Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD3FA818D40E11F0BC7647F0DAE4EC9C.roa
File: FD3FA818D40E11F0BC7647F0DAE4EC9C.roa (raw, json)
Hash identifier: LNUA+HwmXBYjxjwb7Qot92fynt4N1KO4ZjtvLt53l/w=
Subject key identifier: 53:10:F4:C6:D0:D0:32:2A:57:3F:11:62:4A:82:A5:37:F7:37:3E:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD3FA818D40E11F0BC7647F0DAE4EC9C.roa
Signing time: Mon 08 Dec 2025 08:22:09 +0000
ROA not before: Mon 08 Dec 2025 08:22:04 +0000
ROA not after: Thu 18 Dec 2025 08:22:04 +0000
asID: 23674
IP address blocks: 154.192.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109893 (0x1ad45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 08:22:04 2025 GMT
Not After : Dec 18 08:22:04 2025 GMT
Subject: CN=69368ab1-260b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:f5:8f:37:b7:86:c0:4a:7a:4d:9d:d4:eb:
46:7d:34:38:90:1d:57:67:67:fb:da:1e:25:22:f7:
6a:45:b6:59:af:d4:ec:c9:0d:e9:21:21:ff:58:e4:
1a:43:07:7f:16:66:df:d1:d1:db:a0:64:55:b5:fe:
9a:4a:54:32:08:e0:bb:f3:ed:0b:b2:59:50:0f:ca:
78:f3:ea:cd:be:a0:74:46:66:96:30:7c:55:c2:fc:
d8:1b:16:f3:3b:fa:60:90:79:67:39:4b:57:ea:89:
b3:5f:e4:10:dc:ef:2b:b3:7b:40:de:19:f8:20:d3:
3b:69:85:e8:10:a3:2a:9b:8e:c9:2d:19:c0:4d:6f:
19:13:08:30:c5:b2:01:ba:0c:58:2d:7c:52:32:49:
26:34:75:c6:d5:91:99:6a:05:d6:91:b5:29:c2:09:
96:67:62:0e:a3:48:f1:30:86:dd:af:21:7e:4e:9a:
a7:56:5e:0a:b6:33:11:66:ce:b0:e4:cd:e7:9b:14:
61:4e:9c:63:26:20:df:6a:1f:79:61:7a:7d:e9:04:
78:fa:e2:ff:08:39:3c:1b:2b:09:a1:81:c0:52:ea:
6e:f2:06:15:a9:f3:50:d3:6f:37:ce:df:e4:cd:96:
21:2a:44:e5:af:8a:ab:90:c6:2f:55:c3:31:e8:ce:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:F4:C6:D0:D0:32:2A:57:3F:11:62:4A:82:A5:37:F7:37:3E:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD3FA818D40E11F0BC7647F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:ca:11:4d:2c:19:9d:ca:84:0d:2e:29:42:e2:e6:4c:cf:25:
3b:f7:00:79:28:16:4b:39:8a:d1:7a:fe:f3:14:a5:84:5f:2e:
78:7b:a6:ef:0a:a9:06:f8:b1:67:74:aa:64:a5:17:f7:ee:20:
35:e6:b2:24:ec:24:73:ea:82:a3:01:83:56:a3:37:13:8e:6b:
ca:0e:48:c0:33:a8:03:92:fd:ee:36:02:b1:45:e8:98:ec:8d:
9c:5f:83:15:8c:90:bd:61:9f:6d:47:b7:42:34:1f:33:3a:01:
c9:16:23:2c:83:27:09:c0:ba:08:d3:f2:39:09:72:16:4f:27:
4b:12:cc:3c:01:ed:9c:d8:92:53:90:65:27:b3:1c:78:d9:51:
c8:f8:96:5f:53:d8:3d:50:da:2d:f4:c2:c2:43:d6:11:82:2c:
05:42:5e:a3:1e:2b:3c:c1:8e:18:66:86:74:d3:63:7f:da:b6:
e1:18:e5:6d:53:30:a0:40:79:b2:74:6a:4b:df:16:65:5d:70:
47:73:76:8a:3c:30:3f:e0:ad:23:7f:7c:39:1d:b8:ba:9d:08:
4e:d3:f9:db:80:bb:68:3a:7a:c5:fa:95:eb:f9:1b:47:41:65:
02:c1:b9:ca:bc:8c:f1:ea:33:8d:0f:96:26:4d:89:52:60:0c:
25:5b:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:07:33 2026 by rpki-client