Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CD6C4CFA7E11F0B4A702C0DAE4EC9C.roa
File: 45CD6C4CFA7E11F0B4A702C0DAE4EC9C.roa (raw, json)
Hash identifier: WCTZfQcDcootZDXuvcRQ6Sjcvcfv4s0p5tTkElIMDJI=
Subject key identifier: FB:FC:59:6D:CA:88:93:92:03:3B:DF:33:26:3F:C2:AC:25:F3:1B:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0199DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CD6C4CFA7E11F0B4A702C0DAE4EC9C.roa
Signing time: Mon 26 Jan 2026 06:14:30 +0000
ROA not before: Mon 26 Jan 2026 06:14:25 +0000
ROA not after: Thu 26 Feb 2026 06:14:25 +0000
asID: 174
IP address blocks: 45.202.111.0/24 maxlen: 24
45.202.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104922 (0x199da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 06:14:25 2026 GMT
Not After : Feb 26 06:14:25 2026 GMT
Subject: CN=69770645-c159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:54:a0:a8:1f:f3:1c:a6:fe:86:5b:2d:78:
3e:b5:32:54:8d:18:eb:f4:3c:e0:e9:b8:c3:aa:81:
45:fc:4d:2c:df:4f:b6:02:0e:c7:81:ec:ea:73:8f:
70:be:c4:59:90:1b:e2:31:7a:ae:3f:31:14:67:e0:
6f:0c:d3:76:55:19:6b:d4:67:19:5b:56:b4:a7:85:
40:be:4b:26:d7:41:04:8d:7c:77:4e:56:31:52:3d:
94:f9:ad:9e:32:23:35:28:ea:aa:63:43:83:91:56:
ee:e7:74:14:e7:73:b6:5a:cb:71:1d:35:56:55:81:
0d:06:82:b0:a4:b4:df:06:6b:35:44:88:a3:6d:9c:
7c:19:b4:8f:ed:0f:88:de:5b:d5:c6:97:f2:78:cc:
ab:4f:6d:60:ea:77:96:32:87:85:b9:03:a1:1f:31:
b1:1d:58:57:f2:bc:11:4c:48:21:56:8e:3c:14:57:
ce:31:63:01:90:65:50:ae:da:f8:49:74:9b:53:f9:
80:9c:89:b4:87:ec:52:17:e5:5e:7e:b4:41:27:83:
97:c3:1a:65:33:21:f5:d7:5b:fb:9d:50:e5:4f:35:
c1:88:bf:da:0b:61:99:c4:0b:98:2f:15:81:7f:49:
88:17:3f:ff:a2:8a:e1:2f:f5:bc:31:7f:39:2c:cf:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FC:59:6D:CA:88:93:92:03:3B:DF:33:26:3F:C2:AC:25:F3:1B:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CD6C4CFA7E11F0B4A702C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.111.0-45.202.112.255
Signature Algorithm: sha256WithRSAEncryption
a1:68:80:93:74:72:58:4b:85:14:03:ce:16:e7:ca:e7:ba:4d:
ef:a8:7f:60:4c:bc:76:b6:10:dc:76:08:90:35:2b:04:fb:77:
49:fe:1c:63:ee:92:a0:c6:69:84:59:cb:f1:e5:a1:7b:e0:e6:
13:37:51:7e:cd:5d:e0:e9:fd:82:9e:fa:3a:cc:c0:65:61:7b:
be:28:91:23:5e:b4:8d:ad:cf:ae:b3:17:9d:13:b4:e5:46:3f:
9e:d0:58:b5:ee:05:95:2d:bd:a1:41:65:41:21:23:c8:be:ca:
33:d6:f7:94:76:a4:57:75:43:0e:ff:e9:bd:12:6c:28:25:5b:
4c:2d:98:91:a3:f8:7a:90:2c:cd:35:a8:e3:36:70:66:00:76:
3b:22:a6:f9:fd:eb:b3:9b:9c:28:61:f9:9d:1a:8e:2f:c2:39:
0b:08:73:4d:83:91:0a:b9:68:12:27:fd:f8:05:5c:4e:ab:d4:
6d:18:c9:6e:f5:e5:22:a3:64:c6:da:70:7b:7f:01:3b:f8:ca:
d9:98:c5:d8:3c:67:cf:b9:79:7e:77:e2:4e:f2:7e:24:8d:08:
de:b5:ea:40:fc:b9:d2:50:96:2e:b9:83:5f:78:e8:2e:0d:32:
8c:25:a6:80:16:c0:44:29:a7:92:b6:0c:eb:90:7e:fe:f0:a8:
d2:3e:0e:7a
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZnaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI2MDYxNDI1WhcNMjYwMjI2MDYxNDI1WjAYMRYw
FAYDVQQDEw02OTc3MDY0NS1jMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5jZUoKgf8xym/oZbLXg+tTJUjRjr9Dzg6bjDqoFF/E0s30+2Ag7Hgezq
c49wvsRZkBviMXquPzEUZ+BvDNN2VRlr1GcZW1a0p4VAvksm10EEjXx3TlYxUj2U
+a2eMiM1KOqqY0ODkVbu53QU53O2WstxHTVWVYENBoKwpLTfBms1RIijbZx8GbSP
7Q+I3lvVxpfyeMyrT21g6neWMoeFuQOhHzGxHVhX8rwRTEghVo48FFfOMWMBkGVQ
rtr4SXSbU/mAnIm0h+xSF+VefrRBJ4OXwxplMyH111v7nVDlTzXBiL/aC2GZxAuY
LxWBf0mIFz//oorhL/W8MX85LM9J/wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPv8
WW3KiJOSAzvfMyY/wqwl8xukMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NUNENkM0Q0ZBN0UxMUYwQjRBNzAyQzBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtym8DBAAtynAwDQYJKoZI
hvcNAQELBQADggEBAKFogJN0clhLhRQDzhbnyue6Te+of2BMvHa2ENx2CJA1KwT7
d0n+HGPukqDGaYRZy/HloXvg5hM3UX7NXeDp/YKe+jrMwGVhe74okSNetI2tz66z
F50TtOVGP57QWLXuBZUtvaFBZUEhI8i+yjPW95R2pFd1Qw7/6b0SbCglW0wtmJGj
+HqQLM01qOM2cGYAdjsipvn967ObnChh+Z0aji/COQsIc02DkQq5aBIn/fgFXE6r
1G0YyW715SKjZMbacHt/ATv4ytmYxdg8Z8+5eX534k7yfiSNCN616kD8udJQli65
g1946C4NMowlpoAWwEQpp5K2DOuQfv7wqNI+Dno=
-----END CERTIFICATE-----
Generated at Thu Feb 26 10:34:44 2026 by rpki-client