This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDCB5912BF1D11F0815148B5DAE4EC9C.roa
File:                     BDCB5912BF1D11F0815148B5DAE4EC9C.roa (raw, json)
Hash identifier:          QVArNZF50BtDRLrEnLRiSLvp770bjD3I7citIhldpzI=
Subject key identifier:   FC:16:23:BB:49:6D:0C:C4:1A:B3:9F:25:D1:1D:A0:EA:75:AB:48:B8
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       166A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDCB5912BF1D11F0815148B5DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 16:44:51 +0000
ROA not before:           Tue 11 Nov 2025 16:44:46 +0000
ROA not after:            Thu 11 Nov 2027 16:44:46 +0000
asID:                     7029
IP address blocks:        102.129.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Nov 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5738 (0x166a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov 11 16:44:46 2025 GMT
            Not After : Nov 11 16:44:46 2027 GMT
        Subject: CN=69136803-a4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:04:5e:54:08:8a:51:74:b7:dc:a4:c8:75:
                    19:06:2a:ea:d6:6f:b6:ec:9f:b5:b6:12:5a:c4:7c:
                    1c:19:67:bb:65:0a:38:b8:91:d6:a4:30:29:f5:b7:
                    50:9f:77:38:d9:e0:c7:e6:ec:bc:37:79:a8:da:ae:
                    0c:74:38:8d:a7:c6:f7:f2:ef:07:b2:7c:c4:d3:9c:
                    57:26:8a:bd:af:c7:ab:81:39:7a:3c:31:37:4b:b4:
                    a2:3a:81:be:d9:d5:99:ff:34:ea:a4:7b:c6:61:5a:
                    9e:cc:56:3f:da:f4:a8:9d:5c:8f:0c:b8:7d:75:8f:
                    f0:94:3c:8f:e9:ea:84:84:74:53:e3:49:f5:8a:8b:
                    eb:d6:51:55:1b:3e:28:d6:e2:d4:b7:45:41:7b:b4:
                    19:a2:94:f2:95:48:21:12:e1:21:b7:79:e1:f2:e7:
                    ae:58:72:71:d6:66:5c:f4:a3:5f:eb:8c:ba:13:a8:
                    bb:38:e4:66:b8:f3:af:fd:72:ad:40:aa:9c:40:9d:
                    06:99:05:9c:81:26:a2:1a:13:38:90:f6:0f:a6:37:
                    ca:a3:f5:ae:fa:86:9c:13:72:24:21:6e:15:a1:44:
                    54:d2:f6:60:8a:37:30:6a:3a:24:7c:47:e0:db:7e:
                    a1:58:26:de:79:f8:8a:ed:7b:27:e6:90:81:12:a5:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:16:23:BB:49:6D:0C:C4:1A:B3:9F:25:D1:1D:A0:EA:75:AB:48:B8
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BDCB5912BF1D11F0815148B5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a0:11:08:5c:a9:37:17:e0:b0:17:73:6c:0a:a5:30:63:2b:
         55:d3:a7:39:c5:b7:fa:22:31:27:18:d6:dc:59:87:62:b3:f7:
         cb:f0:8a:7d:8f:9d:5b:7b:6d:c4:0b:45:b1:e1:bd:a4:84:f9:
         06:79:20:7d:4a:52:e9:89:72:e8:34:78:68:48:f6:e8:54:94:
         7e:62:84:e2:f3:84:7c:6e:0a:d1:f2:5c:a2:d2:4d:88:6b:ac:
         24:c1:eb:44:f6:40:a3:ec:c9:54:10:11:45:0a:71:b7:98:dd:
         27:69:5e:d9:a2:40:e3:38:77:ad:b0:a7:42:a0:b8:44:72:9d:
         06:71:bf:9a:60:8d:a8:e1:13:a8:9d:dd:c0:69:a9:5f:16:b7:
         27:89:71:93:20:c2:87:32:d1:24:0e:cf:ac:df:6b:10:6c:63:
         ba:7e:3a:16:ed:e7:ae:5b:0f:83:9c:26:8b:9a:da:4a:a9:fa:
         78:2f:b3:f3:7c:1d:68:44:b7:ea:f7:4d:9d:c8:96:d6:e0:53:
         1c:ff:6a:7b:5b:15:ad:73:ca:8c:35:4a:12:f0:78:58:b5:3b:
         ca:5b:f6:ff:b4:88:7c:f8:ba:af:24:64:a1:e1:3e:26:88:53:
         31:f8:b3:77:c5:47:da:33:6f:f7:f3:08:2d:bb:cc:7a:4f:c3:
         e4:15:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 04:20:48 2025 by rpki-client