Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F72847B272EE11F18E618405CF1D38B0.roa
File: F72847B272EE11F18E618405CF1D38B0.roa (raw, json)
Hash identifier: 2Rvsig0WCDKvT7xX+vGvGu3PQF7r74Xoti4YkYi8PuM=
Subject key identifier: C6:80:75:AB:3D:93:11:85:C8:62:4F:85:77:B8:97:B5:4D:DB:E6:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F72847B272EE11F18E618405CF1D38B0.roa
Signing time: Sun 28 Jun 2026 12:43:30 +0000
ROA not before: Sun 28 Jun 2026 12:43:26 +0000
ROA not after: Thu 23 Jul 2026 12:43:26 +0000
asID: 32043
IP address blocks: 154.200.12.0/22 maxlen: 24
154.200.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120273 (0x1d5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 12:43:26 2026 GMT
Not After : Jul 23 12:43:26 2026 GMT
Subject: CN=6a4116f2-32c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:17:51:e7:13:00:c2:22:71:b3:c6:66:4d:
e1:b7:47:ef:2c:9c:12:37:f2:3b:30:dc:54:9c:87:
d4:a8:28:b3:4f:7d:79:c1:e0:b1:44:3f:ff:fd:45:
52:13:d5:a3:de:d1:d7:d9:43:2a:6b:d5:21:a6:4e:
24:36:d7:6b:87:0a:b5:11:bf:4c:40:48:e9:80:ee:
18:de:89:95:d9:4d:fa:e1:e8:55:37:72:38:10:b2:
8d:bb:71:de:a8:9c:a9:09:df:8b:51:9b:76:ef:8c:
5b:65:42:10:95:5d:41:cd:41:ba:b7:08:fb:7c:69:
01:5b:6e:06:55:77:de:bf:07:9c:a0:19:c0:37:68:
fc:1e:75:2d:4e:ae:ea:5f:9d:3e:38:93:b4:be:f3:
f9:08:90:23:1f:dc:80:31:39:1f:98:ac:3b:e2:98:
7d:13:36:c8:4a:ad:af:84:c9:81:71:80:12:c6:0a:
15:eb:7b:78:35:07:df:d6:fb:c8:27:22:5d:71:81:
ce:98:f9:06:06:87:6b:54:16:d7:5f:b1:b9:24:f1:
33:56:09:a6:5b:77:d2:6d:62:42:e4:dd:80:82:59:
54:87:19:03:94:74:51:18:0b:0d:b1:5f:06:ae:e7:
85:87:e5:c6:18:f5:21:6e:7f:95:74:c5:62:85:6e:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:80:75:AB:3D:93:11:85:C8:62:4F:85:77:B8:97:B5:4D:DB:E6:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F72847B272EE11F18E618405CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.12.0-154.200.17.255
Signature Algorithm: sha256WithRSAEncryption
1b:7b:7d:27:a8:82:9b:96:74:8a:70:87:41:fc:e8:8d:a2:07:
39:da:0c:ce:5c:c4:ce:67:43:8b:81:4e:39:26:a2:67:c8:d8:
88:24:a1:e9:3d:50:72:2c:2c:cb:c5:98:5c:c9:6e:c7:e1:b1:
a8:8c:ac:8c:01:70:e5:e8:0f:be:a0:bc:30:8f:74:a5:8d:56:
0c:d2:94:22:bf:a8:b7:ba:6c:52:36:6a:3a:0a:6e:ec:53:96:
dd:68:e3:f5:1c:80:64:b5:3e:16:af:c8:b4:97:6e:0c:6f:fc:
cf:90:d7:a2:1e:ed:0a:c8:4c:70:e0:54:5e:be:56:c8:c1:ac:
e8:ef:87:98:82:78:c9:58:b9:0b:21:90:fd:2c:a2:90:3d:59:
71:e0:bc:d2:80:59:44:0e:e6:a0:f1:dd:36:86:a5:cd:95:e4:
8e:ec:26:48:3a:6a:c4:3d:86:a3:60:22:5b:c6:78:4a:ad:0d:
60:27:47:4e:73:a2:d3:71:80:2f:49:c4:15:4a:af:a2:be:0f:
d7:4c:07:e7:61:75:fe:86:7b:82:8c:84:ef:57:b9:d0:57:80:
45:a1:77:99:29:8e:d5:fc:27:76:7a:28:81:7f:62:a8:02:5e:
10:6a:4f:48:ef:8c:1c:77:bb:b6:b7:9d:88:1c:8b:0c:aa:de:
e2:6c:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:38 2026 by rpki-client