Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C199DE9A8FAE11F09475E28CDAE4EC9C.roa
File: C199DE9A8FAE11F09475E28CDAE4EC9C.roa (raw, json)
Hash identifier: /J4v4AWv24LdPIewvhR4qZYLISX9YCLN+VBBsRYdES8=
Subject key identifier: 5F:FA:F7:4E:A9:B3:13:88:7B:65:F6:B2:1C:35:3A:91:DC:47:CA:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017AE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C199DE9A8FAE11F09475E28CDAE4EC9C.roa
Signing time: Fri 12 Sep 2025 08:01:59 +0000
ROA not before: Fri 12 Sep 2025 08:01:54 +0000
ROA not after: Sun 19 Oct 2025 08:01:54 +0000
asID: 6079
IP address blocks: 45.202.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96992 (0x17ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 08:01:54 2025 GMT
Not After : Oct 19 08:01:54 2025 GMT
Subject: CN=68c3d377-30d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:77:94:6d:c4:cb:37:25:72:42:15:23:94:
fb:83:a3:54:0d:94:c4:11:73:79:6f:c6:da:4e:4e:
50:11:29:4d:a8:38:84:2a:4a:b4:28:09:f8:99:82:
f1:ac:8f:66:3e:60:b5:29:e1:47:06:5d:9c:26:5b:
b7:60:1e:c8:0d:0d:23:4f:e1:25:71:34:9d:23:ab:
6a:14:08:7b:85:3b:64:43:72:d2:4a:0f:5e:0a:4e:
1e:79:9c:6b:be:7f:1b:c3:3e:fa:24:b2:be:57:96:
d9:e9:b8:c4:d4:56:a1:34:15:fa:6f:de:1e:96:fb:
59:a1:7b:d9:e0:81:86:31:7c:f0:14:86:fd:9d:bb:
ef:ed:f2:8c:d3:b7:38:71:c9:85:10:c8:0e:7d:d0:
35:0b:bb:e1:05:36:bb:10:48:84:b6:39:64:31:aa:
55:71:b0:ff:71:e5:a3:f7:be:7b:29:eb:ee:db:04:
1f:0f:17:73:a7:f0:1a:8d:32:a0:40:b8:4d:51:a3:
41:25:4b:1c:a6:94:30:c7:28:86:cc:42:40:13:0d:
dc:86:e5:61:2c:29:63:8d:27:8d:3c:c6:68:3c:43:
be:32:63:13:31:44:f9:46:f1:99:2c:50:7a:8d:0f:
46:5e:99:b9:7c:fd:ce:8f:5b:24:86:5c:ff:aa:79:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:F7:4E:A9:B3:13:88:7B:65:F6:B2:1C:35:3A:91:DC:47:CA:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C199DE9A8FAE11F09475E28CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:30:39:5f:a8:d6:a3:a0:8f:fe:5b:21:11:11:3e:53:0d:bb:
71:e5:4e:d4:0b:3f:69:89:71:e3:1d:f0:6c:83:7b:e5:e7:1f:
07:0c:ea:86:11:8f:ae:4a:c5:4f:5e:ff:f8:d6:fe:e3:fc:44:
d5:56:89:3f:ed:5f:5c:50:8c:6a:d0:0e:7f:1b:48:54:3d:9d:
e1:db:12:a5:13:20:7b:2d:26:29:54:2f:50:ed:86:51:1c:12:
c0:d9:fd:5a:26:0e:96:d7:df:52:57:93:d3:ef:24:61:e1:6a:
fa:03:2a:5d:9c:3e:71:a5:4c:56:75:eb:2a:43:40:02:11:b5:
5f:d9:f8:8b:7d:ff:07:f4:32:a3:fb:7e:7b:c0:14:15:8e:ee:
d7:d2:d3:ca:c8:cf:da:11:08:47:22:ad:1f:51:87:63:87:cd:
73:da:9e:1b:f7:ae:b1:b0:ab:c4:89:dc:c4:fd:de:e8:4a:62:
5d:f4:fc:ee:85:18:06:6a:31:52:b4:a5:1a:3a:09:f6:db:6b:
6a:45:fd:d3:33:2e:ec:da:9b:fb:f6:df:da:81:8c:ea:1e:a5:
b3:cb:bc:61:7b:31:77:b4:cb:24:01:9b:15:be:1b:d2:f2:98:
ed:9d:79:fe:b1:f2:9b:d8:08:c6:97:72:87:40:de:0e:76:a8:
61:40:00:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAXrgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwOTEyMDgwMTU0WhcNMjUxMDE5MDgwMTU0WjAYMRYw
FAYDVQQDEw02OGMzZDM3Ny0zMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4Q13lG3EyzclckIVI5T7g6NUDZTEEXN5b8baTk5QESlNqDiEKkq0KAn4
mYLxrI9mPmC1KeFHBl2cJlu3YB7IDQ0jT+ElcTSdI6tqFAh7hTtkQ3LSSg9eCk4e
eZxrvn8bwz76JLK+V5bZ6bjE1FahNBX6b94elvtZoXvZ4IGGMXzwFIb9nbvv7fKM
07c4ccmFEMgOfdA1C7vhBTa7EEiEtjlkMapVcbD/ceWj9757Kevu2wQfDxdzp/Aa
jTKgQLhNUaNBJUscppQwxyiGzEJAEw3chuVhLCljjSeNPMZoPEO+MmMTMUT5RvGZ
LFB6jQ9GXpm5fP3Oj1skhlz/qnlKwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF/6
906psxOIe2X2shw1OpHcR8o5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTk5REU5QThGQUUxMUYwOTQ3NUUyOENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpEMA0GCSqGSIb3DQEBCwUA
A4IBAQAnMDlfqNajoI/+WyERET5TDbtx5U7UCz9piXHjHfBsg3vl5x8HDOqGEY+u
SsVPXv/41v7j/ETVVok/7V9cUIxq0A5/G0hUPZ3h2xKlEyB7LSYpVC9Q7YZRHBLA
2f1aJg6W199SV5PT7yRh4Wr6AypdnD5xpUxWdesqQ0ACEbVf2fiLff8H9DKj+357
wBQVju7X0tPKyM/aEQhHIq0fUYdjh81z2p4b966xsKvEidzE/d7oSmJd9PzuhRgG
ajFStKUaOgn222tqRf3TMy7s2pv79t/agYzqHqWzy7xhezF3tMskAZsVvhvS8pjt
nXn+sfKb2AjGl3KHQN4OdqhhQACJ
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:28 2025 by rpki-client