Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B11A4F46B34411F0ABF62791DAE4EC9C.roa
File: B11A4F46B34411F0ABF62791DAE4EC9C.roa (raw, json)
Hash identifier: gAMfP3YsVo9zYsiSKuwWsP1yU5g54g7qMHU2A9eZ+yw=
Subject key identifier: 6B:0A:76:D5:79:C0:A2:B7:B7:B4:D6:73:0C:43:37:73:7B:04:C5:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A535
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B11A4F46B34411F0ABF62791DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 14:53:26 +0000
ROA not before: Mon 27 Oct 2025 14:53:21 +0000
ROA not after: Tue 04 Nov 2025 14:53:21 +0000
asID: 138456
IP address blocks: 154.197.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107829 (0x1a535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 14:53:21 2025 GMT
Not After : Nov 4 14:53:21 2025 GMT
Subject: CN=68ff8766-c3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:79:10:67:ba:63:16:fb:5b:10:2d:e5:76:
2d:87:d2:a5:67:de:e1:a3:b0:9d:f9:13:60:e4:de:
67:db:f7:9d:ed:e2:0a:cd:65:01:0f:c7:ff:ec:2d:
4a:ab:73:a9:78:1f:ba:51:70:1c:9a:b8:11:b4:ed:
70:8f:07:c7:44:c2:a8:c1:24:dd:66:d8:40:38:79:
bf:27:a6:be:b7:1d:8f:3c:d2:af:af:77:51:71:d1:
6e:fc:01:22:a0:3b:e3:92:96:90:9f:40:94:d2:8c:
a4:5d:7c:d4:ab:cd:08:c0:39:60:36:ac:62:9e:6a:
62:9c:43:40:e2:7a:9c:7d:4c:f4:47:a9:c0:eb:52:
1e:ed:2e:53:f0:10:85:bf:b9:30:b7:65:11:e3:80:
e3:69:b0:8a:0b:2f:df:2b:da:df:0d:6c:5d:33:5b:
ba:b7:e0:65:98:85:ed:ab:86:c4:e0:f0:f6:b5:96:
b4:2c:76:ad:86:af:a5:58:d5:93:6b:0d:6f:84:e7:
24:47:b6:e9:a0:3d:e5:dd:9a:e7:04:e2:80:75:25:
79:85:e1:3b:04:c1:da:aa:fd:e1:38:e1:79:fc:e1:
d3:66:98:e7:5f:db:08:ef:e7:83:c6:92:d3:5c:36:
74:c3:3e:60:96:1b:19:20:bb:71:a1:6f:7d:3a:87:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:76:D5:79:C0:A2:B7:B7:B4:D6:73:0C:43:37:73:7B:04:C5:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B11A4F46B34411F0ABF62791DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c7:9c:fe:67:40:85:6a:ba:1f:b9:f3:7a:b6:f4:0d:d2:e3:
e3:4a:0d:d9:16:3d:cf:5c:b0:94:f1:58:2f:3c:05:1f:fe:0b:
0b:67:21:46:e8:f9:2d:2a:5d:60:79:2a:9f:65:bf:a6:3f:cd:
c0:ff:f8:5d:d9:0e:41:ae:ee:ac:40:2f:cc:ac:1a:c2:a9:0a:
19:67:73:5b:99:f4:83:29:8e:cb:6b:2c:f3:a0:f7:7c:5e:01:
77:a8:32:ee:59:8f:4c:5a:8e:7a:37:d3:cf:41:08:12:50:68:
92:22:aa:bd:51:0b:9b:a8:db:75:1a:da:e9:78:0d:e2:27:89:
7c:4e:eb:c5:5a:93:ec:81:bd:9f:eb:98:8f:87:19:7d:26:72:
bf:12:1c:79:82:9d:70:87:c0:70:48:d5:09:3f:65:8d:a6:0b:
3c:82:0c:3a:c4:4c:60:50:f1:52:08:b4:31:02:df:71:90:fa:
49:cd:04:d0:e5:1d:9f:6d:00:cc:26:51:6b:35:50:28:91:56:
c7:c3:1f:c9:fa:3a:b9:44:50:92:93:e3:89:e6:9a:22:18:fd:
3f:38:2a:b6:12:5a:4d:04:38:d7:b8:10:5b:04:0e:f1:db:45:
9e:10:77:a5:2e:2c:27:3b:1b:b2:fa:c9:63:a2:b4:7b:ed:76:
03:c3:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:38:14 2025 by rpki-client