This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AB3C21ACFB011F08A485B80DAE4EC9C.roa
File: 2AB3C21ACFB011F08A485B80DAE4EC9C.roa (raw, json)
Hash identifier: 9cXMxruzg/IRt0HBZvVIHm+gsUwt5GMOK1lMdy7Clgs=
Subject key identifier: 8B:3D:EE:6A:F1:BF:CD:FF:51:2E:77:62:B9:B8:68:8A:5D:38:60:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018B49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AB3C21ACFB011F08A485B80DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 18:53:19 +0000
ROA not before: Tue 02 Dec 2025 18:53:11 +0000
ROA not after: Sun 19 Nov 2028 18:53:11 +0000
asID: 17561
IP address blocks: 156.232.61.0/24 maxlen: 24
156.232.62.0/24 maxlen: 24
156.232.63.0/24 maxlen: 24
156.232.69.0/24 maxlen: 24
156.232.70.0/24 maxlen: 24
156.232.73.0/24 maxlen: 24
156.232.75.0/24 maxlen: 24
156.232.76.0/24 maxlen: 24
156.232.77.0/24 maxlen: 24
156.232.78.0/24 maxlen: 24
156.232.87.0/24 maxlen: 24
156.232.102.0/24 maxlen: 24
156.232.103.0/24 maxlen: 24
156.232.104.0/24 maxlen: 24
156.232.105.0/24 maxlen: 24
156.232.106.0/24 maxlen: 24
156.232.108.0/24 maxlen: 24
156.232.109.0/24 maxlen: 24
156.232.110.0/24 maxlen: 24
156.232.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101193 (0x18b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 2 18:53:11 2025 GMT
Not After : Nov 19 18:53:11 2028 GMT
Subject: CN=692f359f-e88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:f8:8c:c4:86:29:31:cd:07:fb:96:ce:f2:
18:4d:bc:96:4e:91:f3:24:0a:11:23:0b:91:0c:e6:
d8:50:ee:23:fa:74:81:a4:86:3c:1b:df:76:15:d0:
33:28:2d:84:68:44:9c:1e:c5:64:85:a5:dc:ef:2a:
0f:22:01:6e:66:83:da:1c:6b:c2:99:e8:ea:c8:bd:
79:9a:9f:76:3c:c9:44:49:d3:76:19:9e:33:58:ff:
55:0b:32:5d:fd:df:14:32:5e:01:a6:98:71:ee:80:
c1:19:0e:b3:83:b5:ad:30:35:cc:aa:3d:db:2b:ff:
a6:25:6a:4c:69:07:18:3a:31:21:1e:3e:50:14:11:
c9:53:60:ad:6f:cd:97:8a:b0:0a:0f:42:60:23:de:
c9:71:4f:fa:ac:f8:51:54:60:d1:5d:10:00:1d:cb:
88:7d:91:7c:f3:a2:48:d2:af:40:30:18:f1:d5:37:
6e:f5:74:14:bd:4c:e1:eb:9b:57:58:21:ad:c3:88:
61:4a:0a:38:86:fe:3e:92:16:e1:1f:f9:d4:21:17:
f0:96:e0:fd:c8:ce:9b:52:e7:2f:47:40:48:f3:79:
b9:d9:b1:86:8c:f0:57:f2:e5:97:3f:e7:a2:fc:c3:
9c:47:f7:eb:8f:10:16:76:ab:e7:92:f1:b5:17:98:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:EE:6A:F1:BF:CD:FF:51:2E:77:62:B9:B8:68:8A:5D:38:60:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AB3C21ACFB011F08A485B80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.61.0-156.232.63.255
156.232.69.0-156.232.70.255
156.232.73.0/24
156.232.75.0-156.232.78.255
156.232.87.0/24
156.232.102.0-156.232.106.255
156.232.108.0/22
Signature Algorithm: sha256WithRSAEncryption
81:17:a6:81:cc:0d:23:62:48:3a:3b:e2:29:6f:36:43:3e:21:
81:14:a1:21:4f:d3:35:1a:22:74:03:fb:b5:7a:0e:53:1b:f6:
54:65:4c:8f:04:6e:6d:4b:a6:36:18:d5:11:3f:15:74:8a:5a:
e6:4a:6f:f9:59:e3:22:61:f8:87:f6:a3:43:4c:00:e1:e5:fb:
ff:13:0b:d7:8f:eb:77:c3:17:2d:6f:ef:eb:e5:48:be:d4:14:
8d:eb:42:70:ed:86:db:01:0b:a3:5c:57:93:21:c9:4a:27:9a:
49:ff:5c:6e:83:2e:11:ac:aa:8e:2d:55:db:07:cd:a2:43:2e:
e4:84:24:8c:fa:b0:3b:db:92:d2:c3:ad:7a:83:fd:0e:4a:d8:
a7:2a:fd:d6:6e:19:9b:f2:87:77:79:5a:fd:41:9c:a8:6e:e8:
23:1e:41:93:e5:af:36:97:c1:af:cd:39:43:e3:1f:61:58:ec:
69:75:8a:4b:33:5e:ad:ce:ab:15:b9:1d:10:dd:58:16:90:f2:
35:35:be:29:14:1b:cf:bd:07:b9:df:37:99:58:1c:c7:92:d0:
8e:09:50:12:bc:3b:00:ab:6f:86:ed:48:af:5a:b6:51:2a:e6:
11:17:8d:b0:ef:ae:bc:10:00:f3:7d:2e:01:02:37:3d:da:c1:
89:25:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:04 2025 by rpki-client