Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68A0E7BAC3B611F1944EFFF5CE1D38B0.roa
File:                     68A0E7BAC3B611F1944EFFF5CE1D38B0.roa (raw, json)
Hash identifier:          RElEFDNox7AdOMFxzohcb4rx/zGQeLXYvM3nHWWjids=
Subject key identifier:   68:E5:37:9D:7A:99:B1:C2:27:53:02:73:48:13:31:78:64:DE:DE:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68A0E7BAC3B611F1944EFFF5CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:52:43 +0000
ROA not before:           Fri 09 Oct 2026 07:52:39 +0000
ROA not after:            Mon 19 Oct 2026 07:52:39 +0000
asID:                     7607
IP address blocks:        45.194.16.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121867 (0x1dc0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 07:52:39 2026 GMT
            Not After : Oct 19 07:52:39 2026 GMT
        Subject: CN=6ac89d4b-065a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:a8:4a:a7:eb:3d:de:d8:e4:76:42:cf:25:
                    63:bb:34:82:0e:3a:4b:5a:b3:7b:81:16:13:5d:b2:
                    ac:87:9a:09:cd:12:ca:ed:4e:e1:e4:49:f5:d9:b1:
                    5e:77:19:22:03:0c:fe:e2:c1:6f:5f:bc:4b:88:1e:
                    a3:af:1a:1a:25:66:96:14:b8:cd:6a:da:50:fa:c8:
                    74:41:13:18:a7:8d:b7:9a:45:cb:22:a5:42:b8:73:
                    0b:d2:da:bf:c5:53:0e:0c:d9:92:e1:02:a6:f6:78:
                    d2:20:89:e0:f7:01:7a:fe:b1:89:f5:8b:74:e6:d8:
                    c4:c5:cf:82:89:df:86:9a:07:66:f5:96:2e:1d:b3:
                    2e:70:64:e8:d6:26:41:6f:91:07:1c:40:6d:20:56:
                    b7:68:65:a9:bb:e0:a4:d3:48:c3:0a:03:38:01:d8:
                    d1:f2:21:88:28:1a:94:35:73:91:0d:4c:97:00:23:
                    0c:ba:f2:11:a9:aa:65:93:a0:04:81:75:d4:b8:fd:
                    24:8f:d6:17:85:04:13:a5:1f:9a:de:3c:e1:82:02:
                    36:d8:98:ee:d6:63:41:3e:a1:84:0d:08:ef:18:b6:
                    2d:b1:24:53:b3:c8:77:7a:f8:d8:cd:1a:96:5b:d7:
                    1e:56:d2:b4:ec:9e:7c:b3:77:6a:5c:2e:f4:fb:f9:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:37:9D:7A:99:B1:C2:27:53:02:73:48:13:31:78:64:DE:DE:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68A0E7BAC3B611F1944EFFF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:e3:db:96:1e:70:49:56:37:f6:bc:5b:10:20:ee:0c:35:c4:
         ce:62:a0:29:1c:04:7a:77:32:fc:b5:7e:ac:88:8a:51:23:c0:
         06:21:4c:1c:46:a0:e6:25:27:e7:a0:e3:d5:50:b4:de:98:0a:
         31:33:00:45:d3:3b:97:96:f2:c2:7a:b2:80:90:26:c9:1f:21:
         5f:96:cd:90:97:51:ca:d1:ad:2c:12:54:fd:f4:60:35:cf:f6:
         53:b8:af:9a:90:3f:8d:f6:38:76:15:46:39:96:9a:fc:95:7b:
         17:6c:6a:0a:f6:b8:95:86:e8:9d:5d:ff:e2:63:9c:97:8c:12:
         ec:e4:0e:98:0f:ee:71:78:4a:83:02:e2:7b:3b:cc:0f:34:3d:
         df:90:2c:c5:0d:c3:55:83:78:e8:9a:51:62:58:8c:73:cc:01:
         af:29:33:57:a8:ef:06:a7:ea:df:fe:cf:8d:70:6e:d7:d7:cc:
         08:de:a7:fd:2c:97:a5:74:e2:d9:e2:28:43:64:44:9d:8b:c6:
         97:d9:52:a2:da:b1:7d:47:0b:2b:b6:2f:d1:ae:59:79:24:22:
         41:68:da:a3:80:ba:8a:90:41:7c:bd:5e:2c:f9:9b:f3:98:b9:
         1d:ea:5d:80:98:be:ff:bd:a3:d6:57:ae:79:19:9c:ee:80:34:
         bc:39:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----