This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa
File: 8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa (raw, json)
Hash identifier: HXW4lINcnDmBkRqsJ8uJM0WBVc4NTTUgLMUDfjQsrhk=
Subject key identifier: 50:AF:73:2D:EC:4F:56:92:77:15:81:5A:50:A0:03:80:31:45:46:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01884E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa
Signing time: Tue 18 Nov 2025 13:50:29 +0000
ROA not before: Tue 18 Nov 2025 13:50:24 +0000
ROA not after: Tue 30 Dec 2025 13:50:24 +0000
asID: 62468
IP address blocks: 45.204.221.0/24 maxlen: 24
45.204.222.0/24 maxlen: 24
45.204.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100430 (0x1884e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 18 13:50:24 2025 GMT
Not After : Dec 30 13:50:24 2025 GMT
Subject: CN=691c79a5-f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:cd:66:e4:d6:c4:a4:12:fc:9c:cc:b1:4c:
31:2d:19:3a:00:03:b3:db:ad:34:55:4b:71:3d:02:
c2:ed:ed:2a:b0:18:d8:3c:be:95:6f:d8:93:86:bd:
23:7c:8a:6b:19:a4:9d:1d:2e:a9:33:4d:a0:ed:88:
50:7f:2e:10:a4:11:d9:18:a9:91:c7:fa:1c:47:fb:
56:4b:4e:ad:d8:30:d1:cc:b2:2d:10:8e:f6:77:ec:
09:7b:20:bb:49:4f:9a:75:de:aa:fc:2b:0d:b2:43:
a7:a6:b5:d9:73:01:2a:53:52:f8:74:e4:4e:de:7c:
5d:a1:08:f3:77:67:b9:87:50:4d:12:16:4c:e1:53:
f5:30:9a:8c:5d:15:b4:85:14:54:cf:46:09:ba:e8:
b3:c0:57:4b:bd:af:b2:96:51:25:6a:d5:18:36:7a:
f8:65:87:5e:04:41:d5:58:33:75:b5:c1:b2:21:30:
5e:5e:bc:a0:1b:e0:f7:64:34:13:23:14:5b:7f:63:
d8:d2:fe:ba:9f:4b:d9:2c:48:e1:f5:0b:b6:6d:67:
ac:77:87:29:c0:a0:07:05:be:21:99:51:7c:ff:b1:
63:8d:d1:37:9c:42:b7:68:53:c2:f7:91:30:d6:30:
d2:e9:7e:3d:c2:42:4f:02:c0:02:36:bf:b8:88:7a:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:73:2D:EC:4F:56:92:77:15:81:5A:50:A0:03:80:31:45:46:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.221.0-45.204.223.255
Signature Algorithm: sha256WithRSAEncryption
40:f8:26:69:27:c8:84:4d:3e:39:0c:15:f0:20:e8:d0:d7:95:
d9:d7:ab:c5:74:fe:2f:ad:40:7c:c7:03:71:57:94:cc:87:7a:
2e:cf:06:f3:59:c2:94:35:d9:15:09:25:38:dc:6d:7f:b9:29:
a0:e3:b9:68:34:e1:b2:47:5f:52:c7:8f:b7:fb:29:30:8c:17:
58:5d:3a:ee:bc:93:3f:0a:b4:42:37:4b:24:4f:27:50:bd:c4:
29:4e:e2:87:2f:ab:3a:77:e0:69:da:77:f0:c1:35:2e:1a:f1:
71:36:d3:da:9a:cf:01:c1:6e:9d:cf:27:a7:81:ad:cf:7e:2e:
35:54:32:1e:96:94:c2:2c:81:1a:1a:10:cf:76:f3:e0:46:29:
4f:d3:83:09:8a:c6:62:da:f9:32:48:78:7f:0f:ba:54:7e:da:
73:53:9c:2c:d2:82:9d:8d:6c:47:d8:1b:8e:fa:fa:8a:78:fe:
c6:1c:8f:46:83:89:a1:95:9e:29:fa:20:d1:3e:c1:03:c0:36:
8b:41:12:7f:01:d2:1a:0e:4c:b8:a0:d0:b7:49:e1:96:78:74:
e6:34:f3:71:cc:29:da:35:a8:db:34:3b:9e:28:71:52:af:76:
b2:73:da:7e:74:59:e0:08:7d:45:f3:39:b9:0a:4b:bb:8f:e0:
41:1b:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:02 2025 by rpki-client