Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E6EBDE6920611F0AD68EBB1DAE4EC9C.roa
File: 4E6EBDE6920611F0AD68EBB1DAE4EC9C.roa (raw, json)
Hash identifier: 2eCobphsZ5+sEA259qsxcOCda0UR4IvCwDvVdqjfiMc=
Subject key identifier: 50:30:57:97:55:B5:E1:EE:09:E4:B9:DD:D1:7A:9F:B9:5A:94:EF:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E6EBDE6920611F0AD68EBB1DAE4EC9C.roa
Signing time: Mon 15 Sep 2025 07:33:43 +0000
ROA not before: Mon 15 Sep 2025 07:33:39 +0000
ROA not after: Sun 19 Oct 2025 07:33:39 +0000
asID: 6079
IP address blocks: 45.195.84.0/22 maxlen: 24
45.197.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97057 (0x17b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 07:33:39 2025 GMT
Not After : Oct 19 07:33:39 2025 GMT
Subject: CN=68c7c157-174d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:d0:e6:be:d6:b6:e6:cd:20:b7:12:8d:37:
cf:63:0b:64:60:4f:5b:b9:da:ae:7e:59:8b:07:0c:
b7:9b:a3:5e:cc:fc:90:0a:b5:04:5e:28:cb:09:76:
b8:54:27:5d:13:8d:5d:75:44:eb:ff:73:09:75:fc:
43:b2:e7:cc:d9:0c:a2:2f:de:d4:6d:3a:3a:6b:99:
a3:44:0e:15:d7:20:f5:69:98:05:1f:76:f2:d1:1c:
68:f0:8d:e5:9a:f3:a2:84:d5:0c:0b:be:ef:cd:44:
0a:b9:13:2e:90:c6:79:ca:f0:6f:df:9c:b0:29:18:
4f:e4:eb:4a:ef:23:a8:1c:41:25:1d:03:87:72:22:
70:ad:c1:cd:a6:c8:68:9c:3b:28:02:67:e4:95:22:
5f:b9:26:8b:57:fe:f1:42:3a:e2:da:7e:88:9f:cb:
81:8e:5b:05:53:46:d0:75:12:57:2f:23:41:77:64:
5b:1e:8e:08:c3:72:3c:1d:f3:78:1e:72:84:9f:17:
4a:d8:57:63:2a:48:bd:12:9e:4f:23:3b:d0:07:ea:
85:54:d4:c6:71:8f:5e:b1:d5:66:7f:7a:be:83:8c:
29:d4:08:30:59:ff:ae:f1:25:bd:ee:09:00:9c:90:
05:ea:b6:e7:dc:cd:43:12:c9:cd:c0:47:2d:48:e5:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:57:97:55:B5:E1:EE:09:E4:B9:DD:D1:7A:9F:B9:5A:94:EF:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E6EBDE6920611F0AD68EBB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.84.0/22
45.197.200.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:0d:6a:7d:67:2a:ae:72:9c:d9:52:d4:cf:31:f7:7a:22:b1:
d8:47:f3:33:29:82:fc:e2:35:82:45:45:35:fa:65:80:5f:36:
ca:09:36:3d:67:0f:c7:0b:71:ab:cd:6e:b7:c7:ff:46:fe:c4:
2d:bf:b3:47:af:7b:28:eb:a2:c7:70:58:f2:55:e1:1f:c2:4e:
d8:d5:a2:bb:2a:e7:84:e5:8e:a4:f0:13:96:b9:6a:26:fe:3e:
44:45:1c:8a:10:ef:6f:52:5e:56:f2:6d:3e:08:dc:9d:6a:66:
07:ef:57:cc:20:d5:e4:95:1a:5b:89:5a:bb:e2:ea:55:51:5e:
9f:4f:87:92:60:e7:66:e2:d4:37:53:31:77:af:19:ba:08:42:
42:0d:fe:59:5d:be:48:d5:95:4d:d2:cd:39:dd:09:94:66:5c:
36:7e:4b:37:cd:3d:12:04:c5:c8:38:09:33:eb:10:e9:e8:33:
7e:6a:69:d2:4a:d9:0f:ee:7c:29:f3:09:3f:63:54:b9:9c:7a:
35:da:4d:eb:96:6f:26:9d:41:5b:d4:13:99:5e:4d:3b:2d:df:
f1:45:51:ce:59:bb:50:9c:7a:22:93:71:e8:46:25:f3:32:54:
f2:ab:c2:ab:d7:ca:7f:67:7b:29:1d:54:38:45:ff:46:b0:2f:
c1:05:02:ba
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAXshMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE1MDczMzM5WhcNMjUxMDE5MDczMzM5WjAYMRYw
FAYDVQQDEw02OGM3YzE1Ny0xNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAugzQ5r7WtubNILcSjTfPYwtkYE9budquflmLBwy3m6NezPyQCrUEXijL
CXa4VCddE41ddUTr/3MJdfxDsufM2QyiL97UbTo6a5mjRA4V1yD1aZgFH3by0Rxo
8I3lmvOihNUMC77vzUQKuRMukMZ5yvBv35ywKRhP5OtK7yOoHEElHQOHciJwrcHN
pshonDsoAmfklSJfuSaLV/7xQjri2n6In8uBjlsFU0bQdRJXLyNBd2RbHo4Iw3I8
HfN4HnKEnxdK2FdjKki9Ep5PIzvQB+qFVNTGcY9esdVmf3q+g4wp1AgwWf+u8SW9
7gkAnJAF6rbn3M1DEsnNwEctSOXgvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAw
V5dVteHuCeS53dF6n7lalO/zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RTZFQkRFNjkyMDYxMUYwQUQ2OEVCQjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLcNUAwQDLcXIMA0GCSqGSIb3
DQEBCwUAA4IBAQBfDWp9ZyqucpzZUtTPMfd6IrHYR/MzKYL84jWCRUU1+mWAXzbK
CTY9Zw/HC3GrzW63x/9G/sQtv7NHr3so66LHcFjyVeEfwk7Y1aK7KueE5Y6k8BOW
uWom/j5ERRyKEO9vUl5W8m0+CNydamYH71fMINXklRpbiVq74upVUV6fT4eSYOdm
4tQ3UzF3rxm6CEJCDf5ZXb5I1ZVN0s053QmUZlw2fks3zT0SBMXIOAkz6xDp6DN+
amnSStkP7nwp8wk/Y1S5nHo12k3rlm8mnUFb1BOZXk07Ld/xRVHOWbtQnHoik3Ho
RiXzMlTyq8Kr18p/Z3spHVQ4Rf9GsC/BBQK6
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:07 2025 by rpki-client