Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6E6E62C2F2911F1BB676B91DAE4EC9C.roa
File: F6E6E62C2F2911F1BB676B91DAE4EC9C.roa (raw, json)
Hash identifier: noDp+0tTCnilVjp2UHkdVqhjQoFPrs/amSfiIokkX6I=
Subject key identifier: 0F:7F:2F:3C:9B:0E:A3:C1:0D:25:2D:3A:09:6F:E4:D2:3C:F5:00:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C298
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6E6E62C2F2911F1BB676B91DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 06:54:31 +0000
ROA not before: Fri 03 Apr 2026 06:54:26 +0000
ROA not after: Fri 17 Apr 2026 06:54:26 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115352 (0x1c298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 06:54:26 2026 GMT
Not After : Apr 17 06:54:26 2026 GMT
Subject: CN=69cf6427-fed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:0c:bb:e5:af:6e:7f:e6:81:a8:b9:3c:3f:
1c:d1:b5:6a:51:92:e7:cd:9f:e9:24:a5:ae:49:17:
e9:7a:4a:d9:7e:81:f7:34:75:c3:17:71:1a:eb:4b:
06:56:56:46:8a:80:f7:9d:68:4e:4f:5d:e8:dc:f1:
e1:05:bb:bc:32:eb:e8:8d:d5:2f:03:d1:af:cc:39:
7d:a4:af:75:12:5f:d5:fc:d6:75:a0:a6:ca:ac:2d:
c7:ed:94:25:51:7a:42:ec:e5:18:ee:8d:d5:9e:14:
6a:64:97:a3:9f:b9:56:a9:f4:fe:49:4f:36:75:38:
aa:c9:17:1a:91:75:d9:80:b0:9f:19:6e:2e:98:5e:
cd:3e:f1:15:35:e2:74:e1:92:a8:8c:c2:26:52:ed:
46:eb:2c:7a:99:96:05:b2:01:c9:5d:fc:8c:3b:40:
2c:c9:10:e2:67:ac:fa:a4:39:60:03:6c:8d:e4:c0:
b7:61:7e:b7:90:0b:17:65:82:1f:76:a5:8d:7d:9e:
31:17:06:4c:a9:85:2c:55:98:aa:84:61:ba:ba:ac:
b6:3e:06:35:44:77:46:dd:0e:2e:f0:c2:d9:0f:d9:
bb:5b:fd:e5:1d:eb:28:3e:26:9c:df:c3:ca:3b:d2:
4c:b7:bb:25:19:35:0d:ea:5f:12:12:59:4d:ad:40:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7F:2F:3C:9B:0E:A3:C1:0D:25:2D:3A:09:6F:E4:D2:3C:F5:00:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6E6E62C2F2911F1BB676B91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
46:d6:5f:65:fd:dd:e1:fb:83:ba:b9:dd:7f:d8:bc:41:1a:24:
59:be:f0:43:ad:c2:bc:83:92:d6:cd:b7:ff:79:98:8c:8d:1d:
e8:11:f4:a7:43:3b:14:21:fd:77:ee:97:8a:69:7c:48:4b:36:
78:c6:e2:7c:a9:72:f7:66:2e:21:1d:e8:20:b6:42:71:e5:55:
b5:1c:45:fd:ca:3f:9d:05:ab:61:02:69:81:e6:8a:48:c2:dd:
b5:58:f0:51:21:d1:6a:25:5a:5d:f0:bf:9c:f5:f3:59:de:04:
e3:39:d7:0c:cb:4a:14:0b:b9:90:86:24:2d:ec:45:9e:31:97:
3e:f7:c4:75:96:3b:69:f6:c9:1f:51:b7:41:fa:65:17:01:7e:
4e:93:bb:31:f4:be:3e:c1:25:c0:32:2d:73:8f:bb:2e:a2:26:
f9:51:77:67:5c:50:95:2e:a1:70:4d:a2:f7:66:31:78:5a:d2:
34:61:6e:74:1c:d4:ef:09:69:3a:5d:2d:da:89:e9:f1:c3:e3:
2f:b0:98:0d:c0:e8:73:dc:11:4f:2a:a9:b6:36:99:df:a3:b8:
48:b0:4f:33:6f:ee:5a:dc:6c:36:fb:bc:3f:21:a1:76:d4:54:
fb:37:51:6a:78:21:81:ff:0e:88:40:93:e3:ca:74:85:4e:9e:
03:3f:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:35 2026 by rpki-client