This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FDF3D32D05D11F094B698C5DAE4EC9C.roa
File: 9FDF3D32D05D11F094B698C5DAE4EC9C.roa (raw, json)
Hash identifier: DPLt7Y4L/sXmWKTX9ZfP5IubImUidxkLCbEJQW/5Fkg=
Subject key identifier: 72:D9:FC:3A:23:E2:88:67:83:A1:56:17:9F:AC:84:DB:CE:0D:D1:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018BC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FDF3D32D05D11F094B698C5DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 15:34:58 +0000
ROA not before: Wed 03 Dec 2025 15:34:50 +0000
ROA not after: Thu 01 Jan 2026 15:34:50 +0000
asID: 9304
IP address blocks: 156.245.136.0/23 maxlen: 24
156.245.152.0/22 maxlen: 24
156.245.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Dec 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101319 (0x18bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 3 15:34:50 2025 GMT
Not After : Jan 1 15:34:50 2026 GMT
Subject: CN=693058a2-ec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:22:6e:d5:35:62:84:c0:6d:12:a5:1c:45:
c4:34:08:f0:d0:b1:40:a9:24:d2:10:0f:13:95:3a:
e2:54:14:1d:59:a7:7d:8a:6d:23:e3:4b:40:91:10:
f2:2a:97:fa:85:84:4a:c6:45:8e:4c:08:07:94:9c:
9f:64:94:2b:92:8c:8c:8f:24:90:54:c8:91:31:ab:
54:f8:f3:4b:7e:8b:1f:55:37:22:91:2b:e9:0f:b2:
e6:c8:6c:28:93:ea:4c:da:cd:37:25:f4:3d:0e:6f:
27:bc:1f:42:9c:5a:6f:0a:61:98:f0:0b:39:d4:6d:
a0:e8:df:f0:6e:63:c4:a9:fb:f5:69:86:59:74:33:
c3:b9:96:04:78:a8:fc:3c:a8:86:be:f9:08:6c:f6:
56:9d:a0:ba:5d:7d:28:11:2b:fd:f2:45:34:7e:fc:
71:89:74:2a:77:02:6f:18:93:f1:ee:bc:89:d8:e4:
e9:b7:5f:10:8b:b2:67:fa:81:af:8c:6b:54:99:3b:
bf:7b:84:5e:b5:72:a3:cf:c6:d9:19:dc:9c:b7:27:
f3:8e:ae:3d:f9:3a:0c:c9:54:d2:3b:28:27:57:24:
79:e7:8d:a2:da:47:c7:33:99:f0:ed:b7:d0:35:38:
0b:01:02:e0:28:e2:03:0a:15:ce:92:5e:1e:79:4f:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:FC:3A:23:E2:88:67:83:A1:56:17:9F:AC:84:DB:CE:0D:D1:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FDF3D32D05D11F094B698C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.136.0/23
156.245.152.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:96:a5:08:31:ff:6f:9a:c2:4a:7f:84:95:81:a9:20:fe:d4:
62:94:d3:73:5b:3f:07:87:88:fd:cd:17:9c:35:a2:f6:72:08:
da:eb:a4:51:13:ce:5e:53:71:00:79:d9:df:6c:90:14:58:f3:
56:bd:27:8e:e0:21:cc:8f:59:96:c5:72:44:15:49:d1:d7:ab:
6f:ad:bb:13:91:bd:07:e4:79:2c:29:33:6f:b1:d7:ac:6d:3c:
49:d7:43:6f:51:d7:53:ff:d5:a5:61:e5:0f:d9:28:41:34:01:
b6:64:68:e2:42:66:6c:46:90:d0:bb:60:db:0a:67:37:5b:de:
2a:b2:bc:ca:a4:b0:81:31:5f:e8:42:f3:78:f0:18:17:bc:22:
ca:9c:39:41:49:e1:90:dd:f8:03:f1:4f:be:04:bb:17:07:ee:
b4:b6:46:0a:c4:ca:a7:83:24:91:c9:14:85:91:07:de:b7:70:
45:2c:4b:e0:1c:d1:7a:a4:55:fc:9c:e5:b4:a4:be:52:f3:84:
3b:f4:3e:1b:50:e6:80:ed:3e:7a:c6:4b:e1:f3:c9:ad:3b:88:
43:0b:47:ff:8b:30:d5:ad:91:69:0d:a5:86:1d:33:58:33:c0:
00:f0:6c:55:db:37:30:f0:e4:0d:ff:97:6e:02:d2:bf:67:d2:
a6:cb:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:21:33 2025 by rpki-client