Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118A6E40469611F0B98ED1CFDAE4EC9C.roa
File: 118A6E40469611F0B98ED1CFDAE4EC9C.roa (raw, json)
Hash identifier: Yn/zw9hmrkClTgaJT3J/+0u4NLW27F8vQ4CawRKw6D0=
Subject key identifier: 05:A1:67:01:72:6F:33:75:D8:BD:85:08:F6:B8:6B:B6:C6:1F:38:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118A6E40469611F0B98ED1CFDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 07:31:21 +0000
ROA not before: Wed 11 Jun 2025 07:31:15 +0000
ROA not after: Mon 16 Jun 2025 07:31:15 +0000
asID: 55020
IP address blocks: 156.224.16.0/23 maxlen: 24
156.224.18.0/23 maxlen: 24
156.224.20.0/22 maxlen: 24
156.224.24.0/22 maxlen: 24
156.224.28.0/23 maxlen: 24
156.224.30.0/23 maxlen: 24
156.224.63.0/24 maxlen: 24
156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88864 (0x15b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 07:31:15 2025 GMT
Not After : Jun 16 07:31:15 2025 GMT
Subject: CN=684930c8-04eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:fa:9e:45:b2:02:2d:be:5f:0c:59:c7:8c:
24:e7:62:5a:54:f2:3b:8b:b7:cb:39:8d:4f:8d:17:
a5:0c:54:c3:f7:c3:a8:07:d3:23:23:2c:4e:f0:fd:
0f:5f:bc:ee:c5:43:1a:d1:30:9f:d1:70:ff:d8:7c:
43:7a:6e:0e:5f:65:5f:20:2b:d2:f4:58:87:ad:74:
7b:4c:73:35:09:e1:6c:16:60:0b:ec:33:45:60:4e:
ba:7d:c3:a8:47:cd:f6:cb:e5:65:ca:12:cc:67:d3:
3e:05:b5:e9:c7:28:5b:ac:df:7b:21:16:4c:ab:bd:
47:e4:10:68:f8:cc:ad:9e:3a:29:f3:49:c8:f0:f0:
06:76:02:c8:dd:2b:fb:79:82:83:33:b2:03:00:70:
f2:25:e1:55:7f:c0:2c:87:1d:ff:af:21:95:f1:68:
5f:f5:57:9c:82:97:52:d4:a8:0c:07:c7:39:8b:eb:
98:3e:2e:ec:42:d4:21:4f:46:80:cb:39:97:fb:38:
57:bb:96:ab:e7:d5:db:78:aa:fc:67:74:bb:05:0b:
c4:ca:e9:72:1b:96:4e:10:a9:fb:c0:a4:eb:40:54:
c0:ee:7c:fa:c0:3f:89:0e:a5:44:9c:de:19:6c:b9:
50:9d:3b:d7:2b:63:3b:95:8c:8f:55:11:9e:e4:9d:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:67:01:72:6F:33:75:D8:BD:85:08:F6:B8:6B:B6:C6:1F:38:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118A6E40469611F0B98ED1CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/20
156.224.63.0/24
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:bd:36:60:28:5d:5d:17:06:0c:3d:b2:a1:01:1c:04:6a:7b:
db:e2:d8:8c:84:b3:32:e7:79:a7:f9:65:fd:a9:de:0c:3e:b5:
f4:a8:59:ce:38:a6:47:d6:ad:f9:71:15:1a:18:f1:7a:cb:20:
0a:05:8d:d1:d2:97:97:2b:bc:da:a6:18:e1:94:22:4b:30:12:
2e:78:bd:38:62:dd:e8:4a:34:52:ec:61:03:3d:37:d7:9e:7f:
ab:5f:60:13:d3:40:ee:c8:d1:49:37:9a:43:18:1a:95:7e:a5:
dd:73:cf:59:de:35:7b:9b:9b:4f:bf:73:27:11:d4:99:41:8a:
be:10:f3:60:b6:11:95:96:e7:17:00:ee:6f:80:c5:c1:9e:b4:
1e:d6:c1:26:e7:1b:46:3d:f3:80:b2:0b:a2:20:d3:b3:6b:77:
6b:2c:4a:4b:e2:02:ad:e2:f4:1d:cd:30:0d:d5:a9:28:81:f2:
5e:e0:3f:d3:a8:3e:e1:ac:c4:88:73:8e:5e:5b:58:de:b2:08:
09:de:ba:6f:cd:1d:79:04:f7:44:f0:3a:59:ae:cd:e2:f2:34:
13:22:a5:e3:02:51:6a:d2:e5:d8:38:31:b1:bf:39:fe:d3:62:
55:24:79:6c:c8:f9:6b:8a:ce:a1:3a:8e:37:99:c1:9b:4c:33:
ee:16:a4:08
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAVsgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNjExMDczMTE1WhcNMjUwNjE2MDczMTE1WjAYMRYw
FAYDVQQDEw02ODQ5MzBjOC0wNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzBT6nkWyAi2+XwxZx4wk52JaVPI7i7fLOY1PjRelDFTD98OoB9MjIyxO
8P0PX7zuxUMa0TCf0XD/2HxDem4OX2VfICvS9FiHrXR7THM1CeFsFmAL7DNFYE66
fcOoR832y+VlyhLMZ9M+BbXpxyhbrN97IRZMq71H5BBo+Mytnjop80nI8PAGdgLI
3Sv7eYKDM7IDAHDyJeFVf8Ashx3/ryGV8Whf9VecgpdS1KgMB8c5i+uYPi7sQtQh
T0aAyzmX+zhXu5ar59XbeKr8Z3S7BQvEyulyG5ZOEKn7wKTrQFTA7nz6wD+JDqVE
nN4ZbLlQnTvXK2M7lYyPVRGe5J1GuQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFAWh
ZwFybzN12L2FCPa4a7bGHzgTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMThBNkU0MDQ2OTYxMUYwQjk4RUQxQ0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEnOAQAwQAnOA/AwQEnOtgMA0G
CSqGSIb3DQEBCwUAA4IBAQCqvTZgKF1dFwYMPbKhARwEanvb4tiMhLMy53mn+WX9
qd4MPrX0qFnOOKZH1q35cRUaGPF6yyAKBY3R0peXK7zaphjhlCJLMBIueL04Yt3o
SjRS7GEDPTfXnn+rX2AT00DuyNFJN5pDGBqVfqXdc89Z3jV7m5tPv3MnEdSZQYq+
EPNgthGVlucXAO5vgMXBnrQe1sEm5xtGPfOAsguiINOza3drLEpL4gKt4vQdzTAN
1akogfJe4D/TqD7hrMSIc45eW1jesggJ3rpvzR15BPdE8DpZrs3i8jQTIqXjAlFq
0uXYODGxvzn+02JVJHlsyPlris6hOo43mcGbTDPuFqQI
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:34:47 2025 by rpki-client