This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5C3C4220E56911F0940425ABDAE4EC9C.roa
File: 5C3C4220E56911F0940425ABDAE4EC9C.roa (raw, json)
Hash identifier: fzh3BbA2nqVNWMU/cJ5HIhuGJPHCGB+YuMLoQaEUfOQ=
Subject key identifier: D9:6F:A9:FF:04:3C:54:D3:D6:70:2A:ED:4A:B2:72:D0:53:01:31:73
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 0A73
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5C3C4220E56911F0940425ABDAE4EC9C.roa
Signing time: Tue 30 Dec 2025 10:21:53 +0000
ROA not before: Tue 30 Dec 2025 10:21:49 +0000
ROA not after: Mon 31 Dec 2035 10:21:49 +0000
asID: 214432
IP address blocks: 165.49.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Dec 30 10:21:49 2025 GMT
Not After : Dec 31 10:21:49 2035 GMT
Subject: CN=6953a7c1-e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:d1:92:3f:d0:ca:c5:33:e9:b4:e5:0d:27:
16:ba:f2:67:78:d2:a1:8c:95:b5:be:23:1d:bb:3e:
0b:b4:b0:ab:17:6d:b3:d3:03:8b:f1:19:4b:55:4c:
45:9a:41:97:61:d5:9a:4f:a6:de:66:59:47:97:5e:
9f:08:95:95:e6:ed:29:9c:f7:05:24:04:4a:89:9d:
d6:86:a0:49:f5:a5:c3:8c:e7:ff:32:c7:f6:37:59:
86:06:ef:b2:bd:0a:cd:8c:9c:58:96:41:97:f5:c9:
bd:7b:c8:71:47:c9:65:32:d0:93:0e:20:49:50:4c:
7b:e3:fb:e5:ff:59:e6:fc:1e:5a:5f:86:d3:e2:b7:
4b:db:51:ee:12:fb:dd:68:dd:56:12:fe:a4:59:28:
11:bc:c9:f4:a2:83:c0:c2:a9:42:aa:01:19:e9:c7:
f6:70:1f:f0:e1:32:f2:9b:92:f6:25:81:b2:7c:25:
e4:89:3a:00:ec:96:84:b2:a9:6c:a3:9b:11:2c:73:
09:ea:cb:c8:b7:d9:b2:86:fd:28:c8:c4:3f:da:8b:
7f:ce:5c:da:5a:32:e3:31:44:1f:ed:1e:17:55:bf:
3f:d9:b3:13:59:f2:ea:d7:34:88:54:0d:9c:53:2f:
70:41:d8:87:88:6c:28:48:41:87:48:b8:eb:5a:2b:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:A9:FF:04:3C:54:D3:D6:70:2A:ED:4A:B2:72:D0:53:01:31:73
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/5C3C4220E56911F0940425ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.49.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3b:77:c6:12:90:5d:73:5c:e5:e8:89:72:6b:18:70:6a:fd:
b1:e1:cf:54:0a:46:16:a8:a7:71:99:28:d6:1c:08:e9:dc:af:
ba:5d:1c:8d:7a:d0:b4:cb:5a:c9:eb:6a:35:fc:a0:4d:64:cb:
ea:4e:ad:fe:97:55:8a:cc:b7:71:42:44:c0:04:0e:a7:d5:8d:
aa:a3:7e:bf:29:82:6e:e2:5e:47:0f:1b:68:a1:f4:b1:80:a8:
26:1f:d2:f3:00:8a:4e:06:ef:94:48:a7:f1:40:da:51:03:69:
9c:ef:3e:f8:7e:7e:1c:56:c5:ef:1a:bb:ed:dd:1d:98:a7:f3:
75:0d:20:41:b6:a3:42:a5:4a:69:0c:13:24:1e:00:7b:24:4a:
b2:67:21:41:82:a6:26:92:24:e3:72:cc:65:19:87:b0:12:6e:
99:b6:7c:21:e3:81:52:22:99:f2:51:d0:ae:ac:f2:cf:43:f4:
e9:51:b3:1f:3f:5c:e6:8d:b2:87:2d:55:b3:a7:14:4c:bb:b3:
84:25:d4:38:d5:b2:d1:51:32:95:bc:fc:da:56:3b:90:e6:2c:
95:50:48:3a:12:74:37:4e:3f:d7:92:7c:53:7e:1e:e1:17:57:
8d:60:fa:81:3e:27:2c:aa:1d:35:e3:e1:5d:0f:e5:65:4e:12:
4a:39:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:58 2026 by rpki-client