This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7E6C878CF9B11F0971E8981DAE4EC9C.roa
File: A7E6C878CF9B11F0971E8981DAE4EC9C.roa (raw, json)
Hash identifier: Lt7ws3ZQphHJr9t/7UIhaMbV2xzvLBSdCiJTlPTN4+c=
Subject key identifier: AC:72:D0:27:90:B0:11:0D:1D:57:F2:42:4E:C1:C4:EF:98:06:6D:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018B11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7E6C878CF9B11F0971E8981DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 16:26:30 +0000
ROA not before: Tue 02 Dec 2025 16:26:21 +0000
ROA not after: Sat 18 Nov 2028 16:26:21 +0000
asID: 17561
IP address blocks: 156.228.220.0/24 maxlen: 24
156.228.221.0/24 maxlen: 24
156.228.222.0/24 maxlen: 24
156.228.223.0/24 maxlen: 24
156.228.224.0/24 maxlen: 24
156.228.225.0/24 maxlen: 24
156.228.226.0/24 maxlen: 24
156.228.227.0/24 maxlen: 24
156.228.228.0/24 maxlen: 24
156.228.229.0/24 maxlen: 24
156.228.230.0/24 maxlen: 24
156.228.231.0/24 maxlen: 24
156.228.232.0/24 maxlen: 24
156.228.233.0/24 maxlen: 24
156.228.234.0/24 maxlen: 24
156.228.235.0/24 maxlen: 24
156.228.236.0/24 maxlen: 24
156.228.237.0/24 maxlen: 24
156.228.238.0/24 maxlen: 24
156.228.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101137 (0x18b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 2 16:26:21 2025 GMT
Not After : Nov 18 16:26:21 2028 GMT
Subject: CN=692f1335-485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:02:aa:0e:5d:6d:a0:dd:14:25:3f:c3:68:
a7:43:9f:bd:40:65:05:27:0b:03:ab:1a:37:a4:32:
c0:82:5f:4a:35:29:88:ac:8c:36:41:10:04:c9:2e:
a5:e7:be:82:02:27:00:7f:ef:a1:b2:a2:8a:ec:be:
ec:ff:7e:58:00:74:7b:a7:24:03:73:01:fe:71:dc:
72:53:e3:e9:ca:66:19:62:6c:14:6d:c5:4d:45:ca:
cd:80:52:af:ea:71:43:a6:5e:b6:ed:30:9f:c6:0e:
77:a9:fe:04:0c:a8:3e:2c:0a:ad:ff:5e:e9:94:01:
62:14:ff:68:de:81:2d:d2:f4:a8:92:34:a2:93:fc:
b5:ea:85:dc:88:a6:71:85:ec:a8:73:8f:72:2d:4d:
78:88:05:ad:c5:24:cb:a8:43:f6:ce:8d:b3:b1:79:
ad:7a:19:a9:5e:6e:94:84:15:36:36:1e:07:cc:f5:
18:da:ac:9a:91:ad:c0:df:71:ad:a2:d3:ff:e3:32:
74:1a:53:a2:da:21:a9:cd:77:56:c1:47:2f:d1:7e:
8d:51:92:83:3e:aa:4a:55:8a:7b:ae:1b:0d:b7:05:
20:07:d0:46:10:23:44:c0:2b:5e:f6:ca:14:6e:58:
a5:80:28:1d:f6:5c:30:39:8e:49:df:1a:90:3b:3b:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:72:D0:27:90:B0:11:0D:1D:57:F2:42:4E:C1:C4:EF:98:06:6D:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7E6C878CF9B11F0971E8981DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.220.0-156.228.238.255
156.228.240.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e3:35:4e:93:a3:d1:ee:e4:80:03:fa:cc:dd:df:5e:bf:fa:
d0:d2:55:75:b9:2b:41:fa:71:ec:47:ec:70:b6:96:60:0c:60:
e4:6d:b9:2c:72:35:2c:ab:10:5c:24:c7:94:c5:90:db:b1:c4:
b2:48:06:05:71:61:e1:cc:dc:f6:c1:26:3e:79:ae:5f:da:8c:
29:af:a4:71:e1:54:67:76:07:18:c7:33:19:2a:43:f0:02:aa:
e5:11:25:d5:29:3a:23:b1:3c:29:ad:98:fc:22:4b:d5:c6:37:
61:0d:ee:a7:a8:a5:24:a8:b5:b8:31:a9:e2:8b:e9:ff:68:a6:
5d:eb:7b:d6:0f:ad:6f:a9:87:87:b5:78:7b:5c:38:80:81:e4:
3f:57:82:9f:11:16:1d:f4:97:45:b6:41:1a:b3:8a:a4:33:21:
3a:c7:1c:20:b9:11:bc:83:15:f0:28:16:27:e0:26:dd:e0:c5:
3d:9c:75:7d:fd:19:05:d9:7f:dc:c6:ad:8b:ea:29:f3:ba:8d:
f5:13:03:0d:ac:2b:fa:28:5f:58:54:d0:d6:b0:c8:20:c3:92:
f5:9b:c8:66:d5:77:7e:b1:89:70:8f:99:0c:22:6e:d3:e9:87:
83:e2:b5:78:00:77:be:90:2a:11:c2:34:b4:77:26:3c:84:d2:
ad:4c:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:56 2025 by rpki-client