Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9231293A0E7311F1AAD53DE3DAE4EC9C.roa
File: 9231293A0E7311F1AAD53DE3DAE4EC9C.roa (raw, json)
Hash identifier: BKsnA4nxJCeChQd47kNr5NjDc4zNnEJVZnFw5lzkASA=
Subject key identifier: 56:FD:E6:DE:B9:AE:32:3D:FD:71:8B:8D:9C:DE:51:03:3A:BA:54:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9231293A0E7311F1AAD53DE3DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 15:48:16 +0000
ROA not before: Fri 20 Feb 2026 15:48:12 +0000
ROA not after: Sun 01 Mar 2026 15:48:12 +0000
asID: 134489
IP address blocks: 156.238.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106220 (0x19eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 15:48:12 2026 GMT
Not After : Mar 1 15:48:12 2026 GMT
Subject: CN=69988240-2c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:81:d3:97:98:a3:7c:cb:10:ae:f8:6d:4e:
51:1c:af:a6:9b:47:5d:b8:00:6b:47:5c:61:82:64:
e6:4a:21:be:f8:31:cf:05:e6:b8:16:8f:9a:9f:96:
f4:41:78:72:d9:15:2b:c5:d0:02:3b:bb:1a:95:52:
ed:0b:78:f9:fe:4b:f3:75:f9:42:68:e0:a3:aa:51:
c0:a2:a1:dc:31:4c:81:45:f3:e3:df:48:61:e7:d3:
56:9b:99:0c:79:87:66:63:ab:f9:a2:8e:d4:30:2d:
a8:74:38:b9:66:0b:a2:7b:48:bc:3e:4e:42:83:0d:
89:e3:86:af:19:24:d5:7c:06:be:f5:3b:45:26:07:
67:0f:78:5d:17:ac:3f:34:04:b2:67:cf:5a:42:9e:
30:f3:ca:6e:0b:07:18:6d:7e:db:42:85:51:fd:81:
4d:26:77:90:5e:09:3c:3b:c2:7f:c6:50:ce:ef:da:
ef:d4:e8:95:cf:ca:a4:44:5c:c6:49:e3:54:68:c4:
bb:59:f9:c2:a7:c3:c4:6a:25:26:38:29:70:df:2f:
86:8c:05:f7:e3:41:0f:90:b2:2b:1f:b5:2a:23:5a:
a4:2d:28:fc:f8:d5:f4:ce:e6:fe:e8:6c:cd:04:5d:
b7:4f:9c:fd:9a:2d:2b:e8:8e:a6:45:38:f1:e0:7f:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:E6:DE:B9:AE:32:3D:FD:71:8B:8D:9C:DE:51:03:3A:BA:54:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9231293A0E7311F1AAD53DE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.86.0/24
Signature Algorithm: sha256WithRSAEncryption
21:92:d4:6c:51:2f:18:f6:ab:cf:8b:29:3e:85:83:a6:41:bf:
8f:d7:74:ed:35:73:09:7d:fa:c1:c9:7e:fc:ed:09:8d:34:f5:
63:64:da:43:5e:44:97:7d:b2:43:db:e1:9a:ae:18:4d:9b:86:
a5:98:7c:88:f4:ce:ba:e1:49:d5:0e:02:a8:c8:8a:4b:90:81:
ac:7a:21:45:5e:df:88:fa:91:f8:0e:3a:59:1d:9d:a6:25:76:
09:f4:61:af:04:84:ae:38:47:a2:43:dc:c2:29:1c:a2:0d:46:
dc:c4:a4:7c:0b:69:5f:4b:f2:48:44:f1:e2:04:9f:fb:76:0a:
1e:f5:2b:bd:13:39:fd:6d:00:c4:2d:89:34:d1:c2:60:c4:ee:
c7:27:db:1f:66:d2:62:4c:c9:c7:ea:ea:74:35:ad:99:72:fc:
cc:c1:e7:9a:fb:19:1b:2c:10:78:e6:dd:76:f1:71:64:62:68:
03:56:ad:34:83:9f:25:bf:e6:c4:46:a8:4a:5e:b2:0d:a4:df:
6a:7d:b2:7f:a0:36:89:d1:eb:13:44:7c:4d:58:93:e0:bb:e1:
83:6a:14:f7:03:04:3c:8c:ff:38:04:3a:80:b9:7c:d1:33:8e:
b4:89:68:ad:c5:bc:e8:14:f1:e4:ac:1b:eb:0d:ee:ee:8b:49:
ae:66:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:43:10 2026 by rpki-client