This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC775D4DA6111F0A33B499BDAE4EC9C.roa
File: BAC775D4DA6111F0A33B499BDAE4EC9C.roa (raw, json)
Hash identifier: 9/AEDE2hcZjhaexwobMlkB8OCm+IoByOZ3npBiVOloQ=
Subject key identifier: 03:1E:E9:EA:98:C8:EF:F7:F9:EE:4D:E4:8B:09:A6:B2:29:87:CE:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018EC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC775D4DA6111F0A33B499BDAE4EC9C.roa
Signing time: Tue 16 Dec 2025 09:29:33 +0000
ROA not before: Tue 16 Dec 2025 09:29:28 +0000
ROA not after: Wed 23 Dec 2026 09:29:28 +0000
asID: 141190
IP address blocks: 45.200.10.0/23 maxlen: 24
45.200.96.0/21 maxlen: 24
45.200.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102086 (0x18ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 16 09:29:28 2025 GMT
Not After : Dec 23 09:29:28 2026 GMT
Subject: CN=6941267d-d240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:db:28:11:f7:8e:03:6c:46:20:da:17:c1:
0e:ad:7e:1e:d8:a2:e7:71:d1:15:8b:88:48:97:1e:
8f:60:ee:d3:f6:14:b4:c6:fb:bc:b9:9c:5d:8c:b6:
11:0f:d2:27:80:7c:37:bb:f3:0b:f6:62:f4:69:8f:
5b:7c:26:49:49:b4:00:08:6c:89:68:1f:08:1d:ca:
93:c0:b6:df:6b:47:6c:be:cd:4b:9f:6a:2e:0d:95:
fa:6a:06:1f:ff:9f:8d:1e:93:83:11:d3:73:0c:84:
ee:f8:07:4b:a2:41:38:c5:ce:6e:d5:fc:dc:f5:10:
a3:42:5b:97:58:87:fd:b6:da:37:71:f8:bc:eb:8c:
6d:6f:5a:83:6c:09:fe:8f:48:eb:0c:43:47:20:7a:
0b:b4:c1:66:35:af:e5:50:ab:10:21:7f:2e:d2:d5:
5e:ea:e0:76:bb:76:1b:b1:29:a2:2d:b5:f5:a4:89:
a0:9d:de:ec:30:e5:31:3b:71:fd:29:44:07:86:cb:
04:d6:1a:9c:10:10:4f:92:2b:f3:93:3d:3b:0a:a3:
57:b9:63:8a:0d:7e:08:17:f8:cb:ae:f5:b7:ff:1f:
9b:b8:6e:40:e4:a2:00:e2:28:ad:3a:43:e8:bd:59:
1c:7d:be:74:e4:7d:c2:cd:3d:12:cc:b6:7d:67:d1:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1E:E9:EA:98:C8:EF:F7:F9:EE:4D:E4:8B:09:A6:B2:29:87:CE:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAC775D4DA6111F0A33B499BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.10.0/23
45.200.96.0/21
45.200.112.0/21
Signature Algorithm: sha256WithRSAEncryption
70:85:50:6b:15:7b:74:75:ec:0b:a3:44:0d:cc:5e:10:57:d5:
c8:27:ef:23:8c:ce:0b:f0:09:1a:2b:3d:f0:a1:12:9d:df:a3:
e7:c2:28:13:24:b8:d3:f1:53:a7:d9:a7:b9:a1:b4:d6:34:14:
c4:78:3e:a8:21:3d:95:0a:b2:24:99:ce:e9:df:56:6e:43:f4:
49:53:a9:a1:35:36:27:2f:2f:bc:dd:92:8e:35:2d:a5:d8:80:
23:9e:5b:1f:71:d2:95:e3:9c:9c:86:7b:31:2f:70:98:f6:b8:
28:5d:90:3b:51:d7:1e:15:1e:fa:d6:a3:f4:23:fd:ab:e9:06:
23:86:d2:2e:86:3c:76:c4:73:b4:0a:7f:3a:f1:14:44:22:24:
7a:9b:4a:e5:c8:b1:93:6f:06:66:e0:88:0c:f2:be:6d:6d:d1:
a7:45:bb:2b:f3:0b:4d:7f:27:e4:0c:cb:57:65:e2:38:57:61:
7c:be:62:50:8b:b8:41:8e:f8:f0:d9:b8:f7:85:fc:cb:32:c7:
09:84:cd:60:80:7e:09:3e:ec:07:92:c9:0c:05:5d:46:0a:e2:
c8:3a:28:9c:8c:16:1e:84:98:5a:26:4d:eb:9f:31:60:2b:89:
74:f8:4f:08:50:ef:14:ee:7c:40:ef:02:51:fa:87:b5:29:a9:
7a:88:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:36 2025 by rpki-client