Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EF91BC0AA011F1BFFBCAD7DAE4EC9C.roa
File: A1EF91BC0AA011F1BFFBCAD7DAE4EC9C.roa (raw, json)
Hash identifier: CzsgKo8Anp7iRr6P/6qocimZK6Lg9icy15nQrdTTpBE=
Subject key identifier: E1:FD:38:A2:B6:06:CB:BB:E8:68:1A:EF:81:E1:D0:E3:94:B6:E4:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019DFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EF91BC0AA011F1BFFBCAD7DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 19:00:46 +0000
ROA not before: Sun 15 Feb 2026 19:00:41 +0000
ROA not after: Sun 01 Mar 2026 19:00:41 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105983 (0x19dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 15 19:00:41 2026 GMT
Not After : Mar 1 19:00:41 2026 GMT
Subject: CN=699217dd-20dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:d9:08:c3:88:8c:40:72:7f:4c:3a:39:76:
04:79:ae:e0:c8:cb:1f:28:92:ee:94:b9:a1:05:0a:
c5:25:86:64:15:5c:0d:89:ee:80:e6:ff:70:3a:24:
77:11:ec:ea:03:f9:52:a3:a4:a7:98:64:cd:e0:a9:
05:d9:88:1b:d9:7e:b8:50:b0:59:b3:a3:e3:eb:8e:
4b:d6:96:47:f4:6e:e8:64:21:60:22:49:83:09:41:
16:6a:14:ce:00:83:5e:dd:92:30:b0:b2:3d:83:6b:
52:00:ec:6c:31:19:8e:6b:f6:0a:8a:8c:78:b9:74:
dd:75:26:5c:da:0a:1e:1a:4e:78:1a:5a:dd:e3:07:
8d:0e:73:23:22:4b:39:a0:3a:e4:d1:8d:6a:ba:87:
0d:de:21:d8:90:4c:e6:59:f1:c5:ac:84:95:0a:c0:
8e:ec:ee:16:ff:02:30:36:1c:c8:d0:03:ae:90:89:
d3:ca:47:32:39:07:40:28:51:8f:bd:20:52:bf:9e:
d7:90:a7:4d:2c:79:9b:44:22:be:5d:1f:b9:53:ce:
fc:4a:f3:f7:da:5c:12:cc:ec:78:0f:32:0b:3b:38:
d8:5c:a5:03:a0:e9:46:1a:5f:65:c1:8d:36:d6:97:
d1:9e:ae:e8:49:60:73:77:eb:f8:8e:f4:6e:2e:7c:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:38:A2:B6:06:CB:BB:E8:68:1A:EF:81:E1:D0:E3:94:B6:E4:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EF91BC0AA011F1BFFBCAD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
45:d6:c7:0d:8a:24:30:88:02:5d:f5:f2:c4:aa:54:09:83:51:
e8:76:fe:bc:f8:6f:83:12:ec:a4:d9:1f:a5:da:57:62:02:fa:
8c:ee:00:d8:f1:91:e5:1c:69:bf:dd:56:fb:a3:4e:46:0d:3b:
5d:2e:43:19:af:db:6b:02:b1:be:34:8e:b4:76:cf:9d:89:77:
52:69:a2:78:10:49:93:32:99:04:a5:11:ce:3d:53:44:c3:05:
f1:73:13:dd:07:80:1f:ae:c8:69:e9:72:43:50:ad:e0:3b:39:
14:9b:e2:71:6f:ae:3a:84:e6:1d:81:3d:77:35:55:4a:43:39:
13:e4:98:de:b4:4e:dd:3a:8b:05:a5:d7:b5:3f:79:6e:3f:7c:
25:74:91:5c:01:8f:18:82:16:a7:f8:68:1f:00:42:f7:bc:6f:
5e:f9:3e:a4:50:b4:af:85:31:da:f6:8f:ae:04:89:8c:16:75:
a6:b2:37:67:45:f1:b9:6b:ad:3d:74:a6:15:b7:8e:d7:43:e1:
9d:e5:38:d7:e7:5b:74:4c:ab:ee:fa:ea:7e:bc:29:4e:1e:e2:
8b:d9:54:c2:fc:f8:23:04:99:bf:55:cb:7b:da:a1:22:53:5f:
76:ec:b9:0c:fb:1b:74:aa:6e:ee:2d:0a:cf:87:47:ef:32:e1:
1e:ee:37:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ3/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE1MTkwMDQxWhcNMjYwMzAxMTkwMDQxWjAYMRYw
FAYDVQQDEw02OTkyMTdkZC0yMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxJXZCMOIjEByf0w6OXYEea7gyMsfKJLulLmhBQrFJYZkFVwNie6A5v9w
OiR3EezqA/lSo6SnmGTN4KkF2Ygb2X64ULBZs6Pj645L1pZH9G7oZCFgIkmDCUEW
ahTOAINe3ZIwsLI9g2tSAOxsMRmOa/YKiox4uXTddSZc2goeGk54Glrd4weNDnMj
Iks5oDrk0Y1quocN3iHYkEzmWfHFrISVCsCO7O4W/wIwNhzI0AOukInTykcyOQdA
KFGPvSBSv57XkKdNLHmbRCK+XR+5U878SvP32lwSzOx4DzILOzjYXKUDoOlGGl9l
wY021pfRnq7oSWBzd+v4jvRuLnw5RQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOH9
OKK2Bsu76Gga74Hh0OOUtuTcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMUVGOTFCQzBBQTAxMUYxQkZGQkNBRDdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc+AMA0GCSqGSIb3DQEBCwUA
A4IBAQBF1scNiiQwiAJd9fLEqlQJg1Hodv68+G+DEuyk2R+l2ldiAvqM7gDY8ZHl
HGm/3Vb7o05GDTtdLkMZr9trArG+NI60ds+diXdSaaJ4EEmTMpkEpRHOPVNEwwXx
cxPdB4Afrshp6XJDUK3gOzkUm+Jxb646hOYdgT13NVVKQzkT5JjetE7dOosFpde1
P3luP3wldJFcAY8Yghan+GgfAEL3vG9e+T6kULSvhTHa9o+uBImMFnWmsjdnRfG5
a609dKYVt47XQ+Gd5TjX51t0TKvu+up+vClOHuKL2VTC/PgjBJm/Vct72qEiU192
7LkM+xt0qm7uLQrPh0fvMuEe7jc0
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:12:22 2026 by rpki-client