This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB01CDA92C711F09FB4CC97DAE4EC9C.roa
File:                     9DB01CDA92C711F09FB4CC97DAE4EC9C.roa (raw, json)
Hash identifier:          E8VOOM3UMCJdDAVNOcA++eCWIrWDK6J83Sto21hWzvQ=
Subject key identifier:   B8:EA:07:35:9F:D7:F6:01:54:F7:F0:13:60:EC:9D:D4:EE:BD:1A:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       017B5C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB01CDA92C711F09FB4CC97DAE4EC9C.roa
Signing time:             Tue 16 Sep 2025 06:37:29 +0000
ROA not before:           Tue 16 Sep 2025 06:37:22 +0000
ROA not after:            Thu 16 Oct 2025 06:37:22 +0000
asID:                     58879
IP address blocks:        156.255.2.0/24 maxlen: 24
                          156.255.3.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97116 (0x17b5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 06:37:22 2025 GMT
            Not After : Oct 16 06:37:22 2025 GMT
        Subject: CN=68c905a9-593a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:e0:bf:6d:c5:fb:db:e5:1b:6a:8a:81:17:
                    7e:ac:c6:eb:cc:90:61:d8:92:78:a8:46:72:83:fe:
                    a2:a3:5b:a6:d4:d6:fb:5c:88:c6:82:47:ac:3a:62:
                    4c:12:4a:dd:9b:1c:fa:e2:82:1e:22:ec:86:1e:33:
                    10:60:93:e5:fb:27:e9:40:36:bb:ad:00:56:cb:9c:
                    6c:19:f4:ae:d7:06:f9:73:08:00:de:2a:72:a3:3c:
                    4b:88:8a:c0:c2:74:aa:d0:24:90:0f:3e:8b:f2:92:
                    97:1a:4c:7a:2b:4a:ce:65:7d:97:05:5e:15:42:67:
                    f8:c4:92:8d:91:d7:5e:f1:b6:7c:63:27:31:b8:87:
                    ed:c7:91:db:ef:50:ec:5a:33:a1:3b:2a:83:a0:d1:
                    71:20:e7:d9:d0:ec:54:0d:e2:a1:0d:41:4f:b1:1f:
                    c4:10:4d:34:9d:ba:1a:29:f7:cf:1d:c7:ea:29:09:
                    4d:75:a8:a6:f6:c9:49:2c:69:e8:c7:52:4f:c6:5c:
                    3c:0c:53:c6:4e:88:74:2a:62:fa:16:dd:c2:fa:f5:
                    94:5d:15:93:2f:6b:3b:cf:c6:0e:09:fb:ae:c8:42:
                    95:50:98:65:cd:27:f3:82:9c:c7:77:c5:39:52:c6:
                    d7:ee:89:d0:28:f1:63:06:a7:9c:9a:94:40:37:fb:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EA:07:35:9F:D7:F6:01:54:F7:F0:13:60:EC:9D:D4:EE:BD:1A:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DB01CDA92C711F09FB4CC97DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:09:4b:02:b2:70:f4:7b:65:99:8f:a4:17:c8:0e:ad:17:
         23:12:ea:4d:52:d2:70:66:f7:09:6d:0a:a4:24:af:44:70:98:
         4e:9b:60:e9:9b:a5:c1:b1:54:1e:9b:94:92:8e:98:75:4a:82:
         f7:4c:25:1c:9d:4c:5a:3c:f8:35:a9:5a:82:d5:02:93:ce:3d:
         5f:24:3d:6b:52:37:10:20:90:71:88:28:b6:63:84:09:9f:43:
         e8:54:e8:fa:d6:16:0a:2d:49:e3:5f:20:b6:67:51:3f:26:93:
         0b:d2:8c:33:96:be:bd:d0:af:7c:88:6b:39:f6:c7:c5:69:e4:
         90:92:54:5b:a2:7b:d3:c3:dd:d1:33:90:a0:30:d0:d2:55:20:
         e5:8f:7a:4b:09:d4:30:8c:0f:08:88:e6:50:ea:12:84:1d:58:
         48:38:d1:61:d2:ec:37:d6:f4:03:31:4f:a4:8e:26:3b:bb:26:
         4e:a9:a0:7e:69:b5:1f:c6:bc:2e:39:7a:8c:5d:6d:1f:81:df:
         b7:4f:0f:b1:9e:b0:71:c6:e4:cf:f2:5b:01:be:17:f4:be:56:
         e3:a0:7e:3d:12:3d:c5:13:9d:67:14:c9:87:0b:f4:69:3e:53:
         f7:8b:14:21:db:f6:ce:04:5a:d3:ad:26:e9:cb:aa:8e:f8:63:
         5c:39:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----