This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23103E1AF05A11F0B8F06682DAE4EC9C.roa
File: 23103E1AF05A11F0B8F06682DAE4EC9C.roa (raw, json)
Hash identifier: /v59Ira3JsNvoGuucLjnq4TGvA6CSI7VkF1mEhviVPc=
Subject key identifier: CF:69:6E:93:27:9B:6C:8F:5E:89:5E:27:D4:7D:24:F3:81:B0:C5:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B469
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23103E1AF05A11F0B8F06682DAE4EC9C.roa
Signing time: Tue 13 Jan 2026 08:30:38 +0000
ROA not before: Tue 13 Jan 2026 08:30:33 +0000
ROA not after: Wed 18 Feb 2026 08:30:33 +0000
asID: 8796
IP address blocks: 154.200.128.0/24 maxlen: 24
154.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 23 Jan 2026 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111721 (0x1b469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 08:30:33 2026 GMT
Not After : Feb 18 08:30:33 2026 GMT
Subject: CN=696602ae-ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:ff:81:cb:af:77:b9:f5:e4:75:b1:a1:fe:
d3:5c:5a:e7:2d:d9:93:fb:b2:39:8b:fc:dd:1c:dc:
0f:bf:4a:7a:c3:da:a2:39:64:21:a4:05:9e:8e:ca:
63:f7:b6:9b:32:35:e9:fb:2b:fa:8b:a8:08:70:be:
88:60:9b:13:0e:91:83:5b:c4:b2:3d:0c:93:54:2a:
5f:1b:18:67:41:48:3d:f7:8a:d9:89:7b:ed:ea:f5:
6d:ec:14:1d:53:a8:b6:6c:3c:00:d8:72:e7:16:6e:
74:6c:78:92:19:78:b6:45:72:03:d2:91:44:42:d1:
30:65:9f:9c:b8:12:b2:ae:b0:1c:6e:aa:f0:31:db:
04:7b:c1:22:a0:5e:19:0e:6d:d4:9b:5c:d4:78:5b:
a1:78:f5:18:5a:95:75:be:7a:a1:b9:84:53:d9:d3:
38:47:b6:50:da:ff:03:d6:9f:b9:20:26:3a:a5:ed:
2d:7c:e2:b6:46:63:18:03:7b:ad:ec:c8:2e:50:f9:
f7:14:72:45:06:4b:51:c2:8e:75:8c:04:a4:12:3e:
d1:48:b9:d5:30:86:83:72:31:ce:86:56:78:93:d7:
e1:5c:81:c5:20:1d:db:18:45:b8:c3:ad:2c:6f:87:
92:14:35:98:73:78:b3:38:c8:d6:e4:98:d7:7e:37:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:69:6E:93:27:9B:6C:8F:5E:89:5E:27:D4:7D:24:F3:81:B0:C5:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23103E1AF05A11F0B8F06682DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.128.0/24
154.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ba:7a:fe:60:19:17:cb:03:61:d9:b3:20:36:42:c8:b4:b7:
02:57:28:4b:70:81:b1:c9:0c:09:ea:bb:56:b1:3d:8f:41:54:
80:c6:66:14:17:e3:f2:d3:0b:69:f9:75:6b:e9:0a:bf:41:6d:
de:9b:c7:92:89:e3:08:8c:10:b6:43:da:ca:5a:09:74:84:a0:
d3:9f:7f:bb:37:c1:89:31:e8:50:60:e1:2f:cb:e8:a2:6e:fe:
39:19:31:fd:81:9f:e7:1e:25:cf:37:9d:56:8d:e9:10:1e:26:
6d:90:f2:22:95:e7:67:05:48:36:c2:ce:4c:7b:b4:5d:34:dc:
b5:f6:45:f8:ab:cc:58:d5:4c:30:9a:cb:49:1f:0e:f4:9f:a0:
e1:ac:a0:eb:3d:8e:d8:cc:bf:71:d1:c9:fb:15:0a:01:b6:fe:
c2:a6:07:f2:6b:ea:e0:4d:6f:53:48:fb:d5:25:e0:68:3e:71:
3b:f5:11:1a:ce:23:c7:ce:04:68:a4:d1:78:c0:23:3d:4c:bd:
42:0c:90:68:1d:7d:65:7a:a1:57:98:10:2f:d2:7b:61:cf:c1:
11:43:a8:73:f8:f9:31:dd:fd:05:67:24:13:8d:99:8c:6c:54:
56:05:04:91:ee:7e:3c:7d:d7:8c:79:3b:50:07:ff:9b:a9:91:
e5:00:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:41 2026 by rpki-client