This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078CF9C0C15311F09D8FCCADDAE4EC9C.roa
File: 078CF9C0C15311F09D8FCCADDAE4EC9C.roa (raw, json)
Hash identifier: OcUvSP4zVacdRytMCot8OwXDq1Yz4bZxBv5CHfXwNoI=
Subject key identifier: 7C:A5:F2:95:D6:0F:52:27:F3:F3:B7:8F:6C:E0:DE:05:C7:74:49:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A920
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078CF9C0C15311F09D8FCCADDAE4EC9C.roa
Signing time: Fri 14 Nov 2025 12:11:20 +0000
ROA not before: Fri 14 Nov 2025 12:11:15 +0000
ROA not after: Wed 17 Dec 2025 12:11:15 +0000
asID: 153671
IP address blocks: 154.196.170.0/23 maxlen: 24
154.196.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108832 (0x1a920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 12:11:15 2025 GMT
Not After : Dec 17 12:11:15 2025 GMT
Subject: CN=69171c68-4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:a7:e3:c1:81:29:3a:ab:76:7a:54:d7:0b:
f4:a5:50:06:eb:c1:be:56:5a:ab:df:c8:19:b1:76:
d1:65:2e:52:e1:7a:8f:a0:44:05:71:3e:cd:93:f2:
b0:26:c6:7f:c5:34:87:da:79:f9:fd:90:d9:ce:68:
c9:42:68:fa:10:79:0c:a5:33:8f:28:b3:78:cc:87:
aa:d2:45:fa:5d:43:0c:c4:39:9f:3d:d5:21:60:e3:
16:5e:db:26:18:98:53:ca:6b:83:5c:a2:d6:8a:be:
4d:58:1b:aa:6d:c3:5d:60:ef:fe:8d:c5:74:4a:30:
09:ee:7c:e8:53:85:97:39:6f:14:e5:6a:8e:d0:d0:
81:07:19:7f:50:c2:93:4f:9b:17:b6:a7:31:32:e1:
06:f0:e2:09:f4:ef:34:18:de:90:28:2c:12:21:49:
17:f4:39:f3:0e:3e:fa:a2:1f:d1:da:07:fa:85:16:
fa:5a:ec:1e:0c:12:78:9e:27:aa:e8:51:c5:90:50:
1c:ab:93:c2:5c:63:90:30:06:89:84:49:b1:57:60:
54:d7:77:52:fa:49:2c:ea:1f:a2:14:9b:84:9d:47:
78:34:3b:00:1f:57:e7:62:98:a6:07:fc:ad:ac:43:
ba:ce:aa:89:b8:a0:b2:15:5a:dc:9d:1a:1c:a8:47:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:F2:95:D6:0F:52:27:F3:F3:B7:8F:6C:E0:DE:05:C7:74:49:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078CF9C0C15311F09D8FCCADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.170.0/23
154.196.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:bb:5d:ba:74:05:e7:6e:75:cc:a3:ec:83:39:3f:fa:68:e8:
59:4e:9d:7f:a9:7e:05:45:5d:59:30:9f:80:de:a6:f3:bd:01:
9e:52:99:31:ab:d5:e2:b9:c8:b9:54:59:f3:1a:92:72:4a:fc:
46:2b:5a:12:0e:47:ed:d3:bc:27:aa:8b:95:05:03:d9:21:99:
02:c9:95:29:bd:9d:5e:86:06:3c:69:f6:86:23:bd:bb:af:d7:
0f:b1:0c:a1:7f:43:aa:5c:a8:9d:00:d9:45:7d:8c:46:38:0f:
75:a6:ac:b9:6c:2f:8e:bc:cc:1d:64:8c:72:31:12:1f:74:8e:
1f:bc:0c:7e:d1:ad:ab:a2:c7:4c:43:ab:2d:e4:d7:56:03:78:
69:9f:3c:23:58:40:a7:d6:02:be:0f:85:c6:b1:aa:cc:aa:73:
87:2f:6f:d0:ea:33:57:f2:65:f8:5a:33:64:1b:25:2f:2b:aa:
bc:c3:84:2d:dc:97:1d:80:dc:ea:30:57:ec:83:41:14:af:1a:
56:57:13:5f:14:9f:44:e5:0a:70:ae:6b:49:cc:ed:09:9c:2b:
3c:5c:63:f1:0e:4d:d8:e0:66:d9:1f:f4:9f:fa:07:2f:21:fb:
5f:c2:5b:da:7a:7d:91:40:29:74:8e:95:33:57:cf:3c:43:cd:
6d:8d:1e:b1
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAakgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTE0MTIxMTE1WhcNMjUxMjE3MTIxMTE1WjAYMRYw
FAYDVQQDEw02OTE3MWM2OC00YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxTOn48GBKTqrdnpU1wv0pVAG68G+Vlqr38gZsXbRZS5S4XqPoEQFcT7N
k/KwJsZ/xTSH2nn5/ZDZzmjJQmj6EHkMpTOPKLN4zIeq0kX6XUMMxDmfPdUhYOMW
XtsmGJhTymuDXKLWir5NWBuqbcNdYO/+jcV0SjAJ7nzoU4WXOW8U5WqO0NCBBxl/
UMKTT5sXtqcxMuEG8OIJ9O80GN6QKCwSIUkX9DnzDj76oh/R2gf6hRb6WuweDBJ4
nieq6FHFkFAcq5PCXGOQMAaJhEmxV2BU13dS+kks6h+iFJuEnUd4NDsAH1fnYpim
B/ytrEO6zqqJuKCyFVrcnRocqEdt8wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHyl
8pXWD1In8/O3j2zg3gXHdEmZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzhDRjlDMEMxNTMxMUYwOUQ4RkNDQUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmsSqAwQCmsT4MA0GCSqG
SIb3DQEBCwUAA4IBAQAMu126dAXnbnXMo+yDOT/6aOhZTp1/qX4FRV1ZMJ+A3qbz
vQGeUpkxq9Xiuci5VFnzGpJySvxGK1oSDkft07wnqouVBQPZIZkCyZUpvZ1ehgY8
afaGI727r9cPsQyhf0OqXKidANlFfYxGOA91pqy5bC+OvMwdZIxyMRIfdI4fvAx+
0a2rosdMQ6st5NdWA3hpnzwjWECn1gK+D4XGsarMqnOHL2/Q6jNX8mX4WjNkGyUv
K6q8w4Qt3JcdgNzqMFfsg0EUrxpWVxNfFJ9E5QpwrmtJzO0JnCs8XGPxDk3Y4GbZ
H/Sf+gcvIftfwlvaen2RQCl0jpUzV888Q81tjR6x
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:22 2025 by rpki-client