This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3586D97AF91111ED919B29844AD9E6FC.roa
File:                     3586D97AF91111ED919B29844AD9E6FC.roa (raw, json)
Hash identifier:          4le1LOJo6KAVnA07doINknckeXZG5yIc6wdKbUKCo+0=
Subject key identifier:   6D:D4:14:32:D3:1E:AE:03:7F:4F:DB:DA:D0:AB:F8:F2:17:EA:C9:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       268C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3586D97AF91111ED919B29844AD9E6FC.roa
Signing time:             Tue 23 May 2023 02:26:23 +0000
ROA not before:           Tue 23 May 2023 02:26:19 +0000
ROA not after:            Sat 13 Apr 2024 02:26:19 +0000
asID:                     64267
IP address blocks:        156.248.97.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9868 (0x268c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 23 02:26:19 2023 GMT
            Not After : Apr 13 02:26:19 2024 GMT
        Subject: CN=646c244e-2a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:26:16:b0:e3:e5:46:ac:a2:b4:ec:7c:9e:
                    19:6c:83:0f:96:a0:1a:4f:84:3b:6c:f2:a3:02:8c:
                    9b:e7:11:9a:b5:db:68:78:bb:07:b3:45:06:f0:14:
                    11:12:77:d3:b2:a8:8a:85:fa:ac:9a:f7:8a:1c:1e:
                    a8:47:b8:09:69:51:e2:ec:00:b9:6a:43:31:d6:e8:
                    a4:e9:d7:98:01:18:1e:d9:92:33:5a:b1:8c:55:f9:
                    1e:cd:97:5e:80:58:7e:a7:4e:b4:f6:67:c6:e2:b9:
                    ad:b3:1c:47:18:cd:d6:a7:f5:69:e3:03:7f:86:97:
                    11:25:e2:91:a8:d8:9a:52:ac:e2:a2:24:9e:56:25:
                    2a:44:82:02:fb:c1:d4:2f:67:b8:13:bb:b8:bb:35:
                    39:d8:82:f4:05:bf:9a:85:45:33:2a:60:f0:48:c1:
                    48:8f:e5:0e:75:19:df:08:51:e5:02:c0:bd:e5:d3:
                    13:22:4a:bf:13:f9:79:c4:04:84:39:ec:34:f6:10:
                    8a:d2:59:32:d2:f5:02:16:91:c9:96:dd:2a:64:69:
                    db:4b:fd:f3:7c:82:ea:bc:eb:91:65:cb:c9:43:bf:
                    f3:20:f8:9b:81:1a:97:d8:85:65:6b:94:6d:23:53:
                    a0:93:99:e8:1f:54:17:a1:da:90:0d:4a:bd:02:f3:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D4:14:32:D3:1E:AE:03:7F:4F:DB:DA:D0:AB:F8:F2:17:EA:C9:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3586D97AF91111ED919B29844AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:92:4d:90:ad:34:a9:ff:f9:e2:1c:3a:46:5b:bb:ab:c8:d0:
         f7:e9:43:52:c4:db:22:e7:67:ad:5e:11:8c:19:b3:b8:ef:40:
         e2:7e:88:65:39:69:e8:da:b2:c2:34:a5:4c:4e:a9:32:a6:b7:
         bb:d6:94:fd:94:59:bc:47:8f:d4:90:66:fc:91:d0:48:4a:22:
         7d:6c:63:7e:68:e6:a9:e2:b9:22:ab:74:aa:cb:2a:42:66:63:
         bd:7f:28:a7:73:cd:80:59:89:d8:13:49:fc:b0:9c:4d:8a:0e:
         12:17:80:37:f9:ee:49:b4:0e:00:48:07:49:ca:c6:f9:aa:6b:
         d7:36:5a:da:d4:0c:bd:55:46:e3:06:46:ac:98:46:a6:8e:9a:
         aa:00:d7:cd:f6:19:9e:78:32:4c:ad:14:d4:31:3d:18:c5:71:
         1c:00:1f:86:43:35:f4:55:dd:2c:64:21:12:b9:81:5d:99:3b:
         5b:e8:b5:6a:0f:2c:69:bf:64:4c:18:f6:7d:13:95:38:b0:93:
         06:6c:e4:cc:16:d7:6f:35:1f:12:3f:58:42:91:62:20:3a:d9:
         a0:44:a7:af:63:27:f2:46:e3:00:74:89:ea:36:ba:33:ba:b1:
         97:7a:1c:3a:6d:ed:1e:a2:80:4d:36:23:28:71:b0:9f:0f:61:
         84:7d:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 22:16:21 2025 by rpki-client