Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0683E1EC371011F0AE61BAD3DAE4EC9C.roa
File: 0683E1EC371011F0AE61BAD3DAE4EC9C.roa (raw, json)
Hash identifier: A22We75ztGK4w9b1carwH9w6A2D2JN75z3skql1Kkpg=
Subject key identifier: D0:AB:D9:5E:E3:97:D5:2C:41:B6:20:CD:40:CF:C1:2D:B9:EF:D9:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0156B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0683E1EC371011F0AE61BAD3DAE4EC9C.roa
Signing time: Thu 22 May 2025 13:24:02 +0000
ROA not before: Thu 22 May 2025 13:23:57 +0000
ROA not after: Sun 01 Jun 2025 13:23:57 +0000
asID: 399077
IP address blocks: 156.240.195.0/24 maxlen: 24
156.240.196.0/24 maxlen: 24
156.240.197.0/24 maxlen: 24
156.240.198.0/24 maxlen: 24
156.240.199.0/24 maxlen: 24
156.240.200.0/24 maxlen: 24
156.240.201.0/24 maxlen: 24
156.240.202.0/24 maxlen: 24
156.240.203.0/24 maxlen: 24
156.240.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87733 (0x156b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 13:23:57 2025 GMT
Not After : Jun 1 13:23:57 2025 GMT
Subject: CN=682f2572-0eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:53:20:a5:0e:bd:a7:21:fd:36:62:32:c2:
66:c2:d1:1a:f2:10:69:53:ca:b2:bb:04:79:99:67:
97:05:41:4a:c9:c3:77:e3:d6:3f:4a:1c:c6:c6:d3:
c9:a7:32:78:5e:9b:eb:5f:94:7a:dc:72:60:25:d4:
21:ae:3d:c4:d5:6f:28:32:e8:eb:3d:42:02:34:5e:
1a:1c:18:eb:e3:37:7b:53:a0:33:57:f6:ab:a1:ec:
69:46:56:ae:69:f8:ec:c7:b0:8d:9d:f3:e9:fa:19:
f4:07:2f:b8:77:3a:7f:f1:d7:3e:4d:8b:83:1f:01:
d9:87:f0:8c:4b:c3:ce:f8:55:d6:0c:67:44:67:bf:
d0:45:a5:4f:95:e0:db:48:df:d4:65:27:3a:f4:7d:
53:18:35:2d:1f:62:a6:d4:ad:dd:97:a7:75:ce:e2:
93:c0:30:26:b6:0b:56:51:56:09:c7:0e:98:5e:d7:
6d:a5:30:4f:5c:b0:4d:9b:63:82:f4:87:f0:08:af:
cb:41:ff:1b:a2:62:09:0c:99:7b:1a:b1:16:01:9d:
41:bc:67:18:af:2f:ee:48:b0:b3:aa:b6:e6:88:60:
e4:48:e6:2b:7a:55:26:ee:cc:bb:01:81:dd:44:a7:
00:cb:a4:99:b0:28:9c:4d:f8:ee:fd:78:82:1a:48:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:D9:5E:E3:97:D5:2C:41:B6:20:CD:40:CF:C1:2D:B9:EF:D9:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0683E1EC371011F0AE61BAD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.195.0-156.240.204.255
Signature Algorithm: sha256WithRSAEncryption
9a:c8:bd:d8:95:f2:3e:2e:de:e9:d3:19:3e:b4:28:76:a3:9f:
f7:44:c3:e1:c0:b3:bd:29:64:f5:a9:cf:7b:79:38:f9:95:7e:
c9:48:62:2a:de:08:8d:16:08:20:c3:b6:05:a6:2c:42:89:80:
5a:46:df:ab:1c:7a:26:32:5f:9f:7d:15:15:9c:64:87:33:f6:
8f:20:47:84:a6:ad:17:71:7d:92:45:31:e6:e6:7f:19:39:2c:
75:e3:68:58:a6:cb:95:34:b8:23:45:ae:9f:a7:e7:95:8e:5d:
cf:ca:5b:b1:ca:c0:2b:18:1a:d7:00:02:4e:17:e1:14:bb:87:
73:2c:29:c9:b4:da:38:3d:87:fe:fd:bc:97:19:67:e5:6b:65:
e6:21:e7:d1:94:02:d8:db:b2:fe:dc:a7:eb:e6:c6:7a:da:87:
2c:5a:91:48:dd:ab:59:16:94:9c:70:2c:60:0e:2d:9f:fd:74:
e2:9e:45:dc:64:71:7c:02:ec:91:bd:50:96:21:aa:b6:51:e9:
93:28:2c:76:67:86:6a:53:10:62:2c:7e:46:66:1d:66:5f:52:
b2:d4:9c:8c:79:66:dd:f2:44:2b:95:cc:d6:15:89:0d:f7:23:
cd:08:11:bf:6b:fb:c8:a4:b9:30:24:b1:b4:ca:55:9f:6c:80:
6d:38:71:93
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVa1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTIyMTMyMzU3WhcNMjUwNjAxMTMyMzU3WjAYMRYw
FAYDVQQDEw02ODJmMjU3Mi0wZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtmlTIKUOvach/TZiMsJmwtEa8hBpU8qyuwR5mWeXBUFKycN349Y/ShzG
xtPJpzJ4XpvrX5R63HJgJdQhrj3E1W8oMujrPUICNF4aHBjr4zd7U6AzV/aroexp
Rlauafjsx7CNnfPp+hn0By+4dzp/8dc+TYuDHwHZh/CMS8PO+FXWDGdEZ7/QRaVP
leDbSN/UZSc69H1TGDUtH2Km1K3dl6d1zuKTwDAmtgtWUVYJxw6YXtdtpTBPXLBN
m2OC9IfwCK/LQf8bomIJDJl7GrEWAZ1BvGcYry/uSLCzqrbmiGDkSOYrelUm7sy7
AYHdRKcAy6SZsCicTfju/XiCGkgF4wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNCr
2V7jl9UsQbYgzUDPwS2579lgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjgzRTFFQzM3MTAxMUYwQUU2MUJBRDNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc8MMDBACc8MwwDQYJKoZI
hvcNAQELBQADggEBAJrIvdiV8j4u3unTGT60KHajn/dEw+HAs70pZPWpz3t5OPmV
fslIYireCI0WCCDDtgWmLEKJgFpG36sceiYyX599FRWcZIcz9o8gR4SmrRdxfZJF
Mebmfxk5LHXjaFimy5U0uCNFrp+n55WOXc/KW7HKwCsYGtcAAk4X4RS7h3MsKcm0
2jg9h/79vJcZZ+VrZeYh59GUAtjbsv7cp+vmxnrahyxakUjdq1kWlJxwLGAOLZ/9
dOKeRdxkcXwC7JG9UJYhqrZR6ZMoLHZnhmpTEGIsfkZmHWZfUrLUnIx5Zt3yRCuV
zNYViQ33I80IEb9r+8ikuTAksbTKVZ9sgG04cZM=
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:29:26 2025 by rpki-client