Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CACA750A370211F1BC5D1BEDCE1D38B0.roa
File: CACA750A370211F1BC5D1BEDCE1D38B0.roa (raw, json)
Hash identifier: 9UXPcOokooKoHf5OxS2XKH58vp165nyGa6duAQ9AR/k=
Subject key identifier: E8:31:DD:4B:F0:D2:19:F3:8A:68:E5:1B:99:A2:81:30:9E:B1:4A:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CACA750A370211F1BC5D1BEDCE1D38B0.roa
Signing time: Mon 13 Apr 2026 06:34:16 +0000
ROA not before: Mon 13 Apr 2026 06:34:11 +0000
ROA not after: Sat 18 Apr 2026 06:34:11 +0000
asID: 136907
IP address blocks: 154.220.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115923 (0x1c4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 06:34:11 2026 GMT
Not After : Apr 18 06:34:11 2026 GMT
Subject: CN=69dc8e68-9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:91:c0:ee:7b:73:03:c5:78:02:90:dc:3d:
82:a2:4d:27:fc:d1:f7:68:01:70:d3:ee:2c:52:8a:
69:96:5d:8e:fe:d9:12:95:b2:6f:10:f0:01:3b:6e:
16:10:c4:e1:ec:4e:77:ca:59:88:72:80:7d:9f:4b:
2f:e2:ae:a9:b8:3e:5e:80:0e:58:d7:7e:0c:47:1e:
9e:8f:41:10:16:d2:1a:76:33:41:09:50:7f:cb:1a:
d3:d8:bd:3b:f9:b3:da:ce:61:f9:9f:af:5a:2a:19:
e3:7a:c1:5d:bd:73:b3:74:38:12:66:75:93:89:69:
e4:3a:e8:f6:80:d0:31:97:65:75:26:2e:3c:5a:b9:
5a:52:23:6d:e8:5a:e7:7a:9c:b0:c2:ef:43:be:5a:
a6:30:1b:17:17:61:67:13:a5:a9:77:00:a4:e1:40:
a4:39:12:54:cb:2e:7c:8d:d9:9b:0f:e8:fe:b0:c9:
cc:43:22:91:bd:f1:e6:d0:cb:9c:3f:8d:1a:b3:5c:
e4:30:74:7e:70:39:89:45:a8:4e:4c:82:3f:21:c0:
50:5b:2d:5e:c1:6c:a3:95:96:f7:47:7c:d4:dd:fb:
c6:c0:1c:de:e7:21:70:53:cf:1e:f1:7f:01:96:8f:
5f:5f:dc:de:04:e9:bf:d9:e7:2e:d3:98:52:25:4d:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:DD:4B:F0:D2:19:F3:8A:68:E5:1B:99:A2:81:30:9E:B1:4A:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CACA750A370211F1BC5D1BEDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:14:33:85:55:ae:06:12:5b:3c:be:76:c7:d5:f4:0b:f2:96:
7c:54:05:d7:33:45:6b:ca:cd:44:ab:22:10:67:8a:5e:ab:34:
47:b0:8d:a8:ba:76:ab:0c:0f:3d:7b:56:a0:95:01:14:9d:1d:
0e:6c:ed:19:1a:1e:40:70:8e:c1:0d:48:3b:e3:c8:8b:38:ab:
6f:ed:e9:41:16:55:a0:cb:c9:0e:b2:8a:c7:55:d1:fa:93:ca:
e5:1c:95:2e:d1:0a:87:31:a1:30:4d:c8:87:f3:70:99:95:6d:
3c:04:f7:68:29:71:c3:9e:59:b4:64:e6:6f:da:5a:b8:50:89:
a7:c2:8a:87:c3:56:04:5e:5d:24:b9:cd:9f:78:ca:70:9b:13:
d3:a4:b1:29:09:ab:ec:ec:19:71:d6:f8:b5:cb:0d:de:96:07:
0b:b6:6c:91:a5:17:22:51:28:7b:2e:66:d8:e9:2a:cd:7c:5b:
74:61:f5:55:54:50:81:2e:dc:53:0a:0b:f1:de:b4:1b:7c:47:
bb:99:2a:c5:94:92:d2:de:83:b9:f8:0e:02:ca:4c:06:f4:c0:
6d:f2:71:4e:93:48:24:4d:f6:cd:69:ab:e0:c1:53:fb:72:f7:
11:e1:5f:a8:15:1c:17:e0:a5:a0:ae:3a:ff:a6:c7:d4:07:b7:
ea:22:40:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:40 2026 by rpki-client