This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0821C7E2C38511F0ADFB948BDAE4EC9C.roa
File:                     0821C7E2C38511F0ADFB948BDAE4EC9C.roa (raw, json)
Hash identifier:          9KZT6dpnAR7xghOLscW8DVRBhi1Sa0SWzEKuNm1SQks=
Subject key identifier:   64:7B:20:56:BE:88:21:5D:AF:86:7F:75:34:4E:B5:AF:0B:25:95:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0187C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0821C7E2C38511F0ADFB948BDAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 07:14:19 +0000
ROA not before:           Mon 17 Nov 2025 07:14:13 +0000
ROA not after:            Wed 24 Dec 2025 07:14:13 +0000
asID:                     19318
IP address blocks:        45.207.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100291 (0x187c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 17 07:14:13 2025 GMT
            Not After : Dec 24 07:14:13 2025 GMT
        Subject: CN=691acb4a-affb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:b9:18:19:26:33:ac:02:66:45:96:6b:5f:
                    c2:47:14:76:69:a0:6d:3b:bc:03:b8:f2:91:06:06:
                    ce:ff:41:22:0f:24:c4:a7:5c:e8:4e:a7:9a:48:7e:
                    c9:8c:14:1d:43:97:95:90:74:af:1c:a9:2b:e5:c0:
                    ea:89:67:67:de:24:ab:ef:c7:5f:07:9d:8d:ce:22:
                    11:5d:7e:8c:b9:64:57:b3:1e:84:52:14:a1:d5:87:
                    32:ad:41:75:d4:eb:ec:e4:6e:9f:8b:8a:03:e1:5b:
                    1d:6f:c6:4b:ba:20:ce:62:51:dc:8f:bd:10:95:1a:
                    b6:8b:19:cf:e9:84:fb:c4:1b:9a:2a:8d:b2:35:55:
                    e2:dd:47:23:91:39:6b:3f:68:e2:9d:47:c2:79:d5:
                    bd:f6:3b:a6:ee:66:18:29:cb:45:b4:7f:73:a5:59:
                    f6:e9:09:9b:c9:94:0b:f8:89:16:56:2f:3e:c8:9c:
                    a8:54:e9:30:b0:b3:48:4f:db:fd:d3:ac:c9:dc:90:
                    2e:94:17:ac:21:db:de:c7:f1:27:5e:34:b8:f9:a2:
                    1e:63:c3:86:cf:b8:15:08:37:df:74:19:aa:92:89:
                    e2:be:8b:3e:34:f1:db:f3:5d:20:6f:e8:8b:c8:90:
                    be:c9:17:eb:0e:f3:a6:3a:07:a8:dc:67:06:30:5b:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7B:20:56:BE:88:21:5D:AF:86:7F:75:34:4E:B5:AF:0B:25:95:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0821C7E2C38511F0ADFB948BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:23:39:6f:02:84:98:2c:f4:d3:21:c6:68:c0:cc:7f:dc:cf:
         a3:bd:33:72:c3:13:c1:cf:4f:e5:2f:de:93:b9:3c:0d:e4:6f:
         1d:0f:ff:ec:de:82:27:84:f1:11:f6:87:52:ab:a8:0d:b7:8f:
         70:c3:55:29:14:b1:40:69:56:fd:16:42:af:ec:63:cd:af:2b:
         04:e7:0f:69:22:a7:46:b1:41:ce:ba:83:4c:9f:0c:8e:07:a4:
         5a:e8:15:33:ab:97:ff:47:86:8d:f4:bf:f0:8f:6e:09:d5:1b:
         8b:96:33:e3:df:68:da:e8:31:9e:9c:db:2e:f8:5f:34:35:a8:
         36:02:e0:99:d9:6a:d5:cb:f2:54:6a:d3:8a:17:0c:ba:29:26:
         9b:de:d8:8c:42:fc:8f:0f:0d:3d:10:7a:84:55:c5:6f:a0:77:
         f6:66:04:02:3d:c8:1e:a9:97:a0:3d:20:bc:88:16:25:25:3a:
         8e:35:80:1d:f1:cf:c0:0e:47:39:84:6e:19:ec:7e:c3:bd:48:
         b2:01:fb:97:d2:ac:e8:88:41:b0:5e:9c:b8:14:ae:42:33:5d:
         32:a2:ca:82:e7:91:c6:ef:07:7c:a4:c0:76:0f:60:5f:f8:98:
         76:67:02:30:65:a2:75:b1:56:b9:42:f7:15:2a:71:ff:cc:6a:
         7a:88:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:07 2025 by rpki-client