This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37DB49ACF9011F0A58308BDDAE4EC9C.roa
File: B37DB49ACF9011F0A58308BDDAE4EC9C.roa (raw, json)
Hash identifier: VYvuGW7UOSGTlK3Egl/UNNHz9vUcX4jKtOwUzfFniuo=
Subject key identifier: ED:57:D1:B6:7D:A9:54:5B:46:BC:3D:0E:AC:62:75:B8:19:79:43:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018AF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37DB49ACF9011F0A58308BDDAE4EC9C.roa
Signing time: Tue 02 Dec 2025 15:08:05 +0000
ROA not before: Tue 02 Dec 2025 15:08:00 +0000
ROA not after: Sat 18 Nov 2028 15:08:00 +0000
asID: 17561
IP address blocks: 156.228.0.0/24 maxlen: 24
156.228.1.0/24 maxlen: 24
156.228.6.0/24 maxlen: 24
156.228.8.0/24 maxlen: 24
156.228.10.0/24 maxlen: 24
156.228.11.0/24 maxlen: 24
156.245.241.0/24 maxlen: 24
156.247.8.0/24 maxlen: 24
156.247.9.0/24 maxlen: 24
156.247.10.0/24 maxlen: 24
156.247.11.0/24 maxlen: 24
156.247.12.0/24 maxlen: 24
156.247.13.0/24 maxlen: 24
156.247.14.0/24 maxlen: 24
156.247.15.0/24 maxlen: 24
156.247.24.0/24 maxlen: 24
156.247.26.0/24 maxlen: 24
156.247.28.0/24 maxlen: 24
156.247.29.0/24 maxlen: 24
156.247.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101109 (0x18af5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 2 15:08:00 2025 GMT
Not After : Nov 18 15:08:00 2028 GMT
Subject: CN=692f00d4-dd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:67:5e:1a:94:20:21:62:df:81:3b:af:d2:
9d:61:89:ae:03:33:7a:c1:9a:73:55:9e:08:d9:2e:
8d:42:fa:cb:b4:d4:19:90:ba:80:c4:0f:d2:59:03:
e3:e9:9a:de:72:f2:8a:25:3f:22:b6:5f:4e:b5:1c:
0c:dc:f5:19:a8:36:a1:55:ae:97:4a:e7:3e:ae:1e:
af:0e:46:79:fa:7d:b3:17:02:66:9d:0d:6d:0d:30:
0e:6f:0f:fd:c6:f7:c0:25:09:b6:61:78:54:60:2d:
7e:f9:88:18:54:3c:69:ec:00:26:00:a8:57:9e:0d:
49:25:39:b0:b0:6d:87:8c:6a:7a:5b:d4:ec:12:20:
64:90:9a:34:b5:18:dc:86:25:a5:61:08:72:14:05:
27:77:6b:53:61:a6:84:3a:28:99:22:20:b4:1a:10:
ad:9b:ab:42:d5:bd:9d:1d:cf:03:d3:83:20:52:a4:
8b:b3:c3:ba:f6:ad:c4:7a:25:ed:d2:14:1e:92:cb:
58:55:61:5b:c7:23:fc:f8:29:f3:59:1f:16:e7:8a:
56:bb:38:b9:bb:dd:d3:c0:42:76:5c:94:49:00:18:
ef:08:60:c7:a7:7b:31:bb:45:5b:b9:12:b2:58:2e:
38:b2:6d:77:0b:bf:8b:26:15:58:cf:0e:7c:c1:54:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:D1:B6:7D:A9:54:5B:46:BC:3D:0E:AC:62:75:B8:19:79:43:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37DB49ACF9011F0A58308BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.0.0/23
156.228.6.0/24
156.228.8.0/24
156.228.10.0/23
156.245.241.0/24
156.247.8.0/21
156.247.24.0/24
156.247.26.0/24
156.247.28.0-156.247.30.255
Signature Algorithm: sha256WithRSAEncryption
78:e5:d1:e7:84:10:cc:18:a8:98:71:71:b6:c0:f1:58:36:b9:
09:4d:09:12:eb:b7:db:88:c5:21:dd:e0:eb:ae:4b:b5:9a:19:
a3:d2:93:b8:64:75:0c:55:01:a0:30:05:3f:37:f5:56:38:4d:
f5:d3:fa:55:e7:29:cc:84:1a:e8:6e:83:2c:6f:52:7d:66:59:
fd:5b:02:e4:a8:dc:d2:6f:da:19:79:cc:4c:14:8e:71:a3:d5:
1e:9d:90:44:3f:ca:bb:7d:b2:dc:37:38:8e:da:5a:e9:11:00:
38:15:84:fe:11:e6:d2:cc:e0:9d:ac:68:7e:cc:e4:ce:42:59:
cc:5e:f7:38:f7:d2:2b:09:6a:b8:b0:6b:b0:19:5d:c3:25:85:
15:6a:81:12:af:bd:9b:98:36:80:be:6a:80:0b:85:b3:07:8d:
e4:da:03:da:6e:1f:ab:44:4b:e6:d2:e3:9b:32:69:b6:65:90:
22:1a:50:fe:29:4f:68:d9:d8:af:22:d8:0b:ea:98:34:29:42:
65:fe:36:6f:9d:64:df:a7:1f:eb:a5:ea:3b:cc:2e:5a:0f:f9:
ad:87:55:db:4e:03:7d:ad:de:13:9e:43:b8:d8:cc:01:95:1d:
3d:fd:5c:82:1a:3a:f2:66:de:37:78:cc:49:54:0a:34:ba:1f:
b5:8a:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:07 2025 by rpki-client