Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FEDB7A434E311F1B8CBDAE8CE1D38B0.roa
File: 5FEDB7A434E311F1B8CBDAE8CE1D38B0.roa (raw, json)
Hash identifier: 63pai51J2noGUE1EgqUu9wLnTUZGGGwv2zR+OzEoH7I=
Subject key identifier: BB:17:EC:4E:A4:1B:1D:D4:00:7C:28:F4:0D:F4:3B:6B:82:E8:C0:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FEDB7A434E311F1B8CBDAE8CE1D38B0.roa
Signing time: Fri 10 Apr 2026 13:44:20 +0000
ROA not before: Fri 10 Apr 2026 13:44:16 +0000
ROA not after: Fri 17 Apr 2026 13:44:16 +0000
asID: 395886
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109500 (0x1abbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 13:44:16 2026 GMT
Not After : Apr 17 13:44:16 2026 GMT
Subject: CN=69d8feb4-2d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:b8:33:46:5d:84:d7:dd:8f:86:b3:12:5d:
82:57:78:6b:0b:5e:9f:27:07:75:c8:16:ea:ad:09:
3a:46:43:15:fe:e8:d4:4e:7d:06:a8:20:4f:fc:84:
60:af:42:e4:aa:d0:e2:98:c2:af:2e:36:e6:7d:0c:
d6:77:3a:ca:5f:8e:fb:94:42:7d:95:80:22:f3:75:
41:4b:00:b0:45:3b:a6:44:4a:66:23:ba:8c:26:58:
2b:a6:d8:f5:ee:f1:67:a0:41:51:79:38:c3:77:97:
aa:2c:74:21:0b:e0:74:03:6b:95:09:2f:a0:78:f2:
fd:c3:19:22:25:ab:7d:b8:b9:c7:51:09:96:1d:39:
30:c8:b8:a6:4d:2d:03:01:d4:2d:82:73:f2:c4:18:
ed:8c:29:00:cf:11:36:46:bc:5a:09:2c:24:30:35:
6a:ac:3e:a9:9c:65:92:7b:f5:a0:f5:fa:99:26:70:
a6:15:f8:0a:c1:4d:87:ba:58:37:80:cf:fc:84:da:
60:06:05:80:ad:3a:f2:bf:9d:a0:0e:00:ff:67:b5:
f2:9d:ef:91:56:b2:02:cd:8d:aa:e5:82:42:f7:50:
64:50:da:cf:1b:e5:81:25:8b:ee:e1:3a:50:46:1e:
e3:04:d0:dc:38:b1:55:64:f4:ae:aa:a1:e4:45:24:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:EC:4E:A4:1B:1D:D4:00:7C:28:F4:0D:F4:3B:6B:82:E8:C0:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FEDB7A434E311F1B8CBDAE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
64:b9:06:8c:2f:60:b7:00:8c:c7:86:cd:dc:80:35:b4:7b:28:
c2:94:6e:43:0b:58:cb:a0:5b:f5:2d:d8:04:fd:f0:29:1d:ca:
bb:f5:c1:62:56:e6:b1:78:09:9d:d3:ec:94:67:fe:85:ab:55:
7e:54:37:83:2e:eb:2c:96:ce:fa:6c:6a:75:07:29:4d:2b:9e:
d6:b9:c1:c0:30:39:1d:1d:67:26:53:40:5d:ab:53:18:36:2e:
bb:c8:23:b9:91:69:81:5a:ca:1e:6e:f9:80:f7:ac:a3:a7:e6:
1f:24:9f:36:70:4f:1d:7d:5e:77:e2:00:36:54:f5:84:3b:c7:
cd:79:54:29:c4:d8:c1:00:56:a9:19:e6:22:67:c3:e1:c8:27:
8e:23:9f:70:5e:e1:ac:d1:c9:4f:6d:b2:f8:49:c1:59:8c:09:
6c:55:d1:1f:8a:07:17:7f:bf:42:c5:24:f3:b5:41:7d:34:0e:
9a:8d:e8:a8:9a:30:b8:27:af:09:6d:46:1f:8c:52:6d:7b:90:
7a:92:ae:48:1b:90:13:28:28:5f:2d:3d:09:87:78:b6:04:18:
a4:1c:ea:10:22:fd:56:52:7c:c3:c4:b2:a5:cc:0d:0a:f8:a0:
07:24:04:9d:60:16:7b:b9:f0:ad:b0:68:7a:32:a8:a1:a5:b1:
f4:4d:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:32 2026 by rpki-client