Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8597D8A03A6411F1A508C711CF1D38B0.roa
File: 8597D8A03A6411F1A508C711CF1D38B0.roa (raw, json)
Hash identifier: LIHEWtWXGj6ok2qbtFUfp9exyWyoNatzs8vVfoi6NLA=
Subject key identifier: 65:82:A4:5A:A7:7A:F0:D5:D4:AC:D3:70:D7:B2:C0:24:CB:71:C3:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8597D8A03A6411F1A508C711CF1D38B0.roa
Signing time: Fri 17 Apr 2026 13:51:24 +0000
ROA not before: Fri 17 Apr 2026 13:51:19 +0000
ROA not after: Mon 27 Apr 2026 13:51:19 +0000
asID: 136907
IP address blocks: 156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
156.240.128.0/18 maxlen: 24
156.253.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Apr 2026 18:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109944 (0x1ad78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 13:51:19 2026 GMT
Not After : Apr 27 13:51:19 2026 GMT
Subject: CN=69e23adc-1607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:9f:b1:67:36:b5:5b:61:d5:18:65:34:e0:
2a:75:d5:ab:e3:ab:48:8c:8f:d9:93:47:9d:3c:ff:
ac:68:35:64:16:55:78:2a:7e:a1:c5:17:1e:af:70:
6f:bf:37:8a:27:24:0f:97:f0:06:ec:d8:82:88:70:
ff:a1:dc:e7:89:11:21:3e:95:1d:6e:c1:8e:74:2c:
b3:5e:13:20:e2:84:2b:45:99:be:af:60:f6:a7:25:
6d:d4:f9:8a:a9:96:d4:9f:1f:0e:c7:4f:df:9e:10:
0f:01:78:89:1b:9d:ea:15:de:06:ab:a4:db:07:06:
f7:aa:3f:bf:af:dc:7b:cf:c2:6a:35:f4:bf:0d:33:
a7:3b:b3:35:df:36:72:94:05:cc:ef:f8:78:2d:ad:
53:32:c9:99:b5:d7:5b:65:2f:e7:69:71:d5:91:93:
94:c8:13:02:ce:8b:18:c1:3b:e9:f8:4b:32:53:0e:
d3:6c:92:02:23:3c:81:0b:a2:24:f7:83:7b:01:df:
71:b4:37:4d:f4:c8:e4:ca:56:f6:5f:93:72:f1:00:
4c:94:66:d1:d7:48:42:45:e4:6d:74:9a:b1:24:8b:
92:09:bd:9b:68:eb:dc:8d:de:e1:d1:16:fd:2f:0a:
39:0c:68:94:c5:72:0d:b0:73:bd:41:32:33:16:24:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:82:A4:5A:A7:7A:F0:D5:D4:AC:D3:70:D7:B2:C0:24:CB:71:C3:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8597D8A03A6411F1A508C711CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.32.0/20
156.230.64.0/18
156.240.128.0/18
156.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
01:05:bd:99:03:33:02:b2:e6:48:6f:d8:55:db:4a:f8:06:96:
b2:4e:44:bc:5f:b6:15:4e:3c:c1:fd:6b:b7:ad:e8:e0:95:3c:
a0:e3:67:bd:4b:1b:f7:94:99:8a:1b:af:be:2e:fc:13:a2:3c:
f9:0e:ba:7d:d6:aa:05:bc:66:d9:f9:29:63:82:56:56:f4:7b:
a9:48:4c:f1:5d:14:af:4c:28:6a:ff:d5:d2:37:ed:de:c0:01:
2e:c6:11:e2:d3:b5:9b:4f:44:a7:d9:ba:ff:e4:b3:35:53:1c:
f5:47:85:3d:42:d4:af:dc:22:06:45:af:8b:16:9e:20:11:d6:
90:14:55:1e:1f:7e:6a:b0:93:9c:9e:5b:df:bd:1a:3e:3f:47:
19:04:43:52:58:b8:fb:4d:69:61:c4:08:d4:52:c0:c1:8c:c2:
8d:fc:d3:10:ba:6e:10:da:ce:94:fc:3c:02:ce:70:9f:41:e0:
e1:9d:98:b0:17:f8:2e:24:09:12:d0:3f:fa:e7:9b:22:b8:05:
9b:40:5a:27:88:e0:a9:1c:b0:ed:2f:99:20:69:04:ed:00:42:
3d:a5:4d:63:d9:25:31:9b:1a:58:f2:f3:a5:f6:14:a4:b6:a7:
a1:45:05:7c:7d:93:50:8a:da:4a:22:31:91:25:39:f3:12:68:
29:e6:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:56:12 2026 by rpki-client