This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFD8E94E56011F0B06F57F2DAE4EC9C.roa
File: 3DFD8E94E56011F0B06F57F2DAE4EC9C.roa (raw, json)
Hash identifier: RXVQ1ZD3N/O+SYRG3Kte1WOLgH8jfQ7hy2LT+yWpIJQ=
Subject key identifier: 5C:61:84:C3:0E:D1:77:97:1A:1B:1A:2C:17:F8:23:6F:92:3C:05:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B1D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFD8E94E56011F0B06F57F2DAE4EC9C.roa
Signing time: Tue 30 Dec 2025 09:16:37 +0000
ROA not before: Tue 30 Dec 2025 09:16:32 +0000
ROA not after: Fri 30 Jan 2026 09:16:32 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111058 (0x1b1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 09:16:32 2025 GMT
Not After : Jan 30 09:16:32 2026 GMT
Subject: CN=69539875-6ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:97:bd:45:44:40:76:95:67:97:5b:41:21:
df:8b:3d:55:3b:f0:53:a0:b0:a3:3b:bd:b0:58:e6:
a1:7d:f9:6b:c2:96:11:82:59:50:53:41:4a:4a:e9:
85:05:3f:44:56:64:23:29:1a:00:28:f2:dd:9d:9a:
ca:e4:62:b9:70:15:da:dd:e3:ba:01:8d:6c:38:83:
88:d1:13:53:7c:62:9a:bb:73:62:de:f2:63:9b:e4:
27:d3:0d:db:73:e5:ca:26:42:57:4a:ed:3d:cb:ba:
15:6e:1a:13:11:5a:d8:7d:69:68:65:4e:fd:65:a9:
63:14:c1:fc:58:01:aa:29:95:bf:be:6d:65:e3:46:
ad:b0:93:e0:59:65:94:26:5b:15:0b:1e:d3:6a:e6:
5e:7a:c5:f2:22:cb:1c:7d:37:94:c2:f1:58:27:6d:
d7:63:47:74:55:25:1a:00:24:32:d9:a5:cd:ef:db:
cb:95:d8:d0:d0:4b:30:93:21:60:57:e3:f1:47:7e:
0e:6c:ae:5b:8c:46:11:26:24:33:ae:65:ae:ae:b8:
48:03:e7:c9:08:e3:b0:5c:36:41:39:e9:c3:59:7e:
7a:7f:57:07:bd:29:47:98:fb:0a:3b:65:cf:56:0f:
23:db:99:c5:9b:a8:df:10:9e:bd:d3:73:22:40:96:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:61:84:C3:0E:D1:77:97:1A:1B:1A:2C:17:F8:23:6F:92:3C:05:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFD8E94E56011F0B06F57F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
40:a9:72:90:7b:e1:63:50:2b:4a:80:73:62:ca:ab:40:8f:0c:
36:d6:74:a3:b1:ca:56:ae:00:e0:bb:65:1b:4e:8f:79:4d:d7:
77:25:6f:f0:b8:29:b7:70:c5:83:9c:d3:eb:1e:bd:8b:0d:d9:
39:79:b4:aa:d4:d4:a2:bf:07:f6:ff:02:99:71:32:54:39:ed:
9a:2f:3f:f5:d1:12:69:4a:f2:52:48:a6:ac:5a:3b:c9:af:74:
23:7f:45:b7:6c:90:3e:b5:be:7d:b5:04:79:ec:51:a8:4f:f8:
2b:22:12:08:b5:c9:49:a9:9b:8e:b4:e5:01:79:84:d2:00:8c:
06:88:25:18:14:6e:95:7e:ba:f9:93:23:2e:db:04:da:99:81:
3c:d0:fe:d9:5d:1f:33:10:88:07:8a:8b:54:85:30:79:ef:c3:
4c:f6:64:ad:aa:3b:65:88:4a:66:a4:f7:95:67:22:2f:64:ee:
d8:7a:14:4f:33:17:4f:f4:60:5f:26:24:6f:53:40:6e:d1:b3:
d8:8a:99:40:03:ba:c3:65:f1:fb:39:2e:83:28:74:c0:e9:c7:
18:ab:23:de:b4:9d:a3:fa:5e:df:a4:c1:47:0e:ac:87:80:27:
1b:aa:69:da:ca:54:14:34:d8:f8:36:2b:c4:6e:cc:48:b9:2c:
16:a7:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:01 2026 by rpki-client