Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22E24B647D4911F1B0A37CAACE1D38B0.roa
File: 22E24B647D4911F1B0A37CAACE1D38B0.roa (raw, json)
Hash identifier: neg0f3VeJDsMsXY1+bJa5eIsFmswz1mBRV6M0dfiPQQ=
Subject key identifier: 75:59:B6:87:38:01:E7:27:03:3F:EF:90:17:7E:FA:05:20:ED:7F:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D844
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22E24B647D4911F1B0A37CAACE1D38B0.roa
Signing time: Sat 11 Jul 2026 16:54:10 +0000
ROA not before: Sat 11 Jul 2026 16:54:05 +0000
ROA not after: Thu 23 Jul 2026 16:54:05 +0000
asID: 17497
IP address blocks: 154.222.128.0/22 maxlen: 24
154.222.128.0/24 maxlen: 24
154.222.129.0/24 maxlen: 24
154.222.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120900 (0x1d844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 16:54:05 2026 GMT
Not After : Jul 23 16:54:05 2026 GMT
Subject: CN=6a527532-03a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:a8:25:14:18:9f:ac:c3:50:99:9e:14:3e:
e2:78:cb:2d:6e:ab:41:aa:73:b7:23:27:28:c5:00:
e1:84:43:52:ee:9e:db:17:0e:2e:d1:67:9b:84:e7:
db:b4:bc:1c:90:99:93:50:45:0f:41:d3:5c:e2:eb:
b9:01:4e:5e:51:aa:dd:0f:9f:11:a8:b9:9b:56:43:
21:a4:5c:5c:4e:f2:e7:a6:c5:04:3f:98:3a:f0:70:
66:d8:0c:27:04:88:8d:9b:b5:fa:55:d6:67:94:08:
73:53:d7:23:d9:88:63:91:c9:f0:e4:e9:85:08:2b:
71:7d:4f:6b:fa:70:13:f1:78:16:4c:8b:2b:26:96:
53:04:e5:7b:26:1c:01:7f:e2:1d:d0:09:f0:74:12:
75:ad:d6:9a:ca:72:46:fe:6b:97:19:7f:e5:98:80:
f2:59:1c:66:59:73:ac:f2:8e:fb:b5:c6:e6:5a:67:
3e:e9:56:43:d2:31:96:99:50:5a:92:26:e8:ae:6c:
be:37:66:52:e7:11:7f:81:a9:1b:99:06:0c:4c:5a:
eb:90:c1:52:51:d3:a0:d0:1d:0c:4f:3c:9c:6c:aa:
e0:09:ac:fb:a5:b6:85:d4:8f:9d:bf:7b:10:64:0e:
f5:49:59:67:d3:a7:e8:6f:c4:f8:dd:b6:97:81:f0:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:B6:87:38:01:E7:27:03:3F:EF:90:17:7E:FA:05:20:ED:7F:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22E24B647D4911F1B0A37CAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.128.0/22
Signature Algorithm: sha256WithRSAEncryption
81:b4:6a:46:a0:46:c8:62:57:ad:2e:ae:9f:f4:9b:f3:24:e1:
7e:d2:58:e0:ec:33:68:6c:2e:d1:52:6b:c1:26:f8:97:55:d3:
cb:92:b5:df:4e:40:54:7e:12:fb:7d:ea:a5:2d:59:1f:f8:0b:
85:34:01:3a:a0:4e:53:d3:d8:d9:cc:9a:4d:54:6f:0e:2c:0f:
d2:6c:fa:3a:55:d6:33:c9:6d:1b:d9:f2:39:21:08:30:c7:41:
c3:cc:31:fd:24:bf:03:5e:85:34:84:a0:b5:d4:8a:1d:ae:49:
ee:6b:da:01:3a:1e:60:91:25:f8:55:e1:aa:0a:43:85:80:0f:
ab:45:48:45:90:c0:7f:9a:d3:fa:51:02:b7:a7:03:2d:a9:4f:
93:c8:e0:a3:5b:b5:85:f0:66:61:75:c4:bf:5e:5c:b9:ac:ec:
d1:ca:e7:14:0e:f6:c3:74:b4:04:e7:b9:18:e5:4b:ab:2e:72:
ba:d9:6c:39:bb:9f:78:ef:3c:11:f7:c7:8f:ec:46:8f:ad:14:
75:30:24:bd:b5:d2:28:96:de:02:90:9a:be:77:34:c9:f8:55:
63:06:53:85:26:8e:20:8b:23:8a:8c:3d:9b:85:20:69:af:9e:
ae:eb:78:b1:48:65:3a:a1:49:81:0a:eb:cb:9e:31:9d:59:02:
4e:8d:9c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:17 2026 by rpki-client