This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF37976CD1DA11F0879C02A3DAE4EC9C.roa
File: DF37976CD1DA11F0879C02A3DAE4EC9C.roa (raw, json)
Hash identifier: 8BPlSvx4jCfHQhkqsHxpG9Yz9bKXp9EiuKGHKrx+cN4=
Subject key identifier: DD:3F:3F:2D:79:C9:F0:1F:F5:A0:61:DD:AA:16:B4:1C:5C:2A:CF:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018CB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF37976CD1DA11F0879C02A3DAE4EC9C.roa
Signing time: Fri 05 Dec 2025 13:04:03 +0000
ROA not before: Fri 05 Dec 2025 13:03:58 +0000
ROA not after: Thu 22 Jan 2026 13:03:58 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101559 (0x18cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 5 13:03:58 2025 GMT
Not After : Jan 22 13:03:58 2026 GMT
Subject: CN=6932d843-19af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:42:90:c0:44:45:3b:76:b2:bb:80:ef:a2:
ba:11:e1:73:1b:4f:36:2b:f1:70:13:9a:7a:eb:65:
2d:2b:16:43:ad:5d:31:f2:71:ed:e1:96:0d:36:22:
3a:69:a8:87:69:31:46:5a:3b:4d:0e:6d:55:9c:75:
81:78:cc:ba:ba:55:92:96:17:4b:84:d5:e2:58:2f:
a9:1b:0e:49:80:af:c0:54:08:0c:ce:72:d7:b5:c3:
fa:31:99:1d:05:a4:e2:6a:cb:ac:f6:48:de:99:b7:
c6:52:68:d3:90:e8:7d:bc:45:76:da:c8:63:b5:90:
5b:8d:00:f2:d2:0b:2c:aa:3d:d5:6c:eb:d7:c4:c6:
97:07:6f:db:0b:4a:3d:af:e8:ee:ad:da:02:22:98:
ea:c4:02:e9:aa:0a:54:27:bd:8f:71:a9:55:04:7f:
a6:bc:1f:9c:61:b7:46:c1:6f:d5:47:7a:a9:45:8d:
05:b2:d2:a8:df:14:ee:73:59:bf:26:c0:6c:92:e3:
ad:a0:40:ed:41:fa:46:1b:ed:4e:77:5f:1e:96:0a:
e0:04:b9:6e:2f:d6:62:42:6e:bd:a4:bb:60:90:b0:
50:52:83:b8:8b:46:cd:8d:10:b8:06:ab:da:a9:0a:
f0:d7:74:49:1d:1a:76:9b:23:42:6f:55:ea:07:c5:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3F:3F:2D:79:C9:F0:1F:F5:A0:61:DD:AA:16:B4:1C:5C:2A:CF:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF37976CD1DA11F0879C02A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
86:d9:41:76:8b:98:5e:e3:3b:4d:a2:5f:03:91:2a:57:8a:4f:
68:e3:94:60:10:86:1f:18:a1:c8:6a:2f:98:fa:f5:58:be:2e:
f8:54:b2:89:2a:44:f7:0a:29:86:03:d0:9c:05:3e:4f:72:85:
06:6a:de:91:e3:f3:e0:51:e1:f9:f0:e4:90:fe:f8:a4:78:f1:
85:41:80:c2:95:9b:66:88:12:d2:61:0d:73:11:53:86:97:ac:
aa:c6:2a:26:ce:a5:09:55:a1:e7:8c:f9:9a:31:81:e6:3f:b4:
94:f5:e3:f2:ec:3c:31:a8:99:98:28:4c:95:33:da:5d:f4:06:
3a:81:d1:49:93:55:8c:8c:dc:bc:c8:3c:27:0b:2f:30:b3:bb:
5a:0c:ad:21:54:67:7f:18:c4:f8:4d:6a:75:f1:3e:e0:dc:88:
f8:dd:f8:82:10:02:ea:a0:25:08:29:4a:08:63:87:0e:ec:ac:
85:30:ab:63:da:70:7e:0a:a2:87:28:6e:a4:07:ed:f0:4b:29:
31:e0:c6:1e:e7:ca:92:ed:a9:e4:3a:eb:8e:e0:58:ed:b1:ab:
22:4b:c7:fb:7f:74:9f:27:fb:f4:ae:1b:a9:5f:f2:6d:9c:85:
57:be:33:c0:62:c3:57:c6:1c:5b:a3:0a:e6:f6:57:0b:5b:0a:
b3:fb:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:18 2025 by rpki-client