Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99374D76C96811F19755AB16CF1D38B0.roa
File:                     99374D76C96811F19755AB16CF1D38B0.roa (raw, json)
Hash identifier:          WbmaT0tXO1VDqowxSWDk14GcEpzVIjiQeNA2xx+gm3M=
Subject key identifier:   66:A3:B0:B2:CE:85:28:6D:6A:C8:17:0B:1E:34:11:CF:94:6E:D5:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99374D76C96811F19755AB16CF1D38B0.roa
Signing time:             Fri 16 Oct 2026 13:50:51 +0000
ROA not before:           Fri 16 Oct 2026 13:50:47 +0000
ROA not after:            Fri 23 Oct 2026 13:50:47 +0000
asID:                     211826
IP address blocks:        154.197.110.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126572 (0x1ee6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 13:50:47 2026 GMT
            Not After : Oct 23 13:50:47 2026 GMT
        Subject: CN=6ad22bbb-80f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:e2:98:ff:23:c7:eb:b0:46:5f:4e:a4:29:
                    8d:85:b8:84:42:69:7d:14:28:a5:6f:a5:a5:07:8d:
                    54:31:b9:15:82:01:b3:ab:6d:cd:22:5a:c4:4d:01:
                    c1:91:21:19:f1:ee:0b:e1:06:68:b0:92:4a:89:e6:
                    e7:92:4f:ab:29:c1:41:a5:85:e3:42:12:e7:3d:af:
                    8c:bf:c9:53:e4:7d:4c:e1:7b:d4:3c:55:9f:f3:44:
                    b2:79:48:cf:66:53:f4:8f:f0:42:ee:aa:1b:8b:b4:
                    0e:41:bf:be:0a:e1:a3:d0:06:18:16:0f:59:2e:aa:
                    7b:8a:40:1f:79:38:e2:c5:64:d7:a2:c9:67:7f:2b:
                    96:4b:2f:40:b8:db:97:2d:10:94:41:54:f9:14:b7:
                    8b:7a:af:c2:7e:4c:25:80:28:80:46:a0:17:15:05:
                    fe:94:00:83:44:02:f9:a2:62:73:40:d9:cc:64:48:
                    f9:b2:4a:a5:11:5b:36:a9:b9:53:98:59:7a:72:29:
                    9f:92:54:6b:eb:d3:e2:ec:72:10:64:e8:da:db:55:
                    04:ed:11:13:a1:40:93:38:b4:1d:70:c4:ff:3b:05:
                    c7:4c:ab:7b:e2:f6:8b:0b:8f:60:e1:ba:44:3a:6b:
                    a7:65:77:08:ab:1f:0c:af:4d:dd:7f:f3:bc:f8:9f:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A3:B0:B2:CE:85:28:6D:6A:C8:17:0B:1E:34:11:CF:94:6E:D5:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99374D76C96811F19755AB16CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:a0:3a:6a:ae:fa:98:70:50:15:19:19:d3:79:9a:db:3c:
         2d:c3:04:a9:3b:be:2e:90:d5:a5:8e:ce:49:9d:81:2b:a0:56:
         9e:04:77:dc:e7:02:ca:76:ae:bf:d1:f0:0d:e6:47:a4:d6:8f:
         f5:46:85:a1:97:b3:b7:55:bb:96:a3:f6:10:a0:7a:3e:a4:4c:
         7a:6a:3e:c0:73:ff:74:5a:36:2c:3c:d9:37:44:e4:4c:8f:a0:
         0c:d7:b9:88:10:65:7c:c5:8f:fa:17:0f:56:47:fa:96:cd:a3:
         4f:e8:69:a6:fb:02:e0:1b:80:05:8d:dd:06:41:cc:c7:05:f3:
         b9:bc:8f:98:4c:59:9c:04:d3:b0:72:d3:3a:a5:dc:cc:2a:9c:
         dc:6e:57:85:9a:10:7d:27:77:79:27:fb:c7:56:aa:49:84:a6:
         b0:23:9d:b1:f2:1e:0a:ba:50:67:3e:c8:a0:16:48:cb:c8:13:
         96:63:73:84:41:0d:e2:9f:2c:e2:8f:4b:9a:c9:6d:27:54:ac:
         b3:65:cd:5e:3e:88:dd:ce:af:c7:4e:76:73:70:77:e3:36:1a:
         b9:79:cb:71:3f:c3:38:10:69:db:ae:7d:35:dc:89:35:76:1b:
         67:f9:a7:86:53:9f:25:ee:7a:b5:76:8f:7e:54:8a:7f:11:01:
         e8:69:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----