This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/92399C0CCFB511F0886853A2DAE4EC9C.roa
File:                     92399C0CCFB511F0886853A2DAE4EC9C.roa (raw, json)
Hash identifier:          8B6wU1xY38cYhzr9lZGnTjsUMM95hSXAG9bGNEVmCPI=
Subject key identifier:   AF:9C:F4:B9:5F:A0:6D:F8:54:11:8E:5C:24:2F:66:9F:46:E9:5F:8C
Certificate issuer:       /CN=F365972AAF/serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
Certificate serial:       0314
Authority key identifier: 30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/92399C0CCFB511F0886853A2DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:32:00 +0000
ROA not before:           Mon 08 Dec 2025 19:31:55 +0000
ROA not after:            Wed 08 Dec 2027 19:31:55 +0000
asID:                     327907
IP address blocks:        102.22.64.0/20 maxlen: 24
Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365972AAF, serialNumber=3024350D34092082B90B53EA3D9BFDB8E7451D5A
        Validity
            Not Before: Dec  8 19:31:55 2025 GMT
            Not After : Dec  8 19:31:55 2027 GMT
        Subject: CN=692f3eb0-82a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:bd:8a:8d:7d:92:cf:83:29:45:24:7f:17:
                    3c:50:88:e6:a3:e8:17:53:e7:fc:91:c3:7d:16:9b:
                    c6:b4:68:7b:1a:46:ea:67:39:7e:1e:7d:5a:9d:5b:
                    c5:ce:67:a5:77:82:80:c5:53:52:9e:c4:3a:73:24:
                    70:e1:56:9f:3d:61:7d:5f:87:17:2f:96:be:7b:7f:
                    28:9f:6e:08:97:6e:d3:7b:60:fb:9b:3b:9b:a4:76:
                    6a:15:ae:7e:2e:99:1c:b3:d8:e5:82:75:b2:65:4e:
                    54:98:2c:c7:b6:e4:65:ed:e5:4d:b3:b7:11:4d:5c:
                    89:f1:7d:35:71:fe:63:18:c1:d3:44:83:22:a1:3d:
                    a4:65:c1:42:c3:ed:86:78:38:43:4c:79:67:a6:bd:
                    68:55:d5:46:d0:88:56:d1:1d:7b:53:76:46:08:35:
                    e4:bf:59:11:c8:0e:0c:33:45:b4:fd:32:a7:bc:71:
                    7c:18:b0:17:4f:57:97:6f:e3:02:c3:74:04:7c:0a:
                    6f:4d:16:f0:0c:08:33:fd:1b:b2:ba:f5:0c:1e:8a:
                    ca:a9:9b:e6:a7:e8:24:93:24:99:28:5b:f4:d1:37:
                    20:f8:ad:83:30:db:05:86:3c:41:9e:c4:ea:f1:54:
                    eb:bf:01:f1:10:c3:8a:49:9e:4b:cf:be:a8:de:4b:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:F4:B9:5F:A0:6D:F8:54:11:8E:5C:24:2F:66:9F:46:E9:5F:8C
            X509v3 Authority Key Identifier:
                keyid:30:24:35:0D:34:09:20:82:B9:0B:53:EA:3D:9B:FD:B8:E7:45:1D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MCQ1DTQJIIK5C1PqPZv9uOdFHVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365972A/2EA31FD677E411EE96312D884AD9E6FC/92399C0CCFB511F0886853A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:b4:e9:c3:4f:5f:47:21:d8:de:3c:06:77:95:ee:2a:af:
         67:de:37:df:2b:51:8e:5c:7d:4d:8b:fa:55:82:87:f0:13:41:
         ad:c8:33:52:87:ab:d3:da:dc:f3:2f:b7:a1:5f:92:94:9f:f1:
         1e:a5:46:8d:54:19:4d:b6:9e:63:f2:d6:fa:af:a4:23:b6:ec:
         9e:a9:07:e5:bf:c0:2d:a2:71:e9:e3:43:21:24:dd:40:2f:82:
         b2:6e:f0:9d:4c:41:89:e0:3a:7e:70:91:91:db:bf:b2:14:7c:
         ab:f7:9f:87:6f:ad:4e:ce:f2:ed:68:f4:69:07:2e:a1:89:c9:
         79:ab:6c:b5:1f:a6:db:25:7d:61:61:cf:7d:26:3b:f1:1a:83:
         88:4c:e1:bb:10:01:0b:74:de:19:bf:2c:3c:05:45:a2:00:e5:
         56:05:2e:94:f0:3a:85:83:e9:52:9b:83:98:2e:f4:34:26:b7:
         ff:03:64:cc:63:90:98:19:72:c4:a0:01:ee:95:86:b8:4e:f1:
         43:69:7d:e9:29:cf:df:e9:c5:74:bf:01:55:92:c6:59:47:b3:
         b3:49:89:96:4f:af:a3:77:52:44:da:6d:4c:6c:a1:09:f8:a0:
         4c:fd:b7:a4:48:27:85:54:09:8f:7d:c3:28:5a:f6:14:6b:82:
         0c:8d:bd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----