This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42FCF60424D211F09D6095D2DAE4EC9C.roa
File:                     42FCF60424D211F09D6095D2DAE4EC9C.roa (raw, json)
Hash identifier:          /cflLq8jhy7qOwtkU+Z/DZ9bAgf1Is03gFO53CwYqxM=
Subject key identifier:   AB:4F:50:10:EC:E9:79:AE:2A:CF:6A:65:A1:0D:78:1B:5D:06:45:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017CC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42FCF60424D211F09D6095D2DAE4EC9C.roa
Signing time:             Tue 29 Apr 2025 08:16:34 +0000
ROA not before:           Tue 29 Apr 2025 08:16:29 +0000
ROA not after:            Wed 04 Jun 2025 08:16:29 +0000
asID:                     399195
IP address blocks:        154.193.112.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97477 (0x17cc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 29 08:16:29 2025 GMT
            Not After : Jun  4 08:16:29 2025 GMT
        Subject: CN=68108ae2-0037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:4f:41:d9:45:df:a4:6b:b7:cc:9a:96:97:
                    d4:86:84:bb:da:4d:4a:f9:91:d1:5f:53:29:29:b9:
                    b5:26:e4:ef:0d:4b:d7:42:b2:02:6b:23:d3:24:71:
                    f6:ed:67:40:ba:37:c5:62:47:b8:80:b2:77:69:1e:
                    71:be:f4:b7:61:e9:5e:cc:79:80:12:f6:64:fb:e3:
                    e3:a4:c9:33:ca:c6:2e:b4:f9:24:0f:0c:fc:d5:d5:
                    b5:61:c2:6f:c9:94:3f:04:bf:bb:60:78:6a:bf:4e:
                    71:5f:db:4a:68:94:c0:19:23:5a:73:2d:97:08:ad:
                    c8:8e:86:b2:8a:30:9f:e0:30:82:d9:ff:c9:0b:f2:
                    5b:2c:b5:5f:56:28:32:50:d3:44:f6:74:04:12:f5:
                    b9:f3:0a:b2:56:74:3e:f8:b1:20:f4:8e:55:17:47:
                    c6:b9:15:aa:c3:23:02:48:76:bf:f6:87:ca:84:a5:
                    5c:a8:54:26:47:a3:be:91:19:d9:69:4d:2f:3a:f0:
                    0c:ff:7d:dc:10:1d:e9:24:e5:db:a3:db:81:28:f6:
                    1d:5c:a4:9e:26:2a:15:fe:c5:47:63:1b:ab:8b:41:
                    97:dc:b1:62:f4:62:d6:dc:4c:0f:f9:cf:43:0b:9c:
                    a8:6b:98:d5:39:20:e5:66:d6:70:b5:aa:da:b8:fb:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4F:50:10:EC:E9:79:AE:2A:CF:6A:65:A1:0D:78:1B:5D:06:45:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42FCF60424D211F09D6095D2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:7d:db:72:46:ef:3c:c6:1f:d2:bd:19:87:8b:11:44:5c:02:
         94:2a:fe:79:26:96:9a:40:97:f1:99:da:69:22:70:c1:d7:35:
         ab:ff:24:0e:8c:98:5f:43:f0:90:a9:dd:60:cc:fd:49:63:82:
         db:ea:5d:de:4e:2b:35:e9:32:07:b8:9a:8f:44:3c:4f:38:36:
         19:46:8f:c3:5a:0e:6e:77:e1:5d:ec:20:0e:0a:dc:97:16:c7:
         1a:e1:25:44:90:fe:6f:68:6e:e1:d9:4f:44:dc:16:26:1f:c5:
         ec:7e:8e:2d:9c:12:80:bd:99:d8:6f:0f:d9:78:f3:55:ba:30:
         3b:50:80:1e:6f:0f:ad:9c:17:00:41:27:98:1f:54:47:8a:09:
         1b:3c:bd:f4:1b:2e:a5:b9:ab:e1:34:bc:02:03:16:a6:7c:ad:
         ef:9c:c2:4a:42:5f:30:c5:a4:35:e2:f9:ee:25:25:40:c7:ba:
         83:54:61:00:22:d2:de:87:e4:b9:23:fa:56:53:0e:25:07:1f:
         bd:16:ce:83:69:80:80:20:c9:fd:d8:bd:dc:75:a6:6d:2d:77:
         fa:9b:b1:4c:81:b7:09:c4:89:4c:02:b2:a2:dd:11:f4:10:e9:
         cc:ae:0d:d9:21:47:01:96:8d:33:24:ad:6c:1a:5d:ad:93:19:
         b6:77:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----