Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C69C599EA03511F08EB8E08EDAE4EC9C.roa
File: C69C599EA03511F08EB8E08EDAE4EC9C.roa (raw, json)
Hash identifier: rLRaE4Di7AKcyXXrtVf00pwKj3HWO9OG7rJqX7EDZA8=
Subject key identifier: 2D:2C:EC:2E:63:A8:0B:10:2D:7F:72:95:03:88:49:96:F9:8D:75:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A233
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C69C599EA03511F08EB8E08EDAE4EC9C.roa
Signing time: Fri 03 Oct 2025 08:48:48 +0000
ROA not before: Fri 03 Oct 2025 08:48:38 +0000
ROA not after: Sat 18 Oct 2025 08:48:38 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107059 (0x1a233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 08:48:38 2025 GMT
Not After : Oct 18 08:48:38 2025 GMT
Subject: CN=68df8df0-9e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:24:20:5b:3a:32:18:ca:65:46:ed:de:11:
5c:a8:2a:a5:07:67:ac:e8:18:a8:0a:88:0f:df:f4:
e7:21:ef:cd:18:4b:a6:cf:a1:44:af:2a:d6:8b:36:
95:c5:68:16:26:d7:8e:74:f6:e6:a5:e8:c0:1f:1e:
e9:65:da:b6:3d:b1:25:18:dc:6e:83:22:31:69:07:
d6:e5:80:0e:61:4d:91:24:21:75:06:72:6e:42:5c:
4e:a6:92:3f:02:17:91:d6:75:a5:83:ae:d6:4b:10:
01:e1:be:b4:4a:44:dc:b8:42:58:83:ff:52:a5:6e:
ae:3c:f7:16:31:55:3e:85:6a:ce:fe:7b:2a:c9:8e:
f7:09:60:a5:3d:e2:ae:77:2c:7a:00:60:e7:27:7b:
54:bd:8d:99:36:67:45:4a:e6:3d:67:fb:18:82:7d:
40:cf:12:7e:eb:1c:cb:bc:af:e5:40:51:be:c4:c7:
c3:87:cf:f2:48:75:09:08:7b:5c:bc:93:a3:ad:f7:
46:5b:36:d0:37:b5:fd:9b:5a:8a:f3:0f:6c:03:28:
c7:1c:2d:58:38:e6:1c:46:d1:54:4a:8d:c5:9b:f1:
53:08:17:5a:e9:0b:06:14:99:9f:f8:76:59:68:4a:
82:eb:3c:12:cb:ff:3f:37:6b:30:4b:57:59:4a:d0:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2C:EC:2E:63:A8:0B:10:2D:7F:72:95:03:88:49:96:F9:8D:75:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C69C599EA03511F08EB8E08EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
47:f5:e1:25:5f:1f:87:b4:19:a1:e3:11:78:71:a1:e3:4c:5f:
39:89:07:80:8f:c5:50:b5:6e:01:1b:4d:de:28:ab:50:84:2c:
b3:a0:b0:ae:40:81:01:f5:75:b9:79:4d:c0:68:2c:13:a3:80:
94:d2:df:fe:d9:18:b0:45:8d:01:64:e0:68:8b:18:31:93:2d:
0c:93:cc:b0:76:4f:c1:18:0a:5f:48:4c:b9:43:62:56:ae:4f:
e6:24:3c:19:c0:15:f8:d9:6b:1f:ff:87:c2:92:b8:cb:f2:08:
a5:ef:78:dc:16:3f:f3:2a:ed:38:37:60:ed:d1:b8:7a:cd:ee:
3a:4a:fc:08:e6:45:70:23:72:6f:35:f9:4d:28:f2:cb:45:87:
c4:0a:8e:9e:a1:15:e5:40:13:c3:ab:74:0d:7d:30:ed:dc:2c:
46:bf:09:88:cb:05:b9:9b:d6:96:9b:ef:41:56:f1:4e:75:72:
4a:76:23:25:5c:f7:7b:72:99:d3:ca:4a:e9:e2:bb:c9:f3:78:
50:3f:7e:38:33:74:0b:4c:d9:08:82:76:2f:4d:99:7f:83:0a:
6e:a4:47:9a:fb:bb:64:f4:ee:6c:91:bb:67:94:86:12:f4:5b:
84:4d:1e:07:5b:d0:14:46:aa:a8:48:aa:43:0e:eb:f5:2a:f6:
32:a6:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:02 2025 by rpki-client