This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AAC04AEBFD111F0B8643FA7DAE4EC9C.roa
File: 4AAC04AEBFD111F0B8643FA7DAE4EC9C.roa (raw, json)
Hash identifier: b8dir76ycuYN9qZiFUK4tNvvxNJwt3XGIFQ5jXbH4f8=
Subject key identifier: 95:4C:26:C1:8E:26:FD:CB:1C:A2:5E:A6:30:94:79:4B:1E:7B:71:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A8A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AAC04AEBFD111F0B8643FA7DAE4EC9C.roa
Signing time: Wed 12 Nov 2025 14:10:07 +0000
ROA not before: Wed 12 Nov 2025 14:10:03 +0000
ROA not after: Mon 18 May 2026 14:10:03 +0000
asID: 139923
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108706 (0x1a8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 14:10:03 2025 GMT
Not After : May 18 14:10:03 2026 GMT
Subject: CN=6914953f-a99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:88:b7:1e:8c:1c:bb:1c:5c:6a:8a:b7:a2:
fa:6d:aa:fb:90:de:f6:e4:1d:3c:65:d3:72:72:39:
ae:71:13:4c:27:4e:d6:ec:6a:a1:52:00:d6:4f:56:
9b:c1:48:b9:90:64:ab:09:4c:9f:d3:a0:3f:24:a1:
a1:f4:21:66:46:4f:1a:66:0b:8c:ab:e9:ce:8d:21:
a6:45:a1:a5:7c:36:1a:9a:30:64:c9:27:3c:9b:a3:
2f:ff:5b:ba:db:1a:3f:5b:80:a1:6c:c8:98:92:49:
5c:b9:b6:68:ae:55:36:0b:28:c8:8c:74:f3:82:a5:
bf:2e:f7:e8:e6:e0:08:77:8a:9a:95:23:14:d9:01:
5c:cb:12:f2:ea:ea:2d:91:67:4a:1f:b9:35:a8:d0:
eb:3a:b9:e0:c7:87:ee:67:1d:74:49:77:03:c6:32:
90:67:ba:da:a7:06:bb:e1:1b:8f:49:28:e8:46:9c:
11:73:4b:1d:85:85:2b:e6:0d:9d:6d:a2:56:3d:92:
f2:cc:ec:2c:0b:58:61:f4:65:60:89:e3:48:74:68:
9e:ab:0c:aa:33:cb:a2:ac:66:1e:c0:c3:83:40:c8:
ae:72:69:3d:59:7f:58:51:3f:a9:93:4e:c7:3e:22:
ec:6e:cf:68:9b:a1:35:ae:3b:e3:28:33:f1:07:16:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:26:C1:8E:26:FD:CB:1C:A2:5E:A6:30:94:79:4B:1E:7B:71:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AAC04AEBFD111F0B8643FA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
d2:e0:87:86:6f:46:d9:98:d3:26:35:9f:a6:51:5c:fd:16:52:
02:f0:29:d8:47:72:77:82:27:6b:c3:26:06:2f:04:a6:5d:2c:
2e:44:7b:ca:dc:86:a5:f0:d8:8e:e7:10:24:26:2b:7f:cb:ee:
ed:11:20:3c:79:c9:36:6a:ea:78:f0:01:76:b7:4e:e6:da:39:
d6:0c:5c:36:ae:ff:6c:e7:7d:31:08:18:cf:cd:5d:1e:50:9c:
ab:ea:58:18:19:2b:02:da:2e:f0:35:ee:70:a6:5d:dd:7a:a3:
a3:8a:85:60:31:a1:60:42:d2:84:28:26:67:b8:e4:de:4e:63:
72:76:7c:7f:2d:de:64:d2:80:ad:b6:dd:d8:28:c6:e5:bf:9f:
6d:d7:5e:18:8e:08:55:75:79:5a:26:b6:b4:1a:88:95:f4:a2:
bf:00:41:a7:8d:49:e4:76:cd:2b:c5:db:aa:15:1c:f6:24:61:
78:e0:e9:09:ac:6d:f1:36:fa:59:c3:f8:ba:98:99:4e:02:1d:
53:61:b7:9d:f0:7a:2c:e0:1e:f0:ba:a1:bc:01:85:a3:9c:fa:
dc:71:74:29:7b:d0:aa:68:1f:7f:53:ef:38:43:97:60:c1:1b:
af:1b:5a:44:68:bf:b6:3b:37:ae:1a:a0:d7:d4:aa:ff:60:67:
42:36:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:15 2025 by rpki-client