This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F702F6143D6C11F09D193EBBDAE4EC9C.roa
File:                     F702F6143D6C11F09D193EBBDAE4EC9C.roa (raw, json)
Hash identifier:          smLulqo8FEMmNDk2Fpd7kBA+m1SO8vCDJIbxVblpIfM=
Subject key identifier:   53:44:32:31:C2:D4:21:3D:1F:ED:47:25:C7:BB:94:F8:DA:02:33:D5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0183FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F702F6143D6C11F09D193EBBDAE4EC9C.roa
Signing time:             Fri 30 May 2025 15:44:26 +0000
ROA not before:           Fri 30 May 2025 15:44:21 +0000
ROA not after:            Mon 09 Jun 2025 15:44:21 +0000
asID:                     54600
IP address blocks:        154.91.48.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99323 (0x183fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 15:44:21 2025 GMT
            Not After : Jun  9 15:44:21 2025 GMT
        Subject: CN=6839d25a-d754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:91:cc:b5:78:b1:0c:83:10:17:f1:23:1a:
                    6c:c0:b9:ec:62:b0:5c:8a:8e:df:03:a9:68:14:6f:
                    6b:50:ee:e7:03:09:30:bf:ce:50:78:10:96:09:6c:
                    00:5b:84:c3:c4:87:b1:97:c7:80:60:e7:47:8c:e5:
                    c2:5a:52:4c:c2:f8:c9:a1:b9:92:bd:d1:9c:39:9c:
                    00:2c:ed:ae:cf:96:50:92:ac:4a:41:ba:1f:44:db:
                    1f:1b:96:57:9b:18:62:88:cd:1c:26:f5:03:42:47:
                    b5:c9:e5:fa:38:a3:f6:c6:c2:a8:78:aa:c3:f8:29:
                    9e:2a:ca:0d:b3:ac:29:b5:10:9b:42:9d:39:54:8e:
                    85:c5:6a:30:8c:9f:2d:20:03:2d:bd:31:43:d8:db:
                    9e:9d:fe:68:76:1d:0a:55:9c:71:08:f7:3c:52:13:
                    eb:9c:50:a4:43:e0:c8:71:0d:6a:96:88:2f:1d:cb:
                    e8:94:51:1e:80:09:88:b0:16:4a:67:10:71:15:18:
                    61:41:ae:02:44:4c:ea:8a:d5:f3:2e:b5:0f:bb:37:
                    65:dc:a6:51:fc:69:75:25:b0:cb:9f:17:17:3a:ef:
                    9f:49:7d:48:72:76:e1:ab:94:6b:0d:dd:f5:ea:28:
                    13:99:91:3a:23:c6:b8:43:dc:64:e0:b3:dd:f4:f6:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:44:32:31:C2:D4:21:3D:1F:ED:47:25:C7:BB:94:F8:DA:02:33:D5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F702F6143D6C11F09D193EBBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:f5:6c:25:fb:7a:71:b7:96:1a:1c:44:ac:cf:a5:a7:d9:
         5f:63:af:09:e5:93:dd:88:2f:4b:27:f2:06:21:98:db:72:78:
         0c:85:1b:00:ba:ae:fe:eb:0a:e0:3f:21:3b:9a:f7:9d:af:73:
         79:f7:cb:57:5a:95:57:ff:6b:51:ba:3b:45:a1:22:66:fa:05:
         75:1f:bf:2e:fb:85:03:e3:e3:e8:3d:76:31:c5:99:27:e7:a6:
         3a:ea:83:53:d3:d7:82:22:ea:45:1b:8e:fd:5b:fc:7f:ce:50:
         9a:64:ed:e9:10:4e:6c:c5:1c:7e:23:19:88:cb:f0:f2:c9:c2:
         96:4e:53:7b:25:92:6c:d1:8f:3e:9b:bc:a6:57:29:14:a6:d4:
         68:01:48:97:ec:15:f1:6c:65:00:d2:c4:ea:e4:ad:70:0b:de:
         ff:a9:e6:f4:0a:6f:d6:62:98:69:04:35:20:71:b5:c5:95:0c:
         f0:2b:30:e9:84:1d:c3:94:8d:b7:61:10:5b:ca:b4:0f:27:b1:
         9d:62:ba:5d:3c:58:b6:73:49:a7:2b:45:66:40:75:ed:58:b4:
         5e:35:c7:c0:d9:39:ac:b4:ca:7b:2a:bb:81:90:b7:75:0f:c3:
         5d:05:c0:b1:d4:2c:e2:f1:06:75:ca:03:5a:a1:b5:ae:20:fb:
         2c:f1:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----