This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/D3F2D11CBB1611F0A3C453CBDAE4EC9C.roa
File:                     D3F2D11CBB1611F0A3C453CBDAE4EC9C.roa (raw, json)
Hash identifier:          vd3EaqmnyNA8r/AoagUYUr3pDX7tYTNbu76v8SspQ0c=
Subject key identifier:   F9:B9:B5:88:E3:4C:49:3D:8E:90:DC:9D:58:80:22:56:D5:5A:B0:98
Certificate issuer:       /CN=F3651B12AF/serialNumber=797B59395874D2EE6EC8CBFD076B2ABC613D89B4
Certificate serial:       8F
Authority key identifier: 79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/D3F2D11CBB1611F0A3C453CBDAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 13:45:17 +0000
ROA not before:           Thu 06 Nov 2025 13:45:13 +0000
ROA not after:            Wed 06 Nov 2030 13:45:13 +0000
asID:                     33779
IP address blocks:        41.200.64.0/18 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 05:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12AF, serialNumber=797B59395874D2EE6EC8CBFD076B2ABC613D89B4
        Validity
            Not Before: Nov  6 13:45:13 2025 GMT
            Not After : Nov  6 13:45:13 2030 GMT
        Subject: CN=690ca66d-2ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:24:0f:24:27:b0:81:fd:0b:a9:fb:07:17:
                    a3:50:47:6b:12:eb:91:37:95:91:f2:7f:58:4c:ae:
                    ca:1e:28:34:ba:29:77:c5:a9:b5:64:82:0d:23:61:
                    e1:b7:46:48:a6:a5:e4:a9:41:6a:70:9a:14:74:90:
                    85:89:85:72:63:84:af:4c:e1:69:bd:ff:02:9d:60:
                    f9:ac:d0:81:27:33:e3:bc:d3:0b:92:65:a3:d3:2d:
                    bd:6d:a9:c3:c5:47:c5:be:7a:1b:35:c2:32:10:fb:
                    03:f1:4b:d7:89:28:db:03:03:b7:b6:b1:40:be:96:
                    d8:eb:19:57:a8:75:09:be:e7:08:39:d3:b9:a1:f2:
                    c9:df:24:34:95:bc:2a:3e:b0:14:49:d5:2d:b0:bc:
                    32:81:e9:52:f2:49:ba:55:30:20:2d:82:74:00:ce:
                    76:f4:29:a9:ab:62:9c:bf:d4:c2:45:78:70:6b:6a:
                    9d:34:9f:03:1d:c0:21:f3:41:cc:16:17:b1:4f:55:
                    34:4b:6f:3c:c1:9e:b9:53:20:6c:2d:6f:d8:b9:60:
                    43:a1:b3:0a:68:70:e3:2f:91:ef:ed:93:05:8f:5a:
                    d1:0c:60:9c:e9:29:9c:0f:d2:3d:5b:8d:89:e1:cd:
                    be:62:64:65:1f:a0:40:9e:f8:e2:9e:2e:95:c6:f5:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B9:B5:88:E3:4C:49:3D:8E:90:DC:9D:58:80:22:56:D5:5A:B0:98
            X509v3 Authority Key Identifier:
                keyid:79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/D3F2D11CBB1611F0A3C453CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.200.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:34:5e:49:74:6a:83:26:eb:d5:6c:3d:5b:a7:1b:b3:68:
         ff:09:17:5b:ab:de:83:4a:58:9b:93:20:21:ca:d6:35:84:0b:
         17:69:c8:70:b1:d0:9d:b9:5a:dc:c4:4d:17:a2:a9:44:c6:06:
         a3:3b:fa:0b:f1:29:fb:db:61:a2:c1:9f:72:f1:38:08:57:9b:
         f9:95:a4:94:d3:34:83:29:25:a5:1b:24:7f:da:3c:72:59:26:
         5d:5e:d2:99:54:6b:71:b1:82:9f:1a:34:44:8b:3e:ec:83:b0:
         94:cb:3a:2f:3d:88:09:f5:41:ab:d3:fd:45:d7:93:41:8e:f1:
         04:36:00:9f:fd:e1:10:ec:d4:9c:7a:03:b4:c6:18:1b:f1:8a:
         7a:06:95:2e:0c:90:1b:5f:ed:19:51:29:3f:fa:8e:df:7a:90:
         cc:02:d0:46:54:8f:06:fb:a7:95:89:90:00:34:06:ba:22:a2:
         8b:6b:ec:c1:e1:04:40:e3:0c:8e:13:4d:34:90:9d:a7:d3:af:
         34:86:6b:6a:47:c3:89:3e:6c:af:43:a7:8b:9a:0d:a9:81:0f:
         3e:ea:df:a2:c3:a0:21:a1:20:d8:a2:d1:f5:62:4a:45:39:bd:
         7a:34:20:98:17:a6:74:9b:20:9f:7e:e2:1d:21:ec:45:4a:ab:
         64:5e:5f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:44:13 2025 by rpki-client