Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95077C80920511F0BE0488ADDAE4EC9C.roa
File: 95077C80920511F0BE0488ADDAE4EC9C.roa (raw, json)
Hash identifier: GjG1k8FRl6/SmkXv5l5dSSmdmQyLi07Sj6y9wSsNHnc=
Subject key identifier: EE:B1:88:48:69:14:9A:2B:98:6A:80:AA:8E:EB:7E:93:EE:08:A5:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017B1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95077C80920511F0BE0488ADDAE4EC9C.roa
Signing time: Mon 15 Sep 2025 07:28:32 +0000
ROA not before: Mon 15 Sep 2025 07:28:28 +0000
ROA not after: Sun 19 Oct 2025 07:28:28 +0000
asID: 6079
IP address blocks: 45.195.0.0/24 maxlen: 24
45.196.92.0/22 maxlen: 24
45.197.224.0/21 maxlen: 24
45.200.144.0/20 maxlen: 24
45.202.16.0/20 maxlen: 24
45.204.32.0/20 maxlen: 24
45.205.176.0/20 maxlen: 24
45.205.240.0/20 maxlen: 24
45.206.128.0/18 maxlen: 24
45.206.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97053 (0x17b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 07:28:28 2025 GMT
Not After : Oct 19 07:28:28 2025 GMT
Subject: CN=68c7c020-aa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:17:79:dc:3c:d9:43:e2:19:28:1e:52:6b:
35:28:24:ae:e5:58:99:b9:c4:a5:59:97:45:17:2b:
9b:57:6e:5e:78:bd:23:7f:14:02:fc:bc:7d:a8:b9:
23:d5:a6:09:f9:d4:ae:21:3a:c0:79:01:ea:6a:e6:
a8:f6:8b:d6:60:4f:52:b5:f7:77:a1:85:80:f9:c9:
94:52:02:d5:19:49:14:92:1a:6f:f4:ac:d2:2f:10:
cc:48:3a:4a:3b:92:5a:e7:29:64:5e:c2:32:98:20:
83:b4:76:ff:08:2e:34:45:3f:55:37:38:d6:cf:46:
29:fe:94:08:ef:59:b1:ed:bb:97:ad:b4:bb:c0:fe:
6b:23:e8:49:7e:fb:11:02:ab:fb:47:e2:f9:59:82:
15:e9:ab:ea:b7:5b:2c:45:4c:c8:f4:c7:2f:3b:3b:
00:31:fc:a3:5f:77:de:64:d6:02:e5:49:6f:41:3a:
27:ad:f6:ba:0f:33:fb:53:3e:0a:e5:ee:51:39:4f:
94:d4:da:89:eb:30:5e:a2:20:e5:1a:7b:9f:02:7b:
cf:9d:1c:af:82:8a:f7:99:e0:15:9f:6f:65:53:ff:
5b:69:3c:09:5f:e3:6e:c2:72:52:35:9a:5b:81:82:
8b:11:1f:e7:87:a2:73:df:54:b7:cd:c7:42:e3:8e:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:88:48:69:14:9A:2B:98:6A:80:AA:8E:EB:7E:93:EE:08:A5:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95077C80920511F0BE0488ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.0.0/24
45.196.92.0/22
45.197.224.0/21
45.200.144.0/20
45.202.16.0/20
45.204.32.0/20
45.205.176.0/20
45.205.240.0/20
45.206.128.0/17
Signature Algorithm: sha256WithRSAEncryption
47:f8:e2:18:28:54:a5:b0:9b:ab:b6:9f:f9:68:1e:eb:b3:8e:
5f:ca:74:b3:42:71:0b:95:4e:cb:db:e4:16:c3:67:09:79:9f:
ed:6e:f5:bd:0c:b2:10:72:ea:26:35:00:49:10:3e:ab:43:c0:
04:a1:c7:48:ef:b4:40:c1:c4:c3:7d:4f:ab:aa:86:9e:e2:ea:
26:ed:78:8c:ee:91:9b:d0:89:db:35:2f:b9:40:26:6d:cd:22:
78:40:53:1c:72:46:23:ac:78:d9:c8:c7:5e:2c:9e:ab:55:5f:
49:c7:82:f8:83:57:93:4e:fd:e2:49:8f:67:37:d6:96:89:b4:
32:d9:88:90:07:a2:9e:ef:8b:30:b9:3e:1e:d3:87:04:e9:c8:
f2:06:4e:40:eb:d9:13:e6:ac:e2:35:a0:65:17:a6:dc:ac:59:
bb:22:74:ad:96:3d:01:a2:7c:65:ae:07:39:35:5f:f1:a3:f7:
fa:27:87:17:0e:9f:c2:1c:47:f1:c6:d2:18:ab:85:d3:a5:32:
a0:76:e1:61:a5:a9:a8:fa:60:a0:29:2c:bb:32:0b:94:bc:2d:
3a:d8:46:92:87:f3:5c:52:20:69:82:cd:9e:2e:c3:39:c2:e8:
b9:7e:34:2c:95:b9:09:54:c1:57:d8:71:c5:3e:ae:40:74:ae:
9c:ac:1e:91
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDAXsdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTE1MDcyODI4WhcNMjUxMDE5MDcyODI4WjAYMRYw
FAYDVQQDEw02OGM3YzAyMC1hYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwgEXedw82UPiGSgeUms1KCSu5ViZucSlWZdFFyubV25eeL0jfxQC/Lx9
qLkj1aYJ+dSuITrAeQHqauao9ovWYE9Stfd3oYWA+cmUUgLVGUkUkhpv9KzSLxDM
SDpKO5Ja5ylkXsIymCCDtHb/CC40RT9VNzjWz0Yp/pQI71mx7buXrbS7wP5rI+hJ
fvsRAqv7R+L5WYIV6avqt1ssRUzI9McvOzsAMfyjX3feZNYC5UlvQTonrfa6DzP7
Uz4K5e5ROU+U1NqJ6zBeoiDlGnufAnvPnRyvgor3meAVn29lU/9baTwJX+NuwnJS
NZpbgYKLER/nh6Jz31S3zcdC4473AQIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFO6x
iEhpFJormGqAqo7rfpPuCKUxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTA3N0M4MDkyMDUxMUYwQkUwNDg4QUREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALcMAAwQCLcRcAwQDLcXgAwQE
LciQAwQELcoQAwQELcwgAwQELc2wAwQELc3wAwQHLc6AMA0GCSqGSIb3DQEBCwUA
A4IBAQBH+OIYKFSlsJurtp/5aB7rs45fynSzQnELlU7L2+QWw2cJeZ/tbvW9DLIQ
cuomNQBJED6rQ8AEocdI77RAwcTDfU+rqoae4uom7XiM7pGb0InbNS+5QCZtzSJ4
QFMcckYjrHjZyMdeLJ6rVV9Jx4L4g1eTTv3iSY9nN9aWibQy2YiQB6Ke74swuT4e
04cE6cjyBk5A69kT5qziNaBlF6bcrFm7InStlj0Bonxlrgc5NV/xo/f6J4cXDp/C
HEfxxtIYq4XTpTKgduFhpamo+mCgKSy7MguUvC062EaSh/NcUiBpgs2eLsM5wui5
fjQslbkJVMFX2HHFPq5AdK6crB6R
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:53 2025 by rpki-client