Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFD823D40E7411F1813240EBDAE4EC9C.roa
File: AFD823D40E7411F1813240EBDAE4EC9C.roa (raw, json)
Hash identifier: lVRooTu4qm7tV/cdPxgfWAIdNz6b1RhdZCb7XLzrnL0=
Subject key identifier: C1:23:33:46:C2:B1:A8:BC:27:C7:3D:34:09:E6:86:51:3F:14:56:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFD823D40E7411F1813240EBDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 15:56:15 +0000
ROA not before: Fri 20 Feb 2026 15:56:11 +0000
ROA not after: Sun 01 Mar 2026 15:56:11 +0000
asID: 38193
IP address blocks: 156.238.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106226 (0x19ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 15:56:11 2026 GMT
Not After : Mar 1 15:56:11 2026 GMT
Subject: CN=6998841f-689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:71:11:c3:5a:b1:cc:78:a5:1b:1a:8b:54:
d1:e0:db:15:5b:6b:1b:c4:13:3a:1b:30:4b:d7:83:
26:24:c0:33:ff:d1:0d:4a:59:b4:e0:4c:58:1c:16:
47:06:90:41:a7:7d:6b:2d:df:6d:85:82:0d:bc:5d:
62:70:b2:62:3e:80:31:41:f0:04:2c:c6:4e:b4:8b:
47:5e:da:6f:ad:b7:b1:b9:3c:e6:19:ad:cd:62:74:
f5:ac:b1:72:6e:15:5c:42:23:ed:68:72:dc:75:1d:
f5:24:72:4c:27:18:4e:58:88:5f:70:05:21:be:6b:
e5:d7:0c:1f:56:30:77:c4:fa:b0:2b:4a:e2:4e:56:
8a:1d:e6:a1:7f:5e:dc:d4:d0:3a:94:ba:9d:b2:a2:
c5:15:65:7a:ee:39:d6:16:c5:f7:b1:ac:68:bd:2f:
0e:e8:5b:36:91:c8:61:e7:7c:2d:49:68:15:ab:28:
08:13:ea:50:a7:91:81:18:a0:00:39:e9:1b:fd:75:
ca:dc:60:35:4c:d6:8f:c2:88:3e:03:d6:d6:6d:09:
ff:b6:17:ef:ee:8b:9d:99:b5:87:e3:63:42:49:bf:
23:ed:a2:96:0c:cb:46:31:9e:05:73:31:2c:e7:ad:
93:5d:6c:53:dc:a1:a1:5c:49:25:65:26:98:fa:a0:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:33:46:C2:B1:A8:BC:27:C7:3D:34:09:E6:86:51:3F:14:56:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFD823D40E7411F1813240EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.80.0/24
Signature Algorithm: sha256WithRSAEncryption
27:08:bd:d8:7d:1a:9a:4a:6a:ac:f4:fb:9a:80:15:73:df:df:
d4:07:45:da:6e:63:15:f9:5a:fb:f7:4c:02:d8:86:e6:df:6c:
f3:54:fa:09:79:ea:a4:53:6a:85:76:da:8b:9a:ca:22:75:73:
21:bf:83:fd:a4:0e:58:7c:08:71:e4:b5:db:30:5f:9c:99:7a:
83:45:6e:a6:38:b5:7a:57:f1:1a:dc:0d:77:ec:e0:7f:57:ac:
11:a9:12:db:4c:41:46:9a:e7:e8:1a:53:4d:18:c1:ef:9d:e2:
63:d6:9a:6c:5a:2a:d3:96:62:db:54:b3:67:ab:a5:06:a4:52:
8f:5c:dc:ec:56:80:21:ae:df:17:58:13:22:26:9e:eb:14:59:
18:bf:f5:71:a9:12:6d:8e:aa:ac:14:74:7f:e1:6d:1a:32:45:
0d:42:a6:01:ab:01:d4:7c:a9:4b:e3:be:34:a6:73:30:08:7e:
ad:90:77:86:2d:da:c3:69:04:72:fa:e1:36:1d:d6:d1:c2:43:
e1:7b:52:2c:22:35:23:57:cf:ae:fe:6c:60:84:de:9f:2d:34:
f7:e3:a2:61:c4:74:ae:a9:02:63:6d:b0:af:87:9c:1d:33:2b:
43:26:64:0c:ed:ce:a3:31:d8:1b:c9:bd:89:23:a1:08:8d:a9:
94:5c:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:10 2026 by rpki-client