Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01FB8E8A0E7011F192B6BDCDDAE4EC9C.roa
File: 01FB8E8A0E7011F192B6BDCDDAE4EC9C.roa (raw, json)
Hash identifier: xmkUlnoI24CO6FeBmNPiozs714PlF/0oFXHpsFURciY=
Subject key identifier: 88:E0:5A:3F:69:AA:3A:8D:A7:29:3B:47:95:DA:85:FF:D2:7A:C6:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01FB8E8A0E7011F192B6BDCDDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 15:22:46 +0000
ROA not before: Fri 20 Feb 2026 15:22:42 +0000
ROA not after: Sun 01 Mar 2026 15:22:42 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
156.238.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106218 (0x19eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 15:22:42 2026 GMT
Not After : Mar 1 15:22:42 2026 GMT
Subject: CN=69987c46-43e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:0e:2b:1d:2e:6a:e3:68:78:b0:80:31:08:
34:6f:61:c2:58:7a:ff:ab:2a:1e:27:35:37:5d:f3:
71:e6:3f:ae:8e:d5:a5:03:35:29:37:37:8d:0d:22:
ce:9d:6d:c7:9c:59:3f:4e:e2:1a:c0:c8:a9:92:2f:
68:b8:5a:75:1b:bc:72:dd:4b:77:ca:a0:f0:0b:12:
93:e3:3e:df:e5:e2:14:23:9c:f8:56:7d:bd:39:61:
0d:8d:a9:0e:0a:7c:34:83:a3:a8:b3:88:5c:91:40:
48:6e:16:e3:85:11:c3:04:12:f7:b1:d1:36:1a:93:
95:fd:6f:e9:c2:48:ac:0e:5f:29:36:b9:5f:dd:22:
d2:4e:de:e4:1e:79:b5:ca:58:3c:6a:3f:01:c8:dc:
93:27:25:23:be:48:e6:c6:76:9b:63:39:00:f5:78:
e4:29:18:25:f0:59:83:95:17:bd:73:26:5b:8f:7a:
11:ed:0b:a7:e6:18:f0:c3:22:03:3c:8b:dd:6d:d8:
88:5e:8d:cc:d8:f5:33:d1:f8:b2:c6:98:04:f7:46:
aa:69:74:70:e5:c1:89:19:89:75:b3:d3:9d:f2:4a:
d2:78:15:49:31:9f:83:58:da:64:5d:2f:5a:e5:45:
4d:24:fd:0b:7b:09:cf:74:d3:51:7a:dc:91:54:99:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E0:5A:3F:69:AA:3A:8D:A7:29:3B:47:95:DA:85:FF:D2:7A:C6:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01FB8E8A0E7011F192B6BDCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0-156.238.72.255
Signature Algorithm: sha256WithRSAEncryption
ba:ca:29:9a:2e:b6:72:f3:c3:d6:48:39:18:5c:2b:ef:f2:7f:
7b:46:01:0c:c7:f0:68:43:64:97:e5:f0:78:8a:e7:0c:83:34:
63:54:73:27:4f:85:4a:44:18:b9:97:cb:43:61:20:2a:c6:42:
a1:c2:d3:8d:98:7d:5b:2a:00:dc:cc:af:92:12:89:9a:c0:34:
45:86:b9:bf:82:bd:f1:a5:04:2d:7f:d6:55:b5:f9:0d:6d:81:
93:cf:d9:3b:c6:93:3c:95:b7:52:ba:ae:f1:ba:76:56:f8:67:
be:2d:70:3e:c0:b6:7d:67:4c:84:07:fc:44:e1:79:82:f2:44:
ce:38:fb:79:e7:51:47:d8:83:d2:3e:b4:a9:b2:8b:62:cc:01:
78:73:ff:cb:1a:a2:00:f0:8e:4f:7b:ed:55:bd:3c:d1:61:a6:
ae:a5:8c:6a:35:8d:d2:9e:b9:4e:10:da:e8:77:e4:e6:f3:34:
25:18:41:df:95:bf:fc:47:d1:f3:8b:27:a2:a0:85:ca:cd:9f:
68:23:95:23:11:35:b6:dd:67:5a:4b:5e:fb:64:b5:c5:bc:96:
b9:8a:23:7b:2e:02:5b:69:74:c0:9d:8f:f7:78:d8:c4:cc:dd:
05:38:8b:9a:2d:32:69:bb:e0:83:ba:34:be:3f:f9:02:2b:d6:
29:5a:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:25 2026 by rpki-client