This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ABA0A0ACC3C11F096CB8CE7DAE4EC9C.roa
File:                     4ABA0A0ACC3C11F096CB8CE7DAE4EC9C.roa (raw, json)
Hash identifier:          6Fqja6JfoZDd8gb7KnU/q+q/5aysu3GwmoUlnzsRuHs=
Subject key identifier:   8B:01:A3:D1:F8:4E:B8:02:D3:7B:87:79:F8:14:1C:41:0E:C1:4A:7F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ABA0A0ACC3C11F096CB8CE7DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 09:26:18 +0000
ROA not before:           Fri 28 Nov 2025 09:26:13 +0000
ROA not after:            Sun 28 Dec 2025 09:26:13 +0000
asID:                     48031
IP address blocks:        45.200.181.0/24 maxlen: 24
                          45.200.182.0/24 maxlen: 24
                          45.200.183.0/24 maxlen: 24
                          45.200.184.0/24 maxlen: 24
                          45.200.185.0/24 maxlen: 24
                          45.200.186.0/24 maxlen: 24
                          45.200.187.0/24 maxlen: 24
                          45.200.188.0/24 maxlen: 24
                          45.200.189.0/24 maxlen: 24
                          45.200.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100925 (0x18a3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 28 09:26:13 2025 GMT
            Not After : Dec 28 09:26:13 2025 GMT
        Subject: CN=69296ab9-9cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:f9:54:ef:43:5b:e0:c1:fc:70:5d:fa:89:
                    45:4a:0c:56:b8:9b:8c:19:0b:15:40:58:de:e5:9a:
                    c6:36:76:b4:4f:cd:ea:d5:00:af:3d:9d:2e:2e:2b:
                    99:0f:43:0d:4d:bd:22:56:00:95:9e:af:03:05:9e:
                    7e:13:ad:f7:44:78:53:88:63:05:fa:eb:7e:f1:29:
                    7d:f1:16:9f:09:fa:b8:03:a9:5b:69:2b:fe:3a:50:
                    2f:7d:1f:15:7b:c1:33:31:95:1f:f5:d6:03:3a:be:
                    4b:5c:90:ed:98:1d:e7:f3:c6:69:d2:f5:15:d3:37:
                    8c:4d:80:6e:d8:e7:94:53:71:bc:91:d8:fb:09:34:
                    4a:70:cb:96:64:dd:c1:3b:35:7c:24:79:30:93:f1:
                    37:74:5d:e1:68:9c:51:66:a2:01:ba:4e:61:24:ff:
                    6b:78:b6:10:d2:e8:d9:da:0c:8a:8a:0d:5b:eb:8c:
                    3a:90:01:5b:45:ac:29:df:00:51:a3:6a:6b:b4:02:
                    bd:6e:3c:8b:f2:5d:e4:8c:d5:e3:4b:e9:bb:cd:55:
                    2b:29:df:62:18:7f:78:78:16:df:9a:6a:fd:40:90:
                    64:cf:0f:9b:1f:92:34:80:3e:3f:c5:d9:52:6d:b3:
                    3a:bd:dd:16:c7:a5:36:67:f0:c5:e5:1c:b2:60:4e:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:A3:D1:F8:4E:B8:02:D3:7B:87:79:F8:14:1C:41:0E:C1:4A:7F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ABA0A0ACC3C11F096CB8CE7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.181.0-45.200.190.255

    Signature Algorithm: sha256WithRSAEncryption
         65:37:d8:ed:d7:81:5e:ee:19:b0:b2:59:6e:f9:bf:0b:f4:c6:
         81:39:b4:56:b8:44:18:15:b2:c8:54:92:5d:fe:3c:4e:b7:2b:
         f9:d8:1f:e7:e3:ea:28:fa:17:4f:cc:0b:12:ec:fa:07:08:9d:
         b4:27:e8:b3:06:fc:cc:1c:ec:9f:89:6c:09:5b:d9:86:db:7d:
         ca:c9:17:34:d9:0c:fa:01:d0:f3:93:34:11:da:4b:08:3f:27:
         7d:a4:ae:f1:de:87:1e:5b:18:29:d0:ba:a2:45:55:cc:7f:63:
         bc:3c:b8:30:79:52:b4:04:70:63:ee:45:d0:58:46:11:c1:ae:
         f3:7d:3b:ae:47:a0:b8:ec:68:cf:22:a1:76:92:06:8f:b7:30:
         bc:58:29:73:42:00:39:27:30:ea:8b:05:21:ae:df:65:d2:ce:
         61:85:cd:cb:aa:6f:12:08:5a:b7:47:44:22:bb:8d:69:48:9a:
         af:a9:72:a4:4e:4e:1b:3f:13:83:98:b6:ec:f4:94:18:5c:22:
         67:d7:37:bf:4a:12:b9:a2:a6:8b:fa:41:e5:56:a9:c6:1b:a3:
         c7:9b:8e:32:f9:87:d0:9b:46:cf:29:ea:51:14:06:30:8f:6f:
         08:4d:34:b7:d7:8d:b2:b7:b6:54:5a:e2:71:09:a3:7f:44:ef:
         9e:c6:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:15 2025 by rpki-client