:34:fa:f4:fa:aa:ff:d8:
f9:56:c4:09:e5:9a:2d:09:ae:88:5a:74:b5:91:cf:d8:92:df:
54:ec:a2:e1:7d:1f:fc:27:0b:02:1a:5d:60:b0:d9:c0:56:de:
52:dc:61:59:92:b0:60:a5:1d:0d:7b:e4:c6:53:f3:3d:fb:85:
fd:ce:a3:d6:b4:16:c7:ee:92:f3:b9:47:de:a5:d8:40:49:8e:
32:6f:ee:87:48:a1:e5:bc:e8:5e:87:dd:09:25:17:0f:59:59:
e4:0a:a6:10:10:fb:b5:c8:53:20:b4:09:25:f6:72:97:bb:ac:
24:02:d3:b3:fd:1c:9a:82:2a:ea:fb:7c:3b:0a:ce:75:40:75:
a4:8a:9c:f5:38:37:21:21:fa:34:cf:30:c6:2b:29:19:c4:63:
e4:02:bd:d7:c5:85:4f:04:e3:59:17:be:fd:d8:bf:2d:99:f6:
f0:1b:68:f7:94:46:2e:53:af:f5:85:ed:68:3d:9d:12:95:8d:
c0:56:d9:5b:a6:44:e4:62:58:b8:46:d5:76:7f:80:78:ed:a2:
8f:55:2d:d0:ba:23:38:02:95:16:71:60:29:61:22:22:7a:b5:
5e:6a:37:a9
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAZ+TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTE0MDAwMDA0WhcNMjUxMDE5MDAwMDA0WjAYMRYw
FAYDVQQDEw02OGM2MDcyZC04OGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2zzpM8s8upWiazk3YoCWDuh/b20dQLvgH0NYaNvEDarPKUO+aoAdP8DW
frNYGVKC88uJYNpp7OTk4HA6pdg53aO8CqLjhRxvIhQFIt0R7PSd846yOhT7TV3e
ctQSHbJOlOYZLecjio0S6+YQlITDMqaUyk2R8fHukPP9/8LAnqiE5yA3KJnb2W71
jHbwfgSSURlixFMISEZnseiPMQCQGpF/PLvxk1T+OCQ4HW09xQV3Mh0a3T24LIlZ
Ho13uQbc1ZaGtX6gqnFgQUV/oqM3sqLoOvvOFjNApjxXeubo9jr11TbwTHVBl1Ba
J1keBiGZtiCbIhgGghNyl9IforBF4QIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFF3Q
3I1k2NVidwpExKP0dEm4GCkcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTY4QUZCODkwRkUxMUYwODMxNDk0RjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAaaXMADBACaXMYwDAME
A5pcyAMEAJpczAMEAJpc1zANBgkqhkiG9w0BAQsFAAOCAQEAEvR4gHvYlO4i/gld
48EDqH4NRTFlBALTy1sF1fQ0+vT6qv/Y+VbECeWaLQmuiFp0tZHP2JLfVOyi4X0f
/CcLAhpdYLDZwFbeUtxhWZKwYKUdDXvkxlPzPfuF/c6j1rQWx+6S87lH3qXYQEmO
Mm/uh0ih5bzoXofdCSUXD1lZ5AqmEBD7tchTILQJJfZyl7usJALTs/0cmoIq6vt8
OwrOdUB1pIqc9Tg3ISH6NM8wxispGcRj5AK918WFTwTjWRe+/di/LZn28Bto95RG
LlOv9YXtaD2dEpWNwFbZW6ZE5GJYuEbVdn+AeO2ij1Ut0LojOAKVFnFgKWEiInq1
Xmo3qQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:56 2025 by rpki-client