This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5A7A7B4BFF611F08AF8CE8DDAE4EC9C.roa
File:                     D5A7A7B4BFF611F08AF8CE8DDAE4EC9C.roa (raw, json)
Hash identifier:          eqDs+f7r8O8BnP98nihRGkDlCsHN32e1qA+4qI10ZJE=
Subject key identifier:   D2:4F:33:DB:AC:DD:7A:EF:E7:83:E7:D1:55:F8:B7:07:3A:76:EC:AC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018714
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5A7A7B4BFF611F08AF8CE8DDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 18:38:54 +0000
ROA not before:           Wed 12 Nov 2025 18:38:43 +0000
ROA not after:            Mon 18 May 2026 18:38:43 +0000
asID:                     400619
IP address blocks:        156.224.16.0/23 maxlen: 24
                          156.224.18.0/23 maxlen: 24
                          156.224.20.0/22 maxlen: 24
                          156.224.24.0/22 maxlen: 24
                          156.224.28.0/23 maxlen: 24
                          156.224.30.0/23 maxlen: 24
                          156.224.63.0/24 maxlen: 24
                          156.235.96.0/21 maxlen: 24
                          156.235.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100116 (0x18714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 18:38:43 2025 GMT
            Not After : May 18 18:38:43 2026 GMT
        Subject: CN=6914d43e-0b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:5f:a7:c6:c0:09:dc:7e:58:6c:9f:84:c3:
                    b0:b9:15:3a:5a:dc:0d:0b:fe:e0:ab:cd:ac:b9:40:
                    c3:06:69:68:4e:5b:f4:84:79:ed:f0:66:5c:67:c6:
                    9a:ce:52:79:16:14:45:30:84:98:8b:18:13:37:b7:
                    94:23:22:20:66:94:16:f4:05:db:7b:06:56:61:c5:
                    61:8c:b7:45:73:31:88:ab:db:20:94:b9:cb:52:a3:
                    97:69:20:f0:d1:0b:ed:8d:4a:f2:77:8d:a4:5d:77:
                    86:a4:b2:b5:e1:c0:d6:05:c5:01:de:03:85:93:8a:
                    9e:80:0d:c5:44:2a:31:7d:48:0d:96:ad:64:ec:37:
                    87:3b:5b:36:10:4c:c8:43:7e:dc:ab:4c:8f:67:ab:
                    9a:b0:87:82:8a:89:46:10:bb:bc:78:f8:c1:9d:b3:
                    af:e5:d7:3c:7c:61:bf:13:8f:32:82:39:2a:b8:49:
                    f9:81:b1:b5:04:73:23:65:3b:54:8a:d4:56:65:8c:
                    3e:3f:8d:78:f3:60:79:5c:b1:53:1c:f6:99:94:d3:
                    3e:2e:e0:f5:e5:ec:de:77:a6:3d:18:9d:6b:b2:0e:
                    77:7c:33:58:98:3f:23:37:ff:e3:4a:bb:31:d9:76:
                    3b:04:9f:b0:5d:1f:f6:ac:cc:22:15:3e:8b:ca:1c:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4F:33:DB:AC:DD:7A:EF:E7:83:E7:D1:55:F8:B7:07:3A:76:EC:AC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5A7A7B4BFF611F08AF8CE8DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.16.0/20
                  156.224.63.0/24
                  156.235.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:14:2a:31:8a:9d:c5:b7:a7:4a:8f:8e:ae:40:30:f5:ba:
         f0:5b:d3:f2:85:bd:01:36:bd:9b:59:2e:69:46:c3:cd:b6:c6:
         ff:d0:26:8f:91:3d:14:1c:de:89:c7:b7:00:06:b4:97:20:1f:
         b3:c1:21:7f:04:6f:c2:c2:a2:29:ee:76:9b:b0:38:d1:89:a2:
         fd:68:2b:c3:55:29:d9:37:c2:6e:aa:17:34:ee:a8:b3:d3:3d:
         e4:a0:81:d5:f3:75:13:5c:82:c1:8e:e5:a2:7b:6e:23:c5:69:
         07:a5:ae:31:12:ac:b6:7e:b4:87:e6:f4:33:f4:0b:b6:bb:c2:
         20:bc:e6:81:8e:0a:78:bc:df:dd:f4:80:6e:5f:08:90:9c:33:
         10:52:89:a0:c7:34:b9:a6:f8:7e:4f:5c:3d:db:9c:e1:f1:f9:
         15:c1:6b:f1:92:01:31:2b:e1:9b:91:04:09:e4:8c:bd:63:88:
         85:a9:b4:e2:2e:ac:a9:88:e3:35:78:86:48:d5:2f:bd:5b:28:
         da:8c:0a:12:27:34:dc:9b:5e:48:cc:e8:b5:77:8a:63:17:04:
         f3:56:a6:8c:4b:b0:d0:8f:f1:5b:59:b1:37:1b:43:bd:e7:d1:
         f2:93:9e:ad:5f:9c:cf:4d:8a:63:bf:69:6b:b5:7e:3e:bc:2b:
         74:85:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:59 2025 by rpki-client