This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A36C2A446A611F0A0C66CB7DAE4EC9C.roa
File: 1A36C2A446A611F0A0C66CB7DAE4EC9C.roa (raw, json)
Hash identifier: v9R0QBEi2bJ25zO5/7B9APQmsHfErlvYaf0bva3BnhE=
Subject key identifier: 43:48:34:C3:80:6C:55:FF:1E:58:74:EC:CD:ED:85:F5:D2:5A:1C:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015B50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A36C2A446A611F0A0C66CB7DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 09:26:07 +0000
ROA not before: Wed 11 Jun 2025 09:26:02 +0000
ROA not after: Mon 16 Jun 2025 09:26:02 +0000
asID: 55020
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88912 (0x15b50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 09:26:02 2025 GMT
Not After : Jun 16 09:26:02 2025 GMT
Subject: CN=68494baf-d8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:c8:13:07:e8:0f:33:e8:3a:ac:01:66:dc:
f9:47:5b:9e:ca:1e:19:71:f2:a7:26:85:13:20:0d:
e2:17:25:9f:dd:98:9e:d5:fa:d0:e2:97:21:65:c8:
1d:97:da:c3:37:7f:95:60:57:e0:d2:59:a3:6a:5e:
50:ee:28:b7:4d:c8:ff:65:a6:a7:b4:f5:4b:d1:6e:
1e:75:ff:b8:f1:4c:86:b4:89:da:14:b2:66:1a:03:
82:72:dc:1d:3e:42:2d:b3:e0:94:3e:24:d9:54:36:
b6:4d:60:ee:48:3a:0e:ad:4d:ed:72:e5:bc:d0:d1:
9a:56:96:e0:72:5c:93:e5:2c:51:a7:38:8d:a3:87:
d5:2d:4d:15:70:3a:6b:d2:1e:21:92:9b:59:f3:ca:
73:6c:b9:49:75:4d:9b:75:00:d2:08:75:76:16:49:
07:ff:a2:bb:2e:85:83:47:ec:81:7d:6e:54:94:d6:
33:22:16:e4:5d:71:d1:06:65:7b:4f:ba:08:90:13:
3a:9d:0c:03:d0:f2:99:61:19:7a:db:1e:db:a5:aa:
74:7f:2b:c0:9c:e2:54:e9:5a:9f:8d:68:82:e5:f2:
d5:46:53:15:ba:62:56:5c:a3:a8:dd:ef:56:20:ae:
bc:26:46:d6:ca:0e:b7:31:27:33:a0:db:83:4c:0c:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:34:C3:80:6C:55:FF:1E:58:74:EC:CD:ED:85:F5:D2:5A:1C:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A36C2A446A611F0A0C66CB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
52:65:bb:f9:0e:5d:77:84:9c:3e:de:2a:71:f5:ce:f9:4f:bb:
e2:4f:8c:12:04:f5:a7:19:a9:a5:d7:ff:fa:32:2b:70:57:26:
f8:22:d8:6e:42:08:b9:25:e7:4b:0f:f4:4d:8c:f7:c4:08:6c:
a8:e9:21:36:ef:71:79:d3:67:7f:80:7d:9e:be:a1:9a:fc:fd:
f5:c0:58:60:dc:af:49:54:14:0d:e6:0e:40:3e:00:89:d1:e0:
09:81:da:65:cf:10:90:0a:10:ba:ab:a8:ec:29:bf:27:b2:51:
35:58:2f:25:63:ae:3e:97:89:e9:7d:fe:82:37:e5:9a:99:40:
de:7c:8c:38:15:1f:94:13:6e:b8:05:97:91:62:77:73:01:20:
1c:b7:77:f5:dd:9d:21:47:23:93:10:12:21:75:13:e0:74:ad:
61:f1:f8:f2:0a:73:40:22:31:96:32:c9:c8:89:c1:ee:33:97:
7c:fb:d2:d4:94:45:64:e6:e0:ce:b6:ff:45:b7:11:1f:55:c2:
25:31:62:e8:39:93:4d:bf:d9:5c:8d:9b:9d:ee:3e:12:07:16:
35:a9:01:35:76:6b:27:d0:73:18:06:ea:47:01:eb:d1:44:45:
6f:e9:22:f4:d8:1b:b0:8e:66:1c:cc:92:73:bd:dd:fb:a6:71:
36:be:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:40:40 2025 by rpki-client