This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC99CFECF9111F098636DC3DAE4EC9C.roa
File: BAC99CFECF9111F098636DC3DAE4EC9C.roa (raw, json)
Hash identifier: IP5ObB7x2pNheU70TgV9556AhWBE0R9kLX3vJCm39as=
Subject key identifier: 9E:E5:88:92:E0:14:EE:7E:8E:2E:FB:3F:62:A6:BF:A1:F0:90:11:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018AF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC99CFECF9111F098636DC3DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 15:15:27 +0000
ROA not before: Tue 02 Dec 2025 15:15:21 +0000
ROA not after: Mon 05 Jan 2026 15:15:21 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101113 (0x18af9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 2 15:15:21 2025 GMT
Not After : Jan 5 15:15:21 2026 GMT
Subject: CN=692f028f-52aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:db:5a:dc:d1:c6:ee:2d:b0:01:8c:09:ab:
06:9e:2f:a8:9a:f5:3d:93:ba:7b:3f:16:ee:7c:00:
1b:e9:2f:60:44:57:00:bd:0d:ca:7e:78:23:66:ab:
e5:b4:2f:17:19:98:03:32:89:36:82:a3:bf:a5:01:
8f:55:ab:6e:82:61:37:e5:b5:f0:b7:48:be:46:eb:
3e:6c:9a:23:c5:d1:44:0b:a9:2d:5b:c0:df:78:e4:
f5:d5:b3:a8:f7:b1:dc:fa:d6:9d:d1:f0:be:db:32:
f9:c4:5d:b5:a1:74:43:92:00:46:b7:b2:95:16:dd:
f6:06:33:17:b1:b1:b1:9f:8c:5c:b3:fb:cc:00:3f:
27:c3:2d:56:24:4c:fe:3a:c1:23:72:07:e2:b8:29:
e6:52:17:ce:3c:67:cf:cd:35:99:48:6a:1c:47:90:
76:8a:d4:7a:52:3a:c6:7e:f1:c1:59:67:8f:7b:15:
80:16:90:32:19:94:f8:5d:53:1e:13:40:f2:23:a2:
f3:82:a8:93:6e:94:4a:24:06:ad:90:9b:1b:df:d3:
a5:76:cc:f7:3d:fc:68:55:9f:bd:29:25:3f:de:78:
36:56:5b:d0:0b:0f:bd:06:85:50:7a:c3:36:37:a9:
2c:e2:b2:10:83:ff:b2:b8:34:89:1f:73:2e:38:f4:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:88:92:E0:14:EE:7E:8E:2E:FB:3F:62:A6:BF:A1:F0:90:11:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC99CFECF9111F098636DC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
71:18:f8:6e:c9:4c:db:75:a5:43:72:d0:c2:85:a8:29:38:97:
9c:fd:a8:b0:1d:46:e0:0f:7c:28:20:0a:4c:75:fb:9d:a6:a5:
98:3e:ce:83:5a:ed:9c:4a:0f:42:9b:30:bb:25:9f:76:0a:c6:
eb:23:9a:33:9c:7e:ac:c5:67:9a:b6:cd:33:ec:a3:8a:55:d7:
06:35:8d:48:b8:7a:19:8f:89:1e:d4:b5:6a:9a:93:7b:ae:bb:
9a:bf:86:9c:87:1b:59:ad:d9:e4:db:60:17:b9:3d:6b:cd:7d:
be:bd:00:1c:79:72:4a:df:12:ba:fc:95:17:8e:54:76:c0:1e:
3a:d9:eb:32:49:b1:c7:16:14:21:ef:9f:d3:dd:a9:9f:b6:39:
af:15:8e:5f:14:f9:3d:a4:66:36:ee:93:67:18:ce:5f:50:da:
a3:b4:62:80:ef:3b:f2:38:48:e5:33:06:bb:7d:08:aa:51:91:
55:46:94:2b:8b:30:9f:20:db:4c:3b:2e:15:7d:49:d7:ac:74:
77:f9:bf:aa:9b:d8:54:93:8e:7e:1a:e2:85:88:a9:56:43:c3:
5e:3b:52:dc:1a:30:9b:5b:56:ee:b0:fa:e5:52:57:86:6a:b0:
25:c4:cd:b1:ac:34:f2:9b:b8:4d:48:18:f4:ca:95:fa:b7:b4:
5d:b3:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:11 2025 by rpki-client