Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1E68CC34EF11F1982929B4CE1D38B0.roa
File: CC1E68CC34EF11F1982929B4CE1D38B0.roa (raw, json)
Hash identifier: k9zYL768Uv6MuOLbd5J8O8WCAlXi91srOUKXr7en9uQ=
Subject key identifier: 09:89:5B:A4:FA:4D:48:24:FB:87:FC:F3:C3:18:D8:1F:B0:EC:4D:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C46D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1E68CC34EF11F1982929B4CE1D38B0.roa
Signing time: Fri 10 Apr 2026 15:13:15 +0000
ROA not before: Fri 10 Apr 2026 15:13:11 +0000
ROA not after: Fri 17 Apr 2026 15:13:11 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115821 (0x1c46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 15:13:11 2026 GMT
Not After : Apr 17 15:13:11 2026 GMT
Subject: CN=69d9138b-22fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:88:eb:e8:39:51:69:18:87:9e:65:5a:5b:
66:0f:61:f3:73:f2:bf:10:03:a7:5c:18:43:8d:d6:
68:6e:98:9b:08:b4:cc:e0:a6:bf:30:5e:d0:52:f5:
ef:01:20:3d:9f:fb:25:a2:7e:0e:10:e5:70:a5:6d:
1f:d5:fc:dd:96:9c:30:1d:ac:e2:e2:ef:2e:22:87:
80:bf:70:dc:84:73:c9:30:71:a8:91:e2:01:d1:08:
04:3a:3c:77:ce:90:e8:57:27:98:34:56:a1:76:90:
a5:48:1c:7a:ef:5f:3c:13:12:29:e2:c1:4c:19:b2:
df:c5:d6:ff:65:40:d2:ce:3a:79:07:5d:84:75:19:
04:ca:43:7b:f7:df:e3:54:c1:a1:79:93:a4:c4:9c:
9f:74:f7:8e:71:8d:ae:31:bb:fb:ae:3c:93:31:13:
a7:6e:fe:cd:a2:2a:05:e8:15:cc:1f:da:d5:6b:43:
4e:9b:dc:62:cb:aa:53:a8:e9:3c:6f:04:a7:4d:36:
61:34:31:9c:05:a6:b6:d3:fb:4f:a9:7d:ef:93:75:
f7:de:a7:e0:4c:9a:fe:f3:84:c0:f7:2a:f2:ea:17:
a2:9e:0c:83:6b:a7:0f:4d:c3:f6:29:60:1a:e0:8c:
60:a2:1f:ee:b7:c3:bc:5d:84:c5:70:4b:3a:cd:cf:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:89:5B:A4:FA:4D:48:24:FB:87:FC:F3:C3:18:D8:1F:B0:EC:4D:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1E68CC34EF11F1982929B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
47:e7:32:35:a4:fa:25:48:71:89:f3:a8:f1:a5:7e:13:4f:4a:
68:60:57:d7:20:97:5b:74:4d:e2:dc:50:ff:df:b0:a1:89:ca:
74:a0:bb:6f:32:a8:66:86:57:bd:19:8d:3f:47:46:73:bb:93:
08:a2:1d:52:41:2d:f1:63:4e:47:22:47:fe:a5:60:f8:ef:e2:
cf:ed:50:8a:71:8e:67:a2:0b:c4:84:82:ba:cd:cc:4f:34:a7:
ac:50:11:85:cf:21:f6:3d:c9:15:12:92:e6:35:17:8a:8c:80:
ab:ad:20:8a:a9:6d:f6:12:27:1b:86:81:6f:24:23:e5:94:53:
f3:29:95:57:b6:8c:1b:99:fd:d3:11:c5:dd:8a:9c:06:bd:f1:
8f:1e:c3:50:98:40:27:2f:1e:82:21:49:24:f9:1e:8d:36:1c:
c5:06:73:ba:8f:1b:e8:67:cd:78:09:54:f5:30:c9:f6:59:c3:
79:a4:99:c2:16:33:b4:99:f1:00:4e:14:56:aa:74:0c:27:28:
ab:85:72:9a:f6:eb:48:02:5e:31:60:51:55:46:2b:24:da:8c:
99:5a:12:2f:ed:04:c8:c4:82:13:9e:94:9c:2e:d1:e7:19:a4:
fc:ae:f7:4f:ac:4a:9a:15:c9:6c:32:d4:fd:9d:cd:c0:a4:e9:
58:2e:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:22 2026 by rpki-client