This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5989D020EBEE11F087FFC9C4DAE4EC9C.roa
File: 5989D020EBEE11F087FFC9C4DAE4EC9C.roa (raw, json)
Hash identifier: b9E+FfQKzB9PvYOBEwJ4cTmEtJrIvUA44vMLgcxodPM=
Subject key identifier: 29:29:EF:3E:BD:51:92:30:43:EB:65:BD:9F:6D:F6:F9:5B:B9:92:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01954F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5989D020EBEE11F087FFC9C4DAE4EC9C.roa
Signing time: Wed 07 Jan 2026 17:28:59 +0000
ROA not before: Wed 07 Jan 2026 17:28:54 +0000
ROA not after: Tue 27 Jan 2026 17:28:54 +0000
asID: 63139
IP address blocks: 156.227.200.0/24 maxlen: 24
156.227.201.0/24 maxlen: 24
156.227.202.0/24 maxlen: 24
156.227.220.0/22 maxlen: 24
156.227.224.0/23 maxlen: 24
156.227.226.0/23 maxlen: 24
156.227.228.0/23 maxlen: 24
156.227.230.0/23 maxlen: 24
156.227.252.0/22 maxlen: 24
156.229.2.0/23 maxlen: 24
156.229.29.0/24 maxlen: 24
156.229.30.0/23 maxlen: 24
156.229.40.0/23 maxlen: 24
156.229.42.0/24 maxlen: 24
156.229.43.0/24 maxlen: 24
156.229.44.0/23 maxlen: 24
156.229.46.0/24 maxlen: 24
156.229.49.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 19 Jan 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103759 (0x1954f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 17:28:54 2026 GMT
Not After : Jan 27 17:28:54 2026 GMT
Subject: CN=695e97db-1690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:30:80:32:1a:6d:99:37:e1:b6:a9:1e:e6:
29:71:dc:d8:6e:31:3a:66:8c:a3:92:76:4e:ca:e6:
4a:6f:f6:e2:14:67:3d:b8:52:b5:eb:4f:8c:9a:2e:
8e:e7:e1:70:54:89:e6:ac:d6:23:e5:5d:91:e5:25:
07:7d:4f:81:a0:5e:30:2b:5e:ee:ff:2d:60:ad:b1:
e8:18:d3:2a:a9:cc:88:ba:d2:5c:33:1b:6b:d9:04:
9e:fc:f9:7e:bc:7f:4a:35:c6:d5:86:ec:be:56:c5:
60:1c:7b:61:b0:d6:56:a5:6f:15:2e:7f:5d:e7:92:
15:a4:68:35:34:61:f7:e7:60:58:71:dc:23:f0:3b:
4c:e3:13:29:a0:1e:97:5b:47:c1:01:d7:d3:ad:1b:
9b:91:06:31:57:8f:c3:06:8c:e8:16:29:c5:ad:1b:
a1:b1:a6:66:a8:8c:cd:7b:eb:e4:e5:37:63:fb:c7:
8d:f2:62:7b:7c:ba:8d:19:2f:ac:5c:d8:00:38:24:
02:94:14:56:db:ab:9f:d8:ec:a4:93:e3:05:f1:ef:
bb:14:ed:e6:49:3a:87:3a:85:39:a2:23:2d:4b:81:
6b:9e:f0:03:3a:97:0f:c5:88:0d:e3:07:11:3b:07:
f8:b0:9f:ef:dc:96:d8:72:e2:5f:8f:ec:44:9d:6d:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:EF:3E:BD:51:92:30:43:EB:65:BD:9F:6D:F6:F9:5B:B9:92:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5989D020EBEE11F087FFC9C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0-156.227.202.255
156.227.220.0-156.227.231.255
156.227.252.0/22
156.229.2.0/23
156.229.29.0-156.229.31.255
156.229.40.0-156.229.46.255
156.229.49.0/24
156.229.51.0/24
156.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
21:af:32:d1:de:7d:95:1a:b1:f6:60:80:8c:01:c5:80:9e:97:
ac:e2:ff:4f:76:ce:15:0d:1d:c4:35:55:8d:1b:fb:85:5a:61:
78:64:ae:56:78:48:32:1b:b5:6d:d6:da:d7:77:3f:dd:b4:10:
bd:bb:0b:5d:8a:cc:fc:fc:ac:50:52:00:13:40:48:b8:94:9a:
33:95:a2:b2:ed:e3:68:70:89:f8:58:2e:0c:c4:85:cb:98:73:
cc:fa:98:1a:64:8b:63:58:cc:f4:19:c9:23:03:d6:33:c4:7b:
80:8b:71:2e:bf:c5:73:15:ad:e9:41:31:43:74:84:04:bf:37:
e8:ce:a3:49:e7:9d:e6:8d:a5:2a:ac:0a:64:fd:fe:12:5f:6a:
94:62:9e:90:18:01:9c:29:5b:40:0b:6f:ba:b6:60:23:2c:16:
50:ba:e7:95:b6:79:c1:06:ba:48:bf:f1:3b:b5:24:80:f8:0a:
c4:26:67:c2:6d:08:85:e2:c0:2c:ca:20:55:0c:65:f0:a5:75:
fb:eb:60:78:ac:ea:74:87:be:fe:4f:ca:63:ee:c8:42:9c:26:
61:37:14:c1:74:b9:f5:2f:c6:14:a8:ad:60:93:eb:35:01:6a:
4b:01:95:7a:cf:14:33:77:5b:89:b4:aa:2d:d7:c9:d1:fd:f2:
cc:46:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:34 2026 by rpki-client