Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9344567D4811F193183BA6CE1D38B0.roa
File: 5F9344567D4811F193183BA6CE1D38B0.roa (raw, json)
Hash identifier: z79JN/n1/swZA6tIgwp07IOMV9WOYzWH/sjug3XPiJM=
Subject key identifier: E4:39:F6:45:F6:BE:DC:5D:1F:AD:43:12:AE:11:46:F0:FB:C7:3B:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D842
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9344567D4811F193183BA6CE1D38B0.roa
Signing time: Sat 11 Jul 2026 16:48:42 +0000
ROA not before: Sat 11 Jul 2026 16:48:38 +0000
ROA not after: Thu 23 Jul 2026 16:48:38 +0000
asID: 17497
IP address blocks: 154.197.20.0/24 maxlen: 24
154.217.232.0/23 maxlen: 24
154.217.232.0/24 maxlen: 24
154.217.233.0/24 maxlen: 24
154.222.131.0/24 maxlen: 24
154.222.140.0/22 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.141.0/24 maxlen: 24
154.222.142.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120898 (0x1d842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 16:48:38 2026 GMT
Not After : Jul 23 16:48:38 2026 GMT
Subject: CN=6a5273ea-2aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:5b:b2:17:07:a9:e9:ab:70:a4:e6:d7:84:
22:dd:4a:b5:ec:2a:8f:57:d9:1c:8c:55:7b:57:20:
2e:5b:32:88:74:57:28:7a:cf:40:7f:30:40:cd:6e:
e6:67:83:bc:ea:c4:f5:cd:a9:fb:9d:c6:8d:13:df:
c2:89:36:b8:6f:92:02:bb:5c:7e:3a:62:0b:26:51:
c8:93:d8:60:53:c7:66:e9:3e:28:a3:7e:cd:30:a6:
00:76:69:ea:d3:1e:21:e1:5e:78:e8:b2:22:d4:da:
df:56:fe:38:8a:d9:c4:d9:15:3f:dc:19:b4:7a:7b:
e6:e0:0b:5f:98:85:d4:32:f4:23:ee:73:b2:8d:5a:
52:9f:99:e5:4b:d3:dd:84:d2:e4:21:b2:1b:fc:c7:
29:fd:46:7a:4d:f2:af:16:5b:ae:42:fe:eb:f1:7b:
c3:98:c5:d1:2b:58:aa:85:29:91:1c:6a:ac:17:28:
67:1d:4c:29:12:32:17:a7:44:3b:e4:aa:e5:7a:53:
b4:19:79:27:5f:8f:07:37:ca:cd:97:bc:06:a4:72:
8d:8a:69:09:9a:0c:85:e1:59:1a:57:c3:1a:c8:56:
56:ae:c2:a2:dd:ea:1b:0e:5b:08:31:84:70:88:11:
d3:15:bd:b3:b0:d1:cb:28:89:62:64:ea:8a:04:a2:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:F6:45:F6:BE:DC:5D:1F:AD:43:12:AE:11:46:F0:FB:C7:3B:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9344567D4811F193183BA6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.20.0/24
154.217.232.0/23
154.222.131.0/24
154.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9b:47:a1:95:0d:5c:63:bd:5f:70:10:32:20:55:0a:9b:46:
05:9f:d6:9c:02:42:7b:23:bf:9d:02:10:2d:0e:4e:78:65:8a:
e4:e3:0f:7a:0c:e4:48:0a:d8:e7:5c:f5:36:71:91:84:43:04:
7a:15:e6:ed:b9:b6:aa:de:de:37:1c:d5:6c:4c:41:ad:ab:5f:
8e:83:eb:c7:7c:69:be:5d:2f:4d:1e:97:08:66:4b:56:70:bf:
ba:6a:c5:d3:62:45:b6:55:81:ad:55:cc:eb:49:4b:71:6b:c5:
08:6b:ac:0e:ff:a7:dd:25:b1:a8:d4:5a:3f:a1:a6:f2:2f:fd:
1f:82:c6:f2:3b:2a:19:b8:a3:3e:59:22:13:ac:3e:99:b2:d7:
51:17:0a:ec:3d:67:b0:c9:b9:b9:1c:aa:6c:04:2c:d7:42:ff:
4a:e6:4e:57:26:61:be:ee:91:b9:a1:c4:8e:a8:2d:2f:4a:df:
42:5b:27:89:ed:bc:81:ed:c9:ea:77:7d:46:de:cf:4e:28:4f:
e5:c6:33:9f:e2:5c:02:63:0e:15:a3:c9:7a:57:5b:de:a4:6e:
cb:36:04:a3:bc:60:04:75:76:e7:34:2b:a8:cc:47:e2:01:bd:
2d:8c:51:6b:44:52:a9:80:e6:84:05:55:f4:e4:65:8b:80:c9:
34:f4:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:18 2026 by rpki-client