Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DEBB3A6A5AD11F08A33C688DAE4EC9C.roa
File: 8DEBB3A6A5AD11F08A33C688DAE4EC9C.roa (raw, json)
Hash identifier: hNfb3zdjt7+LVBIYsQEE9rylwkG13GMQpFTmBGxKnPM=
Subject key identifier: 4C:F8:9D:3C:08:5A:AA:D1:FA:45:3D:76:97:9E:FE:32:47:8B:26:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017FDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DEBB3A6A5AD11F08A33C688DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:48:48 +0000
ROA not before: Fri 10 Oct 2025 07:48:43 +0000
ROA not after: Sun 19 Oct 2025 07:48:43 +0000
asID: 136907
IP address blocks: 45.199.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98268 (0x17fdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 07:48:43 2025 GMT
Not After : Oct 19 07:48:43 2025 GMT
Subject: CN=68e8ba60-05d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:20:cf:da:59:c5:98:15:5e:b5:09:d5:f0:30:
84:64:51:0a:0b:59:ae:7b:74:79:ed:3e:1f:0a:84:
14:08:21:62:f8:0c:4e:c3:09:e2:c3:36:84:b3:f4:
79:53:cb:c6:7f:8d:a0:18:50:b7:64:6b:32:b6:14:
bb:78:34:84:b5:99:30:73:cb:3a:d9:74:d4:ab:a7:
b5:5f:a6:4c:97:b6:4a:62:b5:a3:87:d4:d8:18:09:
f7:26:c2:8b:13:65:f4:90:1c:2a:b3:45:8b:12:3c:
a1:3a:14:ce:3a:b8:f6:80:d4:d3:36:4f:c6:49:80:
fe:1c:4e:fc:f9:77:ab:37:eb:57:f0:85:a0:41:50:
c4:80:42:82:47:8f:e7:a7:d1:cb:4a:16:77:08:ea:
2b:25:81:9d:4c:5f:78:a9:f1:26:ce:3c:00:30:0b:
d4:c5:bf:d4:10:e9:11:7f:6b:82:d2:90:13:94:2a:
79:f8:8c:e2:11:cf:a9:7d:f9:39:57:46:e8:dd:6c:
a1:54:09:8d:d1:c5:bf:a7:a3:58:6a:86:b6:c5:fa:
d1:0f:30:fa:1f:38:1c:7c:05:b3:b8:31:75:59:64:
7f:68:23:a2:c3:44:75:5b:f5:c8:98:9c:86:be:08:
bc:a3:a1:fc:fb:10:eb:50:e4:05:e7:41:9f:25:98:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:9D:3C:08:5A:AA:D1:FA:45:3D:76:97:9E:FE:32:47:8B:26:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DEBB3A6A5AD11F08A33C688DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:c2:dd:73:0c:2d:2b:1a:dd:75:33:4b:a1:04:bf:f7:a7:3e:
04:83:57:2e:e3:a3:3b:86:b2:19:7c:a6:82:c0:32:60:1d:a9:
70:3e:69:08:0a:cb:f0:ff:8a:2f:a3:ba:4f:7e:46:45:d4:0e:
3f:c9:72:ee:7c:07:aa:97:34:50:6e:29:3e:3d:cb:d5:ce:79:
cc:1c:c7:60:a5:97:4e:65:a9:2a:39:d7:4a:f9:6a:6e:c2:42:
13:1f:f8:9a:76:17:9e:62:9e:f1:6d:fd:5d:96:15:87:3d:49:
47:61:26:c1:90:0a:0c:52:33:5b:4a:5c:a5:be:0e:87:1f:cf:
b5:cd:a9:ff:ba:53:16:c6:e8:7a:fe:6d:b8:c7:16:c8:9e:31:
7c:42:68:57:57:11:01:b3:ec:2c:22:2a:44:31:3c:1e:c3:68:
69:58:d3:c0:81:f9:4e:ee:49:2f:e5:77:4d:4c:7a:b3:31:59:
20:73:ed:04:cd:61:15:a0:f9:45:f3:e0:38:c9:f1:00:69:ba:
99:f0:20:6f:18:b3:7a:0a:06:a6:1b:80:cf:45:8c:4a:97:1d:
6a:b9:06:84:b9:47:06:ad:f8:c2:be:bf:cb:91:c5:01:0e:86:
9e:b1:55:71:5c:02:48:f4:c2:d6:b4:7f:79:45:27:3c:c7:49:
91:ac:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:41 2025 by rpki-client