This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F8F8332D5B011F0A9C012A9DAE4EC9C.roa
File: 1F8F8332D5B011F0A9C012A9DAE4EC9C.roa (raw, json)
Hash identifier: hZaglnwax/WDefsQNJTyNBvSnv4929KCVBuW98IDIfI=
Subject key identifier: B8:AC:1A:19:C6:E1:2D:C0:32:A6:BD:0C:AC:4D:7A:69:BC:5B:30:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018D8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F8F8332D5B011F0A9C012A9DAE4EC9C.roa
Signing time: Wed 10 Dec 2025 10:08:07 +0000
ROA not before: Wed 10 Dec 2025 10:08:02 +0000
ROA not after: Sat 20 Dec 2025 10:08:02 +0000
asID: 54801
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.245.232.0/21 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101771 (0x18d8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 10 10:08:02 2025 GMT
Not After : Dec 20 10:08:02 2025 GMT
Subject: CN=69394687-850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:9f:31:8f:60:0e:88:3c:c4:52:da:c6:81:
bf:2a:f8:3c:54:ea:bd:45:f3:2f:6f:65:48:00:0b:
1a:c2:13:b1:a3:42:5e:a0:2f:4a:7c:b0:9f:45:2f:
79:35:2f:97:63:5e:da:2b:df:10:77:5e:2c:e8:da:
b4:5f:ae:3e:cb:b0:c6:1f:5e:43:76:a8:51:24:b6:
dc:b8:a5:72:ae:70:2d:23:0d:44:db:80:f6:41:84:
cb:5c:c5:06:39:a6:7c:d3:7d:fb:69:83:bc:c8:bb:
26:eb:08:a2:64:8c:80:55:99:52:fb:1b:5a:f5:af:
ae:c8:23:60:56:c7:2f:f2:77:19:9e:20:99:40:3c:
64:b6:d0:c1:41:12:20:31:69:89:9d:06:bb:fa:b1:
fc:1c:cd:45:04:78:8c:45:16:a1:cb:02:a2:ef:13:
bc:41:fb:ca:64:34:04:38:f0:59:d8:cd:23:14:93:
92:06:23:5f:a5:8b:5d:c1:28:e9:4e:2f:49:99:8a:
33:82:f8:9b:d4:0f:a0:e3:e3:ba:f0:ff:f6:a1:15:
de:96:25:93:49:60:de:60:08:14:0d:7f:53:8c:e7:
5e:05:fa:37:6f:a5:bb:16:52:58:fb:a0:37:8b:44:
9b:99:c9:d7:5e:ce:ca:e1:26:26:4d:2f:c6:4c:14:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:1A:19:C6:E1:2D:C0:32:A6:BD:0C:AC:4D:7A:69:BC:5B:30:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F8F8332D5B011F0A9C012A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.245.232.0/21
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
34:bf:99:fb:e9:d7:76:1b:35:13:aa:03:d8:70:ed:3a:53:74:
e3:04:95:99:b5:37:e0:7d:49:dc:83:70:bc:39:bd:c0:0c:56:
b8:e6:7f:23:07:ab:d4:7a:f0:2e:b0:2d:ab:f6:ac:d8:a7:63:
ba:36:71:cf:78:ec:5f:76:80:75:a1:8a:67:33:d8:27:95:6c:
2d:08:f5:72:f1:43:2f:8e:b4:e0:16:79:ff:6d:90:7e:c8:53:
9c:34:ea:26:01:99:ec:78:be:51:5e:00:ff:f0:1a:49:8f:fb:
28:40:62:31:bc:3d:2b:7b:77:e7:c6:07:00:47:ac:5d:3a:86:
e8:6c:d3:1c:8a:48:0c:f5:65:6d:57:f8:1d:9f:d5:0e:a6:59:
c6:21:0b:4e:9b:85:74:ad:7d:e6:5a:eb:fc:b8:88:e0:60:bc:
61:b0:5b:d2:51:3e:10:a7:20:c7:02:7b:4f:02:67:36:1d:7a:
71:83:93:aa:0d:c9:e3:c8:bf:2a:d6:1b:b9:90:d4:6b:b4:2f:
8c:cf:36:09:56:d5:0c:7d:a5:09:07:9c:3c:e4:08:d9:ab:9e:
34:37:61:44:41:aa:3c:aa:4f:c8:e8:39:5c:31:3e:22:a6:ee:
fb:49:91:11:25:1b:5a:d0:0e:34:e5:00:25:2c:6f:71:c5:11:
91:10:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:34:10 2025 by rpki-client