Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF284018FC2511F08DE5C1E8DAE4EC9C.roa
File: CF284018FC2511F08DE5C1E8DAE4EC9C.roa (raw, json)
Hash identifier: WnDVXW2yRZaZnfWyRYJhvEMhieTl5UKOBnD8RyFIFBc=
Subject key identifier: C8:34:6A:66:55:FC:76:10:29:DE:7B:95:40:96:17:93:F7:C1:1D:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B707
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF284018FC2511F08DE5C1E8DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 08:46:17 +0000
ROA not before: Wed 28 Jan 2026 08:46:12 +0000
ROA not after: Mon 02 Mar 2026 08:46:12 +0000
asID: 401783
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112391 (0x1b707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 08:46:12 2026 GMT
Not After : Mar 2 08:46:12 2026 GMT
Subject: CN=6979ccd9-bec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fd:a5:cd:39:b9:73:86:93:f2:c0:a3:62:20:
ff:96:19:90:51:f4:b6:98:9d:07:7f:0b:00:bf:1e:
8f:d4:f9:da:13:cb:ff:47:af:81:5f:17:62:f9:96:
26:a4:b8:17:dc:d7:91:13:69:11:51:ec:4b:2e:83:
73:c3:7b:f7:08:82:68:7e:eb:c5:b8:f9:ca:ea:44:
86:2d:1f:bc:85:e2:69:37:fe:ac:24:67:42:a8:25:
dd:2f:18:f3:06:f9:61:eb:54:75:53:8d:4b:9d:ed:
4f:eb:e8:56:5f:54:3b:dc:d0:0d:dc:62:e3:48:8a:
df:54:cf:a4:15:ab:6f:35:9b:87:3a:12:2c:8f:fe:
ef:d8:28:eb:63:0b:59:f0:61:35:9d:44:96:ba:80:
ca:f5:40:e8:28:8e:54:19:a9:ba:4a:36:55:c6:8a:
f9:1d:53:fc:3c:af:77:e8:81:87:b7:2a:8d:6d:72:
2b:72:fe:67:a3:fc:6c:1d:07:27:f0:0a:b3:8a:06:
58:c7:7c:f9:57:56:e7:13:0a:31:67:a4:0a:e0:30:
6c:8f:7d:86:e0:ed:67:1d:8f:0b:61:3b:81:5f:34:
db:63:9e:0b:b8:06:9d:e1:96:a3:79:d9:4b:87:35:
93:bb:64:59:46:aa:95:be:6b:6a:27:48:6f:80:ec:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:6A:66:55:FC:76:10:29:DE:7B:95:40:96:17:93:F7:C1:1D:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF284018FC2511F08DE5C1E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.196.0/22
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a8:a4:be:c2:9d:aa:fc:5e:e5:12:f9:18:ac:8f:06:eb:84:
92:55:ee:0d:74:70:df:99:32:ea:f1:3f:dc:45:aa:22:b1:20:
d6:bd:14:b1:00:58:fe:21:2e:90:41:b7:3c:a2:e7:ba:18:0b:
d3:c3:50:9e:9a:c9:61:ab:ad:90:8e:f1:10:44:39:b4:d6:e3:
c2:19:b0:53:be:fa:57:09:89:71:a3:8f:5e:b3:62:10:69:70:
ba:40:ba:6c:10:29:80:93:f9:8f:97:c4:aa:1e:0f:6c:e1:24:
44:ff:07:ea:a6:91:10:31:fa:65:8c:d0:c0:76:c1:f3:5d:1b:
19:36:05:2c:ff:23:b1:b7:45:69:3d:81:de:68:5a:45:9c:70:
3a:eb:c1:ff:46:78:3a:ef:15:e7:32:25:15:13:64:e7:ad:b5:
a3:4d:16:80:7f:b5:eb:86:b4:44:44:da:51:fe:75:37:dd:ed:
ef:54:5a:78:c3:c6:27:63:6b:2c:b7:1a:6a:d6:31:01:f6:4a:
51:44:32:2d:2e:c3:4d:0f:02:04:76:82:0c:7d:08:cd:65:69:
60:9d:dc:09:93:18:33:4b:67:4a:07:20:2a:be:87:a4:ca:f0:
c0:e9:ec:8d:40:f6:00:29:f7:e6:0e:5c:36:6d:68:b4:98:8e:
3d:2d:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:21 2026 by rpki-client