This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/383F6CE2CEA511F0A4AE177CDAE4EC9C.roa
File: 383F6CE2CEA511F0A4AE177CDAE4EC9C.roa (raw, json)
Hash identifier: BlarGAZI27pkV6zGJOSDmJIhzz18I3BBH71g5f8uMOc=
Subject key identifier: 3D:A0:6F:F4:89:8D:B1:FB:08:DF:FF:80:E0:17:0F:6B:E7:EF:31:61
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 1034
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/383F6CE2CEA511F0A4AE177CDAE4EC9C.roa
Signing time: Mon 01 Dec 2025 11:02:26 +0000
ROA not before: Mon 01 Dec 2025 11:02:21 +0000
ROA not after: Sat 01 Dec 2035 11:02:21 +0000
asID: 327790
IP address blocks: 161.123.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4148 (0x1034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 1 11:02:21 2025 GMT
Not After : Dec 1 11:02:21 2035 GMT
Subject: CN=692d75c2-c8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:46:94:4e:21:e7:23:83:5b:4f:65:74:4c:
0f:b9:aa:98:11:b7:3d:1d:dd:0c:f3:37:bc:ce:f1:
cd:bf:1f:e0:90:3d:9c:87:3a:17:31:2b:ee:0c:b6:
33:18:f6:21:c5:16:77:a0:14:a6:cb:f1:26:77:ec:
d0:bb:ea:6e:7f:b5:f1:1c:1e:3b:45:fe:e9:0b:b6:
a6:01:5c:de:be:5a:97:79:82:8f:fa:03:53:5b:1d:
e8:8d:d3:d8:68:b8:3f:74:05:35:81:49:87:2f:07:
de:6d:d4:72:d8:e4:e2:fd:c5:71:19:34:fd:b0:8c:
87:8a:bc:6a:3e:07:c7:e6:42:f1:29:62:ec:5c:09:
ce:79:90:2e:ea:74:a3:66:e8:cf:a5:56:ad:5c:1e:
f9:20:2e:90:ae:c8:59:7e:4d:ce:46:42:c2:b7:a8:
ca:69:ca:e9:41:67:c1:b8:bc:24:44:93:ed:2e:14:
49:7a:3e:97:35:b1:f0:10:27:66:70:f0:84:79:b5:
ae:37:e7:12:a1:82:bb:99:2c:d2:1d:48:d7:b3:8d:
20:53:37:b9:e8:f7:70:a5:86:51:08:72:cb:67:3b:
3a:89:05:ea:68:be:27:f1:c3:29:3d:1a:6d:53:18:
d0:76:ac:aa:db:66:de:ef:24:de:6b:8e:56:e3:6e:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A0:6F:F4:89:8D:B1:FB:08:DF:FF:80:E0:17:0F:6B:E7:EF:31:61
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/383F6CE2CEA511F0A4AE177CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1f:29:09:b8:6d:de:19:5f:34:0c:ca:6a:1e:10:8f:02:f9:
f2:f3:0a:6b:1d:22:48:78:3c:ae:f5:92:f4:c8:ab:68:c8:09:
48:e6:64:68:82:f0:f5:d7:3c:13:e8:03:8c:21:15:d0:9b:87:
bd:ea:09:02:a1:ed:84:94:b4:77:de:40:55:56:ea:a0:97:fd:
aa:43:a7:0c:aa:cf:76:5d:22:41:4f:86:d3:9e:6b:e2:c1:43:
bc:b3:8b:91:8d:a7:47:52:b7:63:4b:6e:0d:84:b8:08:e1:c5:
00:35:a8:dd:93:db:5f:25:2c:48:e8:2d:4c:c6:63:ad:59:b2:
6f:0d:fc:17:75:bc:66:cd:f4:c3:b6:1b:88:71:94:ff:18:87:
e7:86:a3:99:46:56:23:65:28:81:39:8e:42:11:4a:f1:af:3e:
01:01:bc:26:53:ff:47:d6:81:57:21:04:4d:23:c8:9d:31:e5:
1d:fd:0f:38:0e:96:96:30:2a:9a:45:f3:e2:f8:ce:f2:f5:29:
8b:f0:52:54:ab:85:19:9c:65:5c:ea:43:e3:23:ea:f5:f8:5c:
18:1d:b1:94:cc:1d:72:f5:7c:20:d1:36:33:4b:98:79:68:cf:
a3:ea:ff:ec:6c:99:32:75:11:28:73:cd:84:19:60:b3:45:b8:
cf:7a:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:39:26 2025 by rpki-client