Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D8E841EFC1E11F0B65A8ABADAE4EC9C.roa
File: 0D8E841EFC1E11F0B65A8ABADAE4EC9C.roa (raw, json)
Hash identifier: yhtEiBsCN0iwaue9JYLmOLRVJG9oQ+fwccfIp3wJ8Zw=
Subject key identifier: 8E:2E:55:D9:68:92:FC:98:52:FA:75:7D:77:41:C1:BB:3A:E3:2C:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B6FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D8E841EFC1E11F0B65A8ABADAE4EC9C.roa
Signing time: Wed 28 Jan 2026 07:50:48 +0000
ROA not before: Wed 28 Jan 2026 07:50:39 +0000
ROA not after: Mon 02 Mar 2026 07:50:39 +0000
asID: 401783
IP address blocks: 154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112381 (0x1b6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 07:50:39 2026 GMT
Not After : Mar 2 07:50:39 2026 GMT
Subject: CN=6979bfd8-9751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:88:97:4d:9c:55:5a:86:ad:40:d2:8a:ee:
9d:1d:23:09:74:48:9d:6e:f5:b6:6e:93:3e:ec:48:
06:ec:4b:81:5f:1e:fb:40:cc:d2:e2:06:22:59:13:
45:1c:2c:bc:26:e4:20:99:4a:64:ae:a6:6f:ef:4e:
e0:5c:91:c3:b6:1d:4a:dd:5a:e1:7e:16:8a:21:96:
6c:6b:d7:68:a6:90:5b:2c:33:52:2b:8a:52:c9:87:
81:ec:ce:af:08:84:b0:42:b8:36:1c:44:1b:3b:bb:
60:e1:82:cd:cb:59:5c:8c:d6:85:22:c5:b3:da:a5:
c0:75:be:09:31:eb:45:f6:2d:4b:42:80:61:82:54:
3b:58:1d:cc:44:d0:d8:dd:1b:8a:e9:3a:1c:ca:93:
90:c4:62:87:98:c8:ce:ff:7a:e2:f3:e9:d0:d5:8c:
c9:20:8b:19:75:01:f6:56:df:1c:92:90:95:81:09:
9d:cf:35:c4:f6:31:c5:a5:5d:82:c1:ee:53:d5:78:
15:46:94:fe:b5:97:38:a9:89:57:39:66:f5:a0:f6:
f0:d2:e4:64:c6:42:de:85:95:d3:b4:d5:9f:8e:78:
6f:52:37:ae:fc:b5:46:07:21:37:ef:fc:b7:d8:0a:
e3:da:8f:70:0c:88:b7:c0:df:91:f1:72:2e:fe:e1:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2E:55:D9:68:92:FC:98:52:FA:75:7D:77:41:C1:BB:3A:E3:2C:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D8E841EFC1E11F0B65A8ABADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.140.0/24
154.200.142.0/24
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:26:b1:c8:24:f1:46:b4:b6:68:86:4b:69:e3:dc:1f:ca:bb:
21:27:fa:f3:cd:86:6d:56:6a:29:fc:27:99:9f:71:1e:58:af:
70:f5:79:ea:88:b3:19:a7:f4:bc:24:09:6c:ef:55:9d:7e:49:
b3:96:09:00:7a:e5:c5:9d:28:ad:ff:2e:c0:84:c0:97:85:1c:
93:9e:b1:f1:bb:a2:87:ea:31:fb:c9:b4:12:ce:e2:48:23:af:
cf:6a:ce:8f:c0:12:de:25:2f:b0:f1:07:4e:a8:fc:0b:99:7f:
ca:00:05:dc:26:10:8d:b9:cf:94:05:9d:52:71:7a:dc:a2:3d:
c8:2d:a6:b7:25:4c:fa:8b:00:89:ed:af:3c:c1:64:82:12:81:
43:b1:4c:bb:34:c8:93:d2:52:0f:bd:ed:0b:6d:28:40:b4:dd:
04:c0:db:42:8e:35:35:70:49:f8:ab:9f:7f:65:0e:85:77:c0:
be:03:c7:a9:75:01:21:17:0e:5f:40:80:a3:ef:18:06:34:da:
8a:b7:d7:d3:4c:fd:23:01:25:0f:f9:0b:1c:ed:c4:c4:06:cd:
48:53:bc:ad:99:6e:b2:b2:90:12:5e:6c:cf:26:15:db:9f:8a:
db:59:a0:ef:f6:79:27:65:49:e6:c1:b8:65:8e:a8:45:9b:14:
00:b8:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:35 2026 by rpki-client