Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB064D9A618B11F189796917CF1D38B0.roa
File: EB064D9A618B11F189796917CF1D38B0.roa (raw, json)
Hash identifier: mRq9HZRhEdcJZaxCTClJxI52e8PMAAaSGyNkVzkopZA=
Subject key identifier: 91:71:FD:9E:D4:28:D8:E4:E8:90:E7:17:D1:CA:AE:2F:DF:F8:ED:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB064D9A618B11F189796917CF1D38B0.roa
Signing time: Sat 06 Jun 2026 09:41:40 +0000
ROA not before: Sat 06 Jun 2026 09:41:35 +0000
ROA not after: Sat 13 Jun 2026 09:41:35 +0000
asID: 142403
IP address blocks: 156.236.66.0/24 maxlen: 24
156.236.70.0/24 maxlen: 24
156.236.71.0/24 maxlen: 24
156.236.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113712 (0x1bc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 09:41:35 2026 GMT
Not After : Jun 13 09:41:35 2026 GMT
Subject: CN=6a23eb54-8cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:08:de:eb:4c:c7:24:4b:c1:ef:2a:9c:cc:
07:64:20:5c:ea:c5:84:66:b2:47:c5:78:19:cd:55:
96:52:23:15:b7:5e:98:65:6a:c9:8f:14:84:3d:c7:
28:5e:2d:94:5d:d8:30:78:f6:1a:57:d2:04:ef:56:
06:89:0e:3f:07:b8:81:38:2c:a3:a0:67:fa:ce:82:
e6:dd:ac:1e:da:a1:82:51:ec:d9:c6:cc:93:69:0d:
1f:0f:d3:8d:0f:19:51:91:0a:24:d2:14:bb:d1:d4:
48:4e:4b:2d:9d:d4:7d:b8:5a:ed:a6:72:92:5f:93:
15:2a:e3:c3:c5:7d:7d:18:32:9a:07:09:9d:59:46:
d7:cb:e2:65:6e:5a:da:b2:6c:e9:17:42:e9:c3:13:
1c:f5:93:c9:4d:f9:61:ae:6d:a8:2e:e5:13:d7:bd:
10:09:f9:9f:ca:94:e3:84:8a:16:19:bb:9f:60:92:
1a:3e:25:af:8b:3d:2d:2d:c4:6d:5c:1b:c9:d4:0f:
0f:c2:a4:20:da:a2:70:af:11:c0:dc:69:87:65:7f:
fe:27:37:37:bc:a8:9f:ef:a0:38:ea:25:3c:3e:da:
00:66:9a:bd:b5:2e:f0:4d:c1:2e:eb:81:20:b5:04:
64:26:76:b4:d4:a7:43:93:6e:84:dc:4e:fb:a6:43:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:71:FD:9E:D4:28:D8:E4:E8:90:E7:17:D1:CA:AE:2F:DF:F8:ED:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB064D9A618B11F189796917CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.66.0/24
156.236.70.0-156.236.72.255
Signature Algorithm: sha256WithRSAEncryption
2b:12:f8:7d:6c:b8:c9:f9:bf:ad:ad:9c:f0:cf:f2:85:7f:ae:
4a:e0:b1:fb:8e:0a:b2:30:03:fc:06:f8:93:1a:fe:d2:53:ac:
89:61:d5:3f:e1:ff:1e:d9:9c:41:2c:14:e9:59:13:1f:58:d7:
f7:d8:85:a0:67:46:0e:1b:09:27:22:ee:10:09:95:a9:96:84:
df:1d:4b:e1:f2:1a:77:bd:c6:a7:8a:aa:ac:05:cc:d5:ab:b4:
85:95:95:68:33:f0:e1:63:d2:ca:f7:32:57:1c:2e:ae:e1:8a:
18:c3:59:04:47:b5:65:6e:d1:6e:cb:c6:c7:bc:82:fd:8d:d4:
2f:15:52:46:f7:e0:17:92:89:7c:85:1b:1e:72:3f:77:81:1a:
2d:fa:1b:d4:6b:17:7f:aa:1d:a6:5d:1e:6e:52:65:ce:f8:23:
06:20:c6:9f:dc:1b:78:9a:47:b7:c1:61:39:d4:88:67:dc:98:
ad:96:1b:d0:06:53:e4:33:23:aa:67:f1:32:c1:51:b6:66:33:
e1:ec:b1:40:73:56:b1:87:f0:07:dc:2b:e1:19:2d:9e:e3:f8:
48:ac:26:8f:aa:98:f7:8b:e3:d4:c6:50:3d:a4:d7:fa:2a:8b:
21:8a:6a:41:06:15:3f:05:f7:1b:69:e0:51:59:5d:51:81:fe:
82:00:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:17:54 2026 by rpki-client