This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89ACD70D40D11F0B1C6D5E7DAE4EC9C.roa
File: A89ACD70D40D11F0B1C6D5E7DAE4EC9C.roa (raw, json)
Hash identifier: VgVBAvP2O8mQ9DT5ccelc33q/snnImfVjI95WKsmQw4=
Subject key identifier: 73:EA:A9:8A:54:90:E9:F1:59:CB:72:F3:FA:9D:91:A6:D8:B4:19:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018D00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89ACD70D40D11F0B1C6D5E7DAE4EC9C.roa
Signing time: Mon 08 Dec 2025 08:12:38 +0000
ROA not before: Mon 08 Dec 2025 08:12:33 +0000
ROA not after: Tue 13 Jan 2026 08:12:33 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101632 (0x18d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 08:12:33 2025 GMT
Not After : Jan 13 08:12:33 2026 GMT
Subject: CN=69368876-e571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:e1:8a:9b:9b:51:84:c8:48:44:ee:54:90:
54:f3:46:a9:41:e7:bd:e5:ae:e8:ad:2e:b4:0f:6b:
6b:be:5d:5c:6b:42:87:19:1c:ab:ba:b7:f1:55:37:
e4:88:4d:fe:af:7b:7d:d2:94:8d:21:d8:c8:2b:da:
2e:cb:f6:9c:00:5f:06:29:2c:30:df:ee:6c:1d:f0:
3a:63:37:ae:ba:78:a4:3e:29:0a:54:11:f5:2e:e1:
39:e4:76:ca:a0:9a:2d:0f:c2:fb:71:26:69:a5:a9:
7a:8d:60:5a:12:f1:48:23:96:e0:f1:0f:44:01:f6:
ab:66:d2:f5:f2:f5:2e:66:e7:5e:ae:4c:dd:e3:52:
43:23:df:1a:c1:30:11:9e:ff:be:e3:73:b4:4b:ad:
4e:90:ed:21:12:28:a9:36:63:02:0f:59:30:64:a7:
33:61:2a:b7:35:94:87:12:da:bd:e3:a0:01:c1:8f:
7b:4b:f7:dc:8e:71:65:4c:16:6d:57:a5:eb:4e:57:
50:20:47:39:ab:39:2f:33:12:d3:6e:f5:69:ae:2c:
46:17:f1:b2:a2:12:f9:03:8e:6e:c4:52:77:0f:81:
8f:44:47:19:c3:9a:a2:bf:e9:50:db:b2:64:34:7f:
7b:dd:65:52:90:c5:39:36:ef:be:49:a4:8e:4f:5f:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:A9:8A:54:90:E9:F1:59:CB:72:F3:FA:9D:91:A6:D8:B4:19:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89ACD70D40D11F0B1C6D5E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1c:c6:03:b8:53:15:c8:9f:da:ff:09:d0:0b:1e:ca:4c:c1:
76:d0:82:b0:ab:98:49:13:73:0d:0a:2f:75:7a:32:36:1d:2a:
dc:69:e8:4a:b0:50:90:0c:0d:7c:e5:62:7f:72:11:55:b0:64:
3c:6e:67:5b:f3:f7:6f:c9:04:21:7d:a0:96:87:6c:b4:87:cf:
74:d3:1c:9a:77:ba:c8:ba:8e:cc:88:01:a2:90:ed:f6:5f:9d:
61:64:2b:e1:49:b3:7c:2a:4f:ba:20:d4:95:38:81:70:9d:8a:
09:bd:0a:41:09:8d:6e:49:5c:06:62:97:c1:90:fe:08:c6:bf:
d3:bc:ce:ec:5f:84:8d:9c:ed:11:fa:b3:1a:42:59:d4:b1:08:
96:b9:8c:a2:cb:33:22:59:56:08:78:c0:9f:b1:07:24:f1:a1:
ee:a3:9e:fc:9f:55:89:02:70:c7:5d:ff:0f:b7:1c:fc:0b:39:
e8:b5:62:76:bb:f3:61:16:19:9b:e6:4c:ab:fd:58:27:d5:89:
1e:8d:e5:27:f8:79:73:95:b6:27:ab:88:f1:1c:96:29:0f:4b:
68:48:d5:1c:2b:1e:23:59:ff:dc:5f:60:52:4f:05:11:f6:2e:
ec:b8:5f:7d:ef:66:f9:1f:6b:2a:c0:1c:d3:cc:31:94:6f:69:
43:b8:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:18:31 2025 by rpki-client