This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa
File: 4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa (raw, json)
Hash identifier: sb8mYykBeBHHtJOwTxNju0cd9cEzQy4xlNHwpTTMy6U=
Subject key identifier: 74:5D:9D:5F:C5:B9:B0:57:6F:23:4D:70:97:FD:D9:95:D6:A7:81:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018EA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa
Signing time: Tue 16 Dec 2025 08:22:08 +0000
ROA not before: Tue 16 Dec 2025 08:22:03 +0000
ROA not after: Fri 16 Jan 2026 08:22:03 +0000
asID: 22773
IP address blocks: 156.233.214.0/24 maxlen: 24
156.233.215.0/24 maxlen: 24
156.233.220.0/24 maxlen: 24
156.233.221.0/24 maxlen: 24
156.233.222.0/24 maxlen: 24
156.233.223.0/24 maxlen: 24
156.233.240.0/24 maxlen: 24
156.233.241.0/24 maxlen: 24
156.233.242.0/24 maxlen: 24
156.238.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102054 (0x18ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 16 08:22:03 2025 GMT
Not After : Jan 16 08:22:03 2026 GMT
Subject: CN=694116b0-4d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:99:3f:ea:17:d6:67:bd:8b:76:2e:93:95:
03:f4:91:1f:43:16:24:fa:85:b4:68:65:70:79:a8:
86:b7:65:4c:65:42:76:a8:26:f2:07:43:94:f9:41:
89:1e:35:21:3e:2e:0e:88:db:67:9c:55:f2:1f:73:
80:c8:ff:d7:a6:18:54:16:63:39:c9:4b:26:d5:10:
2a:2a:ee:74:35:ac:c0:4e:57:24:6e:4f:c8:c9:0c:
d3:b1:c7:6d:43:16:2e:27:0a:48:a5:d1:57:17:ee:
5d:63:8e:d9:32:9f:b5:21:88:fb:12:d4:98:33:43:
83:cf:5e:01:1a:73:49:03:be:02:5c:43:3f:57:d5:
49:e8:6d:9b:ea:76:8c:6c:4b:49:04:35:5e:2b:05:
69:3b:e2:38:0d:f4:fd:6b:8b:b2:a0:1c:ac:d5:f5:
db:52:4e:77:63:14:a6:63:35:e7:ef:d1:fc:31:cd:
cf:c8:77:9c:f1:ec:a2:aa:e7:e7:05:7a:76:aa:ae:
e4:24:b3:30:e3:cb:70:a4:29:3a:ef:b3:26:f8:47:
f5:54:27:7e:04:6e:51:37:af:8c:1e:c5:49:88:3c:
d9:42:6f:f9:dc:6d:8d:0a:a6:22:71:5d:38:f2:ea:
8c:72:d5:e6:6a:20:70:94:9c:52:50:83:06:f6:a3:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:9D:5F:C5:B9:B0:57:6F:23:4D:70:97:FD:D9:95:D6:A7:81:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.214.0/23
156.233.220.0/22
156.233.240.0-156.233.242.255
156.238.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:99:48:21:40:1a:5d:c2:90:f2:b4:51:91:b3:63:85:01:70:
7e:a3:8f:d3:6c:14:82:2a:6e:73:0e:11:23:43:c4:9b:0c:14:
11:27:ce:45:37:0e:94:94:96:ea:54:6d:da:9e:1d:1e:06:4b:
b7:b8:4e:7e:49:90:23:cf:87:32:79:98:dc:60:70:43:e8:22:
25:00:b8:74:d2:ac:e6:67:0e:a2:49:1f:08:cc:92:8e:ff:61:
91:3d:69:df:2f:db:57:15:0e:12:8e:1b:05:bf:f5:7d:d8:7d:
45:04:05:1f:62:e3:07:a5:c3:f8:9e:d9:b1:86:1a:27:76:27:
6d:64:16:c3:cc:69:7f:ac:33:30:6a:2a:ad:a0:96:f8:96:db:
a1:72:26:1d:e8:2c:12:51:bd:cc:2a:c9:d8:3e:84:11:88:b3:
43:46:19:83:ac:c3:2c:9b:90:5c:ad:2b:e0:27:6f:b1:c1:a4:
fa:23:fd:a5:82:bb:0c:c2:87:0d:02:e2:22:3d:d6:4e:b3:24:
16:7d:0d:f5:d2:8e:44:0d:74:58:2b:1c:69:ae:09:4a:9f:3f:
aa:97:ce:fe:9c:4d:9c:4d:8d:1e:4d:d7:66:b4:d4:f6:d3:28:
b3:da:df:6b:8e:bd:4b:22:fb:0d:05:31:1f:f5:d4:84:77:c8:
ff:53:94:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:42 2025 by rpki-client