Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6A32AFF6FE7B11F0A3D4AFC1DAE4EC9C.roa
File: 6A32AFF6FE7B11F0A3D4AFC1DAE4EC9C.roa (raw, json)
Hash identifier: LJpIyURG6ltiROivy5L9xKIQtmLqo+r4yGZjf5k6tIs=
Subject key identifier: D6:DD:B4:B0:1E:52:87:1F:A0:D2:3A:82:B6:A3:E4:F4:D3:A8:A1:D1
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08B7
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6A32AFF6FE7B11F0A3D4AFC1DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 08:04:06 +0000
ROA not before: Sat 31 Jan 2026 08:04:02 +0000
ROA not after: Mon 02 Mar 2026 08:04:02 +0000
asID: 22724
IP address blocks: 102.177.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jan 31 08:04:02 2026 GMT
Not After : Mar 2 08:04:02 2026 GMT
Subject: CN=697db776-19ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:e2:57:1a:34:e9:c7:cf:90:43:81:ad:02:
9a:6e:af:24:87:d2:af:a1:4a:c1:5b:7b:65:08:c2:
36:d3:2a:16:dc:7f:e3:7f:7b:e8:6c:ed:c1:bd:3c:
04:7d:18:d8:97:8d:17:18:aa:43:bc:8e:f8:ef:ff:
a9:56:54:ac:de:8c:a7:c4:07:3d:31:50:bc:22:b4:
aa:42:b8:1c:f2:84:b4:48:13:4a:d2:09:8f:67:5a:
0e:c0:62:bd:7c:02:bc:95:2d:06:a0:71:f2:57:ac:
a2:0a:1a:d2:4a:dc:70:d4:b3:2b:da:4f:9b:27:d6:
b9:13:45:63:a9:64:0c:6d:ca:6a:2b:f6:ac:f8:3b:
d2:61:a7:32:e6:3d:71:7c:a5:50:1c:b1:8f:12:d8:
99:ee:35:ee:4d:a0:07:f1:5f:25:94:8a:23:55:77:
fc:34:16:1b:a2:05:a1:87:ee:d7:ae:aa:6a:ce:99:
f2:33:2b:98:00:52:37:31:69:18:18:09:ad:7f:ce:
7b:44:db:d1:15:64:3c:64:00:75:15:ac:56:d5:0e:
c0:35:b4:d8:fa:3f:b1:6e:e6:cc:a4:8d:b6:1a:20:
4f:80:86:eb:ee:f3:70:f7:15:05:51:98:18:d6:b7:
b7:d1:df:01:23:98:9d:b3:dc:75:ea:f2:bf:8e:90:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:B4:B0:1E:52:87:1F:A0:D2:3A:82:B6:A3:E4:F4:D3:A8:A1:D1
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6A32AFF6FE7B11F0A3D4AFC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8b:4e:c4:03:2f:eb:4d:a2:ae:e7:35:69:6c:f0:89:2c:94:
a2:91:19:a1:6b:f3:b6:3d:4b:ea:26:a3:8c:cd:ee:8c:00:fb:
18:cd:14:47:24:91:56:89:f3:c5:e4:d5:0d:fe:fc:af:23:b2:
05:8f:27:5d:6e:bc:68:bf:d6:52:39:2b:cd:bd:8f:e5:7b:6a:
8f:85:20:ac:ea:cb:b9:e7:b4:40:76:14:f1:2d:ed:c7:2a:23:
c4:e8:ca:9b:c6:b9:bf:20:23:1c:10:60:b5:da:7c:d4:1e:68:
58:81:5d:e3:78:d6:e2:5e:03:dd:ba:91:b1:79:2f:80:5c:af:
a1:fe:46:54:90:b0:3f:68:5d:c4:ab:6a:aa:0f:30:ee:b3:09:
4e:90:11:27:8f:01:9a:f8:b5:00:3d:c8:2f:2d:89:f6:ed:4c:
d3:e5:23:73:34:6f:6b:a3:70:d0:65:4d:a2:0e:b4:f1:b8:7c:
bc:8e:d4:1b:26:41:b2:38:02:1d:ab:c2:eb:4a:b2:2c:0b:f7:
ae:7a:c8:ba:65:28:48:0c:f5:bf:70:d3:aa:ce:81:ef:51:1e:
79:38:de:0f:d4:f1:64:65:ba:16:35:66:12:4a:f8:3e:05:f1:
6b:32:d8:68:70:e5:12:bb:19:65:c6:d1:4a:41:44:ed:43:b2:
7f:66:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:00 2026 by rpki-client