Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4041DABE920611F0881BC5B1DAE4EC9C.roa
File: 4041DABE920611F0881BC5B1DAE4EC9C.roa (raw, json)
Hash identifier: YNlHaAKJjvFXv7l0mwaMHCjtu9FkTrJVvZOAOV7Ic0g=
Subject key identifier: D9:1D:94:4E:88:1B:22:B0:2B:69:B8:A6:1F:A3:23:B5:5F:FF:02:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4041DABE920611F0881BC5B1DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 07:33:20 +0000
ROA not before: Mon 15 Sep 2025 07:33:15 +0000
ROA not after: Sun 19 Oct 2025 07:33:15 +0000
asID: 395793
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.14.0/24 maxlen: 24
45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.196.194.0/23 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
45.207.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97055 (0x17b1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 07:33:15 2025 GMT
Not After : Oct 19 07:33:15 2025 GMT
Subject: CN=68c7c140-8b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:38:a2:07:9c:da:89:e8:87:86:90:78:31:
45:a8:92:10:70:ac:e8:18:44:67:9d:c0:eb:26:46:
fe:84:ad:1c:35:e9:68:87:92:44:a4:36:59:0f:45:
64:e1:bf:b9:77:82:c6:54:4f:6e:e8:89:3e:a3:9d:
c1:0c:17:a4:26:0d:7b:96:79:f6:c4:21:d3:d6:c9:
6c:64:62:1a:54:4d:a5:84:42:7c:a7:03:68:89:80:
fc:66:cc:9e:85:28:32:ad:0c:d3:bd:0f:78:24:f9:
e7:63:13:e1:68:62:bc:43:14:8d:fc:58:92:52:dd:
33:5f:68:81:ac:9a:da:f7:b0:2a:31:b5:83:3a:a5:
13:e3:07:67:6b:90:bb:3b:3f:54:30:d1:8a:74:eb:
f5:eb:a6:35:7a:9c:9c:e7:93:7a:e4:c2:17:b2:b5:
c7:33:57:54:62:e3:33:0e:d6:99:1b:c1:0b:86:35:
d9:be:08:19:5e:35:9e:47:03:2e:10:38:89:9f:06:
87:ee:2d:d1:bf:45:f0:a8:b0:0c:3b:e0:84:83:d4:
39:c1:a6:04:b3:32:fc:fc:5b:65:4a:03:84:eb:41:
82:7a:1a:b9:51:38:87:93:b2:2c:62:44:8d:fe:4e:
89:90:1c:b2:8d:47:bb:76:ac:a4:37:32:77:2f:28:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:94:4E:88:1B:22:B0:2B:69:B8:A6:1F:A3:23:B5:5F:FF:02:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4041DABE920611F0881BC5B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0-45.192.16.255
45.196.194.0/23
45.196.225.0-45.196.227.255
45.198.226.0/24
45.207.138.0-45.207.147.255
Signature Algorithm: sha256WithRSAEncryption
38:97:2b:56:3b:fb:2b:d5:ed:25:ea:6a:b0:af:36:81:1b:32:
dc:bf:83:44:fb:c5:b7:37:e5:f2:fa:c1:1c:52:bd:9d:fa:d4:
e4:e5:7e:51:20:13:be:40:22:7c:e6:1e:0c:1c:26:49:5d:27:
fe:13:e7:b4:66:12:94:2a:43:05:c5:9a:66:d0:99:7d:60:ca:
32:85:ac:cb:81:e8:91:20:82:5f:bf:db:80:db:1e:7b:58:61:
2b:6c:ac:5f:1a:09:1e:da:a5:0e:dc:1e:cd:8f:7a:70:99:11:
88:06:dc:4c:97:1f:74:b6:bc:b9:87:a7:90:85:88:a1:63:ce:
ea:fc:be:65:ef:47:09:ae:62:a2:12:13:29:8a:b2:aa:48:3e:
c3:c0:bb:50:35:8f:cc:13:ac:67:27:4c:90:da:4e:1f:1d:3a:
6a:ee:96:21:da:38:a2:7c:1a:a2:d7:c4:44:08:21:0f:3e:ab:
43:78:32:a2:d2:7b:d6:8e:3d:3d:f7:80:4a:bc:91:cc:82:1e:
30:8e:7c:66:fe:74:47:0e:84:b5:07:51:57:9c:59:57:fe:36:
7c:6d:4e:9d:e5:e0:37:f5:da:da:14:53:2e:e1:9b:82:61:6f:
5d:2c:32:10:bb:09:87:9a:46:9d:1c:5c:a9:91:77:fc:99:41:
74:ac:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:49 2025 by rpki-client