This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD602DB8F94111F0AA96AC96DAE4EC9C.roa
File: CD602DB8F94111F0AA96AC96DAE4EC9C.roa (raw, json)
Hash identifier: 00gpXiLWPvvtfjC1MdHyyDX0G0Se5c8pQeyEsDHY1nM=
Subject key identifier: 87:0C:51:5E:A9:DC:9C:B3:01:97:74:E5:F1:EC:FF:E9:CB:37:34:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01994B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD602DB8F94111F0AA96AC96DAE4EC9C.roa
Signing time: Sat 24 Jan 2026 16:29:06 +0000
ROA not before: Sat 24 Jan 2026 16:29:02 +0000
ROA not after: Tue 03 Mar 2026 16:29:02 +0000
asID: 44559
IP address blocks: 156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.233.116.0/24 maxlen: 24
156.233.117.0/24 maxlen: 24
156.233.127.0/24 maxlen: 24
156.233.193.0/24 maxlen: 24
156.233.194.0/24 maxlen: 24
156.233.195.0/24 maxlen: 24
156.233.204.0/24 maxlen: 24
156.239.140.0/24 maxlen: 24
156.239.142.0/24 maxlen: 24
156.239.143.0/24 maxlen: 24
156.239.154.0/24 maxlen: 24
156.239.155.0/24 maxlen: 24
156.243.32.0/24 maxlen: 24
156.243.33.0/24 maxlen: 24
156.243.80.0/24 maxlen: 24
156.243.132.0/24 maxlen: 24
156.243.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104779 (0x1994b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 16:29:02 2026 GMT
Not After : Mar 3 16:29:02 2026 GMT
Subject: CN=6974f352-996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9a:43:e9:78:55:46:2f:92:c3:8a:32:00:94:
1c:68:d7:88:8b:fc:0a:c4:96:ad:92:05:4c:95:7e:
06:9b:dc:25:28:33:ad:95:49:62:0a:8c:fe:b5:f8:
68:c8:96:3e:fc:c2:d3:5e:65:0c:fa:d2:eb:97:ac:
d5:b3:d9:1a:27:01:2a:23:9d:44:e1:c7:44:0d:6b:
c9:de:c6:ff:18:d9:66:6f:e6:22:b6:d2:3d:63:87:
47:58:c9:0f:63:55:ac:06:55:17:5f:8e:fd:92:37:
5f:14:82:5e:20:93:70:54:7c:f6:a2:b3:95:d2:67:
33:c3:c3:d3:7f:ee:bf:29:0c:4f:f8:17:ad:f4:67:
92:7c:9e:68:e2:3b:e9:ae:64:92:61:c1:09:70:68:
02:13:44:78:29:f4:42:f6:4a:16:17:37:58:2c:5d:
af:18:86:9e:19:f2:f2:c1:08:ec:2f:09:4f:4f:3b:
58:72:23:cc:18:29:e6:5d:9a:c2:78:0a:75:6f:e4:
58:67:d2:61:50:63:4d:8e:9f:bb:92:5c:5c:e7:18:
b8:50:9f:09:16:04:c2:37:b6:bf:64:22:97:eb:e8:
42:bc:8b:b4:b2:7f:b8:1a:bb:e7:8a:71:3e:bb:f1:
fd:44:ca:ba:bf:c0:6d:f9:ad:72:c5:89:af:28:98:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0C:51:5E:A9:DC:9C:B3:01:97:74:E5:F1:EC:FF:E9:CB:37:34:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD602DB8F94111F0AA96AC96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.96.0/23
156.233.106.0/24
156.233.116.0/23
156.233.127.0/24
156.233.193.0-156.233.195.255
156.233.204.0/24
156.239.140.0/24
156.239.142.0/23
156.239.154.0/23
156.243.32.0/23
156.243.80.0/24
156.243.132.0/23
Signature Algorithm: sha256WithRSAEncryption
70:79:fc:1c:04:34:7c:7c:af:02:ea:f5:62:c8:30:a5:f4:ed:
0c:bd:9c:74:56:e9:fa:b1:d1:a9:c4:ca:3d:94:30:e0:86:3a:
3c:89:96:91:89:e0:5c:7d:88:68:ef:3f:01:b0:32:3c:37:e4:
fa:ba:3a:7e:c3:b1:ee:bd:33:8f:3e:25:1f:38:0a:b9:92:ef:
85:8f:7c:48:c1:ec:b5:e9:19:cc:0b:42:33:8e:76:6e:82:05:
8d:05:39:5d:70:a7:6f:ee:41:e8:8c:9b:49:37:d4:b8:14:64:
a3:c5:d8:94:42:58:e9:2c:a9:f6:6a:54:29:33:ba:41:19:c6:
b4:20:60:eb:f4:81:d0:46:36:2f:74:8a:63:1b:0d:96:c1:2a:
b5:ec:70:4b:00:55:9e:52:79:df:4c:31:fa:dd:10:aa:21:97:
96:a6:e0:f6:02:48:e0:c4:e8:b5:43:b7:ab:2a:9a:38:14:d3:
1a:19:b3:af:e7:55:05:b2:e8:e3:fd:48:2d:97:d8:57:c4:89:
02:1b:dc:85:fb:ab:b0:c3:3c:af:77:a6:13:e5:74:df:4c:ce:
04:f3:6f:cd:cd:89:e5:9b:d2:eb:bc:0e:29:5a:cb:41:c2:a2:
e2:50:e5:e1:cf:87:75:80:d6:7b:c4:94:75:a9:40:2b:9f:50:
4f:5a:02:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:15:52 2026 by rpki-client