Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5399FEA939A11F0BC1CB7ECDAE4EC9C.roa
File: D5399FEA939A11F0BC1CB7ECDAE4EC9C.roa (raw, json)
Hash identifier: Zp2qDG2fh4IDfLtvQHzXtlCaONfcOTwaqDVB5PPssbw=
Subject key identifier: 7B:E5:2C:DE:BE:FA:BA:3C:70:C6:E4:BE:9F:49:20:8B:AD:71:42:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5399FEA939A11F0BC1CB7ECDAE4EC9C.roa
Signing time: Wed 17 Sep 2025 07:49:26 +0000
ROA not before: Wed 17 Sep 2025 07:49:22 +0000
ROA not after: Sat 18 Oct 2025 07:49:22 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106459 (0x19fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 07:49:22 2025 GMT
Not After : Oct 18 07:49:22 2025 GMT
Subject: CN=68ca6806-5db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:46:1f:63:c3:46:f9:f0:c7:b3:e4:d5:21:
50:ed:b8:4b:5e:ee:bf:b8:f2:43:64:d9:7b:d3:db:
e5:4b:b4:af:14:39:2c:ec:d8:7d:13:f1:f5:b4:f7:
e3:c3:67:5c:3e:09:cd:0c:b6:4c:33:28:9f:ac:0c:
6e:2b:ca:06:2a:17:4b:8b:20:36:9b:fa:2e:d3:ea:
0d:2f:7c:05:e1:26:7e:b8:98:39:8a:6c:86:a5:d5:
ee:02:cd:1b:81:61:c4:5d:fd:db:17:d1:0f:6c:ba:
69:ce:ac:02:32:f4:00:26:b8:4f:84:05:45:ba:7a:
6e:b1:ad:14:4b:f4:7e:7b:27:15:a4:0a:dd:dd:d5:
39:ef:44:32:32:d1:b5:f4:32:35:48:e6:fe:70:73:
af:de:2e:03:7b:18:10:6f:14:49:06:6b:78:ea:92:
5b:f2:3d:11:2a:61:d2:07:11:54:bd:cb:90:96:cf:
d0:50:48:04:78:27:7e:63:1d:d0:eb:52:56:a3:7a:
43:76:1f:27:b7:68:33:eb:87:cf:34:d2:20:ea:5b:
48:1f:a6:54:e0:d2:50:c0:f5:31:8f:aa:ca:66:8a:
1c:ae:c9:4a:4c:ce:56:b1:0e:53:ed:96:e4:c8:a1:
e7:36:1c:e5:da:44:33:c4:88:f7:6a:40:74:11:e2:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:2C:DE:BE:FA:BA:3C:70:C6:E4:BE:9F:49:20:8B:AD:71:42:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5399FEA939A11F0BC1CB7ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:ad:df:a3:4f:04:a2:f7:7a:ef:7f:d8:42:96:f2:8e:81:3e:
45:0a:a5:f6:0b:33:1d:cb:1c:d1:ed:32:70:fe:87:e7:d6:41:
5c:fa:01:e9:40:ca:b5:08:fa:6d:74:f8:e6:84:e3:5f:24:70:
98:87:35:f2:11:dc:4d:0f:3e:b6:63:4d:db:01:17:60:5c:42:
ab:39:4f:76:77:64:09:fb:54:06:ae:a3:df:64:ca:bd:99:ec:
ca:9c:ad:61:13:93:07:82:f3:35:24:eb:32:3d:f4:fc:b6:f0:
99:26:d5:36:4b:6e:1a:4e:fe:b1:68:31:88:4f:3b:ce:53:62:
78:57:d4:ce:e8:e8:20:96:af:46:cd:8b:47:76:6e:fa:8e:71:
ea:c9:70:5e:0d:57:99:36:5e:54:36:6c:d4:b3:04:fa:f4:6b:
bd:e1:9a:ec:79:32:3f:70:e0:77:5d:2d:ee:92:cc:18:6d:ee:
c2:06:1e:5f:e6:de:e5:36:aa:ae:69:4b:99:48:54:c5:49:13:
40:a7:71:f4:76:02:c7:d8:4d:6a:d5:3c:e8:ef:bf:24:77:9b:
51:f3:41:8c:fe:28:6f:d1:96:0f:47:34:dc:80:b2:3e:0b:f2:
fa:5a:6b:9c:b6:f2:32:23:8e:11:7c:03:19:4d:1a:ce:a8:8f:
28:ca:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:38 2025 by rpki-client