This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa
File:                     02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa (raw, json)
Hash identifier:          6Mw6IJOKCFiOFJKPzw6NDpNLOWvwX8+ywwAHH8ia5xU=
Subject key identifier:   61:64:C5:B2:6A:4E:30:20:8B:D3:48:7E:01:C8:AA:D2:1D:2A:69:1A
Certificate issuer:       /CN=F362FA5FAF/serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
Certificate serial:       06
Authority key identifier: A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 13:06:16 +0000
ROA not before:           Wed 10 Dec 2025 13:06:10 +0000
ROA not after:            Thu 10 Dec 2043 13:06:10 +0000
asID:                     329670
IP address blocks:        102.203.236.0/22 maxlen: 24
                          2c0f:4220::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 05:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FA5FAF, serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
        Validity
            Not Before: Dec 10 13:06:10 2025 GMT
            Not After : Dec 10 13:06:10 2043 GMT
        Subject: CN=69397048-3030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:0e:7f:df:4d:07:81:4e:1a:e7:82:23:3f:
                    74:06:a1:b6:47:8d:58:86:dd:5c:7c:ee:21:c5:28:
                    72:3e:9f:34:c3:03:fd:25:8f:5e:ba:dd:56:49:70:
                    e3:b5:61:ef:29:80:ca:3a:23:38:27:89:47:1b:3a:
                    ee:9e:03:8f:19:c5:55:54:d7:f9:0c:c4:f1:d3:46:
                    5a:84:54:d4:ec:f2:e4:4a:bc:52:6d:85:2a:3e:a9:
                    da:6d:ca:01:31:b5:8d:fe:3e:fa:35:0b:95:6a:ab:
                    5a:70:17:16:92:03:e3:36:db:ed:07:25:fc:71:7e:
                    ef:0e:7a:70:69:bf:99:c5:d3:86:d1:ed:61:ef:b3:
                    46:40:c0:0e:37:ec:3f:34:b4:f0:75:f1:5f:dc:c2:
                    81:da:eb:fc:10:cf:d4:a6:a3:3d:57:d1:77:e6:56:
                    0c:b7:d0:7e:c1:94:4e:e8:20:33:6a:75:cb:57:dd:
                    99:20:b4:df:c7:3e:bc:11:fa:63:02:ca:77:00:77:
                    b3:02:e1:ab:aa:24:3e:b1:86:8a:f0:27:76:c8:01:
                    dd:c0:db:9c:a9:32:04:6f:85:d1:96:9e:d8:f5:4e:
                    83:a2:70:56:8c:49:57:0c:c1:1f:37:40:0e:ea:e8:
                    3a:69:ed:56:2a:0f:92:54:e0:35:e7:42:d3:16:b7:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:64:C5:B2:6A:4E:30:20:8B:D3:48:7E:01:C8:AA:D2:1D:2A:69:1A
            X509v3 Authority Key Identifier:
                keyid:A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/02DBFF9AD5C911F0BEEFA9C1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.236.0/22
                IPv6:
                  2c0f:4220::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:91:5c:10:97:fc:ef:39:59:fa:36:c3:c7:5a:f0:f7:15:5e:
         a5:a1:3d:17:a4:6b:63:be:23:ee:9e:60:22:c8:c6:9a:60:93:
         e9:0a:15:5e:3c:58:dc:bb:7f:e4:f8:99:8e:e8:65:d1:68:a1:
         f6:85:28:99:f7:9e:c1:51:77:42:4f:c6:95:2c:34:45:5c:68:
         d3:76:c0:f9:d0:a0:50:e8:ce:6a:21:83:23:b4:50:ab:4b:f4:
         b6:bc:f4:8d:70:b3:c8:75:1a:d6:c0:81:5d:cb:bf:a2:de:a9:
         92:ed:eb:01:e8:46:19:fa:ae:97:04:32:3c:18:37:ad:fc:35:
         3b:48:1f:d3:1b:c4:8c:d2:8c:a6:7c:12:0e:cc:03:43:c6:2f:
         e5:3b:7b:d8:09:f7:de:e9:fe:e2:d2:32:f4:e9:5a:ac:c1:a4:
         9c:26:79:b3:f4:2d:fc:5b:0b:87:0f:37:60:84:15:a4:57:ee:
         2a:4a:f3:62:9a:f8:f6:32:4c:91:50:56:32:7c:39:c3:d7:38:
         da:5e:86:1e:09:0a:b4:a6:53:28:52:c1:d2:0b:07:f4:c0:c8:
         61:11:1e:33:9b:f9:68:cf:e6:9d:8d:f8:97:1b:28:4d:bc:f3:
         95:c0:6e:10:e0:3d:d3:3e:80:d5:4d:f4:b1:ff:9c:8e:c3:e6:
         a4:22:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:36:38 2025 by rpki-client