Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/436CB3DE0E7611F18336ABF3DAE4EC9C.roa
File: 436CB3DE0E7611F18336ABF3DAE4EC9C.roa (raw, json)
Hash identifier: KTa13Uqu9lV3sNg3pr8lP37S/jU5E+E/Ce2PqzhQx08=
Subject key identifier: 22:C8:43:F7:61:0D:55:E9:AC:BA:35:6E:5D:F0:C9:13:8A:6E:18:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/436CB3DE0E7611F18336ABF3DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 16:07:33 +0000
ROA not before: Fri 20 Feb 2026 16:07:29 +0000
ROA not after: Sun 01 Mar 2026 16:07:29 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106232 (0x19ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 16:07:29 2026 GMT
Not After : Mar 1 16:07:29 2026 GMT
Subject: CN=699886c4-bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:8a:83:94:f8:f6:66:3a:37:9f:6a:91:06:
95:c9:e9:40:dc:8f:65:d0:69:73:e2:0c:f4:6b:23:
7c:f1:0b:6a:af:b2:bf:be:59:f2:90:7f:8d:bb:fc:
e1:e6:b5:b7:63:34:b8:91:3a:9c:ba:18:e5:59:80:
b5:0e:3d:f9:0e:9e:f3:99:be:d3:7e:30:84:8a:ca:
33:5d:34:b4:c2:61:d9:93:a1:57:a6:28:48:b0:21:
26:d9:94:cd:0d:9a:a4:2b:2a:d8:db:e5:dc:44:ed:
64:0d:88:de:c6:7a:e3:b5:4b:94:3b:f9:4e:42:b4:
16:a1:fb:e4:d0:c4:cf:4b:b6:1a:f6:9e:39:13:6b:
2c:57:ef:27:22:92:e8:b9:93:36:fb:89:70:bc:b0:
60:65:a4:55:34:f9:5d:76:1d:a3:90:91:4c:bd:ef:
a3:a2:2d:e1:a6:a1:51:94:59:f9:3a:06:5a:48:4a:
63:22:21:d0:89:37:35:53:6c:c0:9a:86:9f:fa:05:
79:7d:95:2b:dd:87:18:07:32:c5:8f:9f:7d:d7:fe:
b1:ff:af:6b:91:8c:68:55:46:17:72:e8:da:1d:62:
2a:45:7e:38:16:d7:62:59:d5:0a:09:45:d9:3c:26:
8a:2e:e8:55:eb:7f:32:c0:80:52:8a:b1:d0:c4:10:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:43:F7:61:0D:55:E9:AC:BA:35:6E:5D:F0:C9:13:8A:6E:18:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/436CB3DE0E7611F18336ABF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0d:c3:0c:db:36:91:17:dc:c4:d2:95:ce:8a:44:7e:48:68:
3b:7d:02:a5:1e:bf:10:09:0d:76:d1:b5:02:f6:f3:56:c0:84:
60:9b:ed:f5:fe:2b:dc:a6:4e:5a:ed:a6:5d:29:56:44:ae:93:
43:fc:42:e0:ae:39:17:7c:06:e4:25:73:c6:69:bc:a2:4f:5e:
a4:89:22:32:24:6b:8a:e4:29:79:4a:80:38:78:98:56:99:67:
d0:6e:69:ee:e1:fb:f2:55:4a:82:0a:d5:90:1a:38:a5:9f:37:
bc:0b:f5:3c:22:ff:87:db:2b:de:da:84:cf:45:59:ee:a5:ed:
d8:21:8b:ff:14:3a:d4:a3:e3:b8:29:97:af:2c:56:5d:f7:39:
65:8b:7b:a0:c1:1b:85:4c:6d:fa:99:ce:61:dd:2c:bb:f1:09:
98:67:15:6c:7d:20:90:f9:59:62:21:19:f3:44:8b:32:37:3e:
f9:28:d8:8d:5c:0f:10:4f:5f:b4:a5:6d:9b:bd:3f:55:d0:27:
77:35:fb:1c:95:3f:bc:9f:e6:3f:f7:18:3f:29:18:0b:7a:ad:
7c:c0:d8:fe:25:68:bf:c6:b9:58:18:a0:dc:62:60:93:a1:72:
cc:f8:05:1a:ec:71:18:24:9e:fd:e3:7b:65:64:94:30:c3:d8:
80:bf:b2:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ74MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIwMTYwNzI5WhcNMjYwMzAxMTYwNzI5WjAYMRYw
FAYDVQQDEw02OTk4ODZjNC1iYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3eWKg5T49mY6N59qkQaVyelA3I9l0Glz4gz0ayN88Qtqr7K/vlnykH+N
u/zh5rW3YzS4kTqcuhjlWYC1Dj35Dp7zmb7TfjCEisozXTS0wmHZk6FXpihIsCEm
2ZTNDZqkKyrY2+XcRO1kDYjexnrjtUuUO/lOQrQWofvk0MTPS7Ya9p45E2ssV+8n
IpLouZM2+4lwvLBgZaRVNPlddh2jkJFMve+joi3hpqFRlFn5OgZaSEpjIiHQiTc1
U2zAmoaf+gV5fZUr3YcYBzLFj5991/6x/69rkYxoVUYXcujaHWIqRX44FtdiWdUK
CUXZPCaKLuhV638ywIBSirHQxBDEQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCLI
Q/dhDVXprLo1bl3wyROKbhgpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzZDQjNERTBFNzYxMUYxODMzNkFCRjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce7MA0GCSqGSIb3DQEBCwUA
A4IBAQA+DcMM2zaRF9zE0pXOikR+SGg7fQKlHr8QCQ120bUC9vNWwIRgm+31/ivc
pk5a7aZdKVZErpND/ELgrjkXfAbkJXPGabyiT16kiSIyJGuK5Cl5SoA4eJhWmWfQ
bmnu4fvyVUqCCtWQGjilnze8C/U8Iv+H2yve2oTPRVnupe3YIYv/FDrUo+O4KZev
LFZd9zlli3ugwRuFTG36mc5h3Sy78QmYZxVsfSCQ+VliIRnzRIsyNz75KNiNXA8Q
T1+0pW2bvT9V0Cd3NfsclT+8n+Y/9xg/KRgLeq18wNj+JWi/xrlYGKDcYmCToXLM
+AUa7HEYJJ7943tlZJQww9iAv7K7
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:19 2026 by rpki-client