This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/045A2082E61711F0A8993CDADAE4EC9C.roa
File: 045A2082E61711F0A8993CDADAE4EC9C.roa (raw, json)
Hash identifier: OvFFwF4bXFNpspa1ECGKog7KlDAYGclRhTW2mLPl1WM=
Subject key identifier: 3A:63:BE:1D:5D:55:4C:E1:F6:5E:CA:17:CE:A4:5D:EB:20:72:E9:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019320
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/045A2082E61711F0A8993CDADAE4EC9C.roa
Signing time: Wed 31 Dec 2025 07:04:58 +0000
ROA not before: Wed 31 Dec 2025 07:04:53 +0000
ROA not after: Fri 30 Jan 2026 07:04:53 +0000
asID: 137547
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 19 Jan 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103200 (0x19320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 31 07:04:53 2025 GMT
Not After : Jan 30 07:04:53 2026 GMT
Subject: CN=6954cb1a-4811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:c6:f2:99:a8:92:05:eb:a7:ad:05:86:a7:
28:ac:7c:a8:92:d8:0a:7c:d5:09:6a:b2:00:83:f4:
87:e5:c1:c0:ae:d5:4f:20:b4:97:63:f1:81:65:1e:
1d:aa:b2:eb:93:a8:a3:78:4e:e3:86:03:ae:49:9c:
ff:f5:7e:c6:21:5d:6f:20:da:c5:db:93:13:ce:53:
f9:e5:9f:7a:1e:ab:05:89:bb:9d:8c:50:97:d6:8d:
94:bf:36:6c:48:16:0b:de:92:3e:3c:a2:a4:3c:0f:
91:f1:0b:09:54:14:e0:cb:f3:3f:60:9a:23:d1:ee:
66:31:4b:97:af:51:46:ac:78:6c:f4:dc:7a:6e:e5:
3a:9c:4e:81:73:f3:38:57:67:a6:ee:35:a3:d3:f5:
26:0f:de:e7:a9:5b:e7:bd:8d:a0:ec:f1:a5:59:57:
50:60:7d:1b:6e:7e:50:8f:4d:72:6d:e4:38:12:49:
c6:f3:4b:90:30:53:0d:07:77:02:0a:86:7f:fd:ac:
52:e4:bf:9f:97:50:52:9a:d3:8c:7f:b1:86:60:a4:
b3:7f:9c:e6:8c:a1:9b:34:21:70:5d:06:6b:df:92:
51:66:0f:0f:6a:4b:c1:37:3d:13:bd:df:6d:34:07:
66:a2:a2:df:59:25:f5:50:d6:23:5a:f7:df:30:1c:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:63:BE:1D:5D:55:4C:E1:F6:5E:CA:17:CE:A4:5D:EB:20:72:E9:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/045A2082E61711F0A8993CDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
24:0a:59:ad:a1:be:86:b0:5e:2d:13:b3:4f:25:c3:1e:1d:08:
3e:3f:49:2c:2e:7c:a6:a3:cd:06:2b:4e:8c:80:9c:ea:43:98:
38:b2:bf:f8:6a:f2:3a:1e:33:a3:36:da:e7:5d:98:82:67:05:
15:28:29:8f:68:e1:ef:09:89:1d:4b:39:4d:ce:52:fa:a8:90:
a8:23:f0:5b:8f:e5:84:5c:4e:a6:d3:10:39:4f:64:db:e3:e0:
54:35:82:c1:86:9f:98:d3:6b:88:7a:c9:34:5a:4e:51:95:4c:
ac:19:f6:3f:60:a5:c3:d2:75:1c:15:a1:eb:f0:92:94:3c:94:
be:0f:60:56:66:93:ef:b7:bd:89:2d:05:a9:1f:3b:00:29:ff:
76:0a:86:be:a6:82:92:d9:1f:99:a3:d3:e5:c5:a6:ed:31:c6:
d6:19:56:c6:ee:a1:14:20:f0:b9:b8:9d:a1:ae:d1:7f:0d:7d:
a2:b4:35:de:bb:d1:ab:f3:a5:aa:59:5c:52:ee:da:69:88:6e:
d7:86:f5:f8:26:5e:03:36:9e:71:b7:ca:30:93:c0:2b:66:e2:
c6:72:c0:1a:84:8b:23:31:a5:21:6b:66:e6:56:84:b8:20:03:
11:e9:0b:af:c8:d1:3d:df:83:c3:54:2f:34:a4:97:89:d0:1f:
46:e8:29:f5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAZMgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjMxMDcwNDUzWhcNMjYwMTMwMDcwNDUzWjAYMRYw
FAYDVQQDEw02OTU0Y2IxYS00ODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1YLG8pmokgXrp60FhqcorHyoktgKfNUJarIAg/SH5cHArtVPILSXY/GB
ZR4dqrLrk6ijeE7jhgOuSZz/9X7GIV1vINrF25MTzlP55Z96HqsFibudjFCX1o2U
vzZsSBYL3pI+PKKkPA+R8QsJVBTgy/M/YJoj0e5mMUuXr1FGrHhs9Nx6buU6nE6B
c/M4V2em7jWj0/UmD97nqVvnvY2g7PGlWVdQYH0bbn5Qj01ybeQ4EknG80uQMFMN
B3cCCoZ//axS5L+fl1BSmtOMf7GGYKSzf5zmjKGbNCFwXQZr35JRZg8PakvBNz0T
vd9tNAdmoqLfWSX1UNYjWvffMBxr5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpj
vh1dVUzh9l7KF86kXesgcun7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDVBMjA4MkU2MTcxMUYwQTg5OTNDREFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDnPWAAwQDnPX4MA0GCSqGSIb3
DQEBCwUAA4IBAQAkClmtob6GsF4tE7NPJcMeHQg+P0ksLnymo80GK06MgJzqQ5g4
sr/4avI6HjOjNtrnXZiCZwUVKCmPaOHvCYkdSzlNzlL6qJCoI/Bbj+WEXE6m0xA5
T2Tb4+BUNYLBhp+Y02uIesk0Wk5RlUysGfY/YKXD0nUcFaHr8JKUPJS+D2BWZpPv
t72JLQWpHzsAKf92Coa+poKS2R+Zo9PlxabtMcbWGVbG7qEUIPC5uJ2hrtF/DX2i
tDXeu9Gr86WqWVxS7tppiG7XhvX4Jl4DNp5xt8owk8ArZuLGcsAahIsjMaUha2bm
VoS4IAMR6QuvyNE934PDVC80pJeJ0B9G6Cn1
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:12 2026 by rpki-client