Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/988CEF16FE7A11F0BE12BBBBDAE4EC9C.roa
File: 988CEF16FE7A11F0BE12BBBBDAE4EC9C.roa (raw, json)
Hash identifier: EqcT/QoHYn2OUBMJM9PaaQMF+1NNQ9B7Gv85v+2kV8c=
Subject key identifier: A3:20:11:4E:34:9D:55:04:C0:3B:29:68:41:33:F9:70:48:A8:97:F5
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08B3
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/988CEF16FE7A11F0BE12BBBBDAE4EC9C.roa
Signing time: Sat 31 Jan 2026 07:58:15 +0000
ROA not before: Sat 31 Jan 2026 07:58:10 +0000
ROA not after: Mon 02 Mar 2026 07:58:10 +0000
asID: 22724
IP address blocks: 102.177.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jan 31 07:58:10 2026 GMT
Not After : Mar 2 07:58:10 2026 GMT
Subject: CN=697db617-c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:af:a4:5c:3c:61:87:9f:c7:38:ed:f4:96:
5c:e7:8a:d3:1a:67:51:9b:3c:f1:ef:fb:17:7d:28:
d5:79:ae:cd:ac:e8:14:46:dd:1f:01:22:7d:49:f3:
38:7e:4b:12:85:97:ff:33:59:c2:d7:f8:48:c0:87:
d9:8c:18:af:47:1b:ad:8e:9a:1c:13:fe:fe:5c:2b:
c3:b8:75:9c:69:22:77:5e:2b:fb:6d:ec:6a:2a:da:
c3:c9:88:2e:42:93:5e:a6:d3:3a:4c:fe:d3:f3:c3:
8b:4b:7b:62:30:5a:2a:69:6b:19:41:6f:dc:15:24:
f2:8e:16:3a:96:5b:cb:e0:cf:26:4d:aa:16:1e:e2:
ab:72:bd:66:9a:6a:14:c0:10:e7:dc:a0:c1:99:58:
20:be:62:3c:69:bb:9b:58:6c:c9:80:19:1b:ee:7e:
cb:df:bb:84:7b:8c:2d:d2:5e:75:0d:57:51:6a:ab:
5b:fc:23:0c:19:c7:a0:87:5b:25:2a:cc:09:26:5a:
98:1a:71:7e:95:d7:f5:f5:8e:d8:6d:17:9e:1d:83:
83:27:e1:e5:06:de:3f:3d:4d:f7:0b:af:71:78:a6:
8b:36:33:85:d9:bb:a8:2c:62:53:d5:e0:17:4c:4f:
a2:93:24:08:64:87:04:8a:08:15:bb:49:3a:2f:d3:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:20:11:4E:34:9D:55:04:C0:3B:29:68:41:33:F9:70:48:A8:97:F5
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/988CEF16FE7A11F0BE12BBBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b2:8d:cf:48:95:ba:4c:d9:11:81:59:64:5e:af:a8:ca:a3:
45:64:96:67:df:b5:1c:b4:b9:71:cd:c2:aa:da:47:d6:c2:8c:
4f:ee:7e:68:00:85:7e:f9:35:4e:0f:05:b2:86:50:0b:2b:76:
90:47:cc:f8:81:ec:08:05:e9:8b:85:aa:bb:98:25:7c:8a:2e:
fb:9c:1e:18:d6:1a:b7:9a:a5:63:81:b3:c3:27:e3:bd:7a:5f:
39:99:8c:b3:e1:03:ad:8b:d0:b7:d7:3f:60:54:6a:9a:0e:35:
8f:c8:5c:7b:08:93:59:16:5d:1a:c7:40:e7:dc:64:03:91:ce:
44:a7:85:eb:6b:52:c9:dc:50:e2:e1:0b:3d:19:51:a3:c2:5a:
0a:e3:a9:9f:68:6d:a9:11:95:fb:e4:ae:37:c6:46:4a:5c:6f:
e3:3f:2e:96:72:75:15:73:8c:fe:2d:92:74:18:6c:81:47:05:
31:dd:69:eb:73:3a:55:b6:42:62:57:13:69:13:84:24:de:9e:
0b:68:d3:f2:de:dd:9a:57:25:23:6e:cb:58:15:33:85:b0:68:
dd:e6:41:c8:12:96:b4:b2:27:c9:89:c4:4d:12:77:ff:12:e1:
72:73:8c:6d:d7:0b:b8:dd:2d:bb:04:51:d5:ec:05:37:4f:b1:
70:da:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:58:21 2026 by rpki-client