This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3C0112CC4A11F0ABFD9BBDDAE4EC9C.roa
File: 4D3C0112CC4A11F0ABFD9BBDDAE4EC9C.roa (raw, json)
Hash identifier: tEkGDc1CWTvAF+CkYWNS8XXJeztUV+8YuHoupbYxDlk=
Subject key identifier: 6B:12:59:4C:26:69:31:56:07:FE:26:D3:93:7D:2C:F4:5A:8E:6A:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AAFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3C0112CC4A11F0ABFD9BBDDAE4EC9C.roa
Signing time: Fri 28 Nov 2025 11:06:35 +0000
ROA not before: Fri 28 Nov 2025 11:06:30 +0000
ROA not after: Sun 04 Jan 2026 11:06:30 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109310 (0x1aafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 11:06:30 2025 GMT
Not After : Jan 4 11:06:30 2026 GMT
Subject: CN=6929823b-e02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:1f:ec:fe:51:b5:e1:5e:44:6c:92:fa:19:
c6:d5:48:20:ad:d2:d3:da:4b:45:81:3e:a1:28:58:
10:2d:09:01:73:49:a6:d5:a3:ef:85:9c:8c:3a:33:
a2:5c:53:15:3c:ad:a0:d0:c1:3b:2f:c8:05:82:82:
f6:c4:3b:bb:2c:0c:be:f2:3c:c1:49:3e:da:97:17:
93:cc:db:d8:e3:0e:b0:8c:7b:3d:0d:56:55:e8:aa:
8a:e5:86:2d:e3:1e:97:8f:c7:b2:6e:e7:3c:4a:da:
32:bb:f1:a1:79:29:8d:0b:7e:41:4d:16:4a:11:69:
8c:bc:ef:34:da:c7:e7:ae:89:44:66:c8:56:55:b6:
20:4a:39:88:54:d6:ff:72:cf:71:39:e0:ef:f8:7d:
ae:09:b2:76:8e:29:91:bb:73:10:32:ca:f1:5a:b1:
4c:aa:89:de:a5:b8:d7:ae:67:ca:36:35:d8:8f:8b:
ba:96:e0:42:dc:61:83:22:cd:3a:57:90:73:85:91:
68:c9:ff:d3:01:82:54:85:f2:b7:9e:b7:24:39:56:
6e:17:84:d1:a0:3e:0d:bf:b2:4a:61:cf:6c:b2:df:
68:e5:ea:99:0e:b3:1c:49:55:3f:b7:db:12:b9:c3:
84:77:a9:ba:a2:bb:01:2d:45:c8:0a:2a:32:22:09:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:59:4C:26:69:31:56:07:FE:26:D3:93:7D:2C:F4:5A:8E:6A:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3C0112CC4A11F0ABFD9BBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
35:35:0a:81:16:b5:d2:06:57:dd:85:1c:c1:2a:bd:d4:9e:70:
fc:38:8d:7d:e4:38:fd:c9:11:1c:8b:9c:f9:b5:ae:91:cb:44:
29:06:69:b9:e6:2e:d3:96:27:e7:f0:b7:93:9b:92:f4:fc:d3:
83:c9:43:04:37:9c:67:f6:c4:5d:2e:9b:f6:4a:57:f8:de:2f:
df:d5:4f:05:ce:13:ed:70:38:c0:15:c7:29:21:14:cd:35:a6:
2a:41:fe:1c:08:b0:36:0f:b3:de:68:7e:c1:8d:74:dd:73:9a:
1f:6a:2e:7b:87:41:99:a0:6c:cf:6a:e6:12:8d:e9:e7:d7:70:
ee:16:88:36:ee:a6:9b:a3:42:b7:ec:8d:07:17:58:6b:e7:f7:
60:b8:ec:f0:3f:d8:31:c7:47:20:66:59:03:67:ed:17:cb:07:
ce:af:d7:f7:02:26:03:1c:84:7b:50:b9:18:df:4f:35:96:1e:
45:aa:4c:e9:1a:23:4e:81:c9:5a:52:8d:7e:66:19:98:20:e8:
5f:fd:29:96:35:0e:4d:87:fd:1a:52:02:01:09:1c:60:ff:dd:
7a:4d:0e:6c:db:58:b5:44:0c:70:dc:70:b6:a1:37:ff:be:b4:
f5:8c:41:8e:90:03:d5:67:cb:f7:83:03:58:19:11:6d:47:a7:
9c:1a:6f:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAar+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTI4MTEwNjMwWhcNMjYwMTA0MTEwNjMwWjAYMRYw
FAYDVQQDEw02OTI5ODIzYi1lMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4B4f7P5RteFeRGyS+hnG1UggrdLT2ktFgT6hKFgQLQkBc0mm1aPvhZyM
OjOiXFMVPK2g0ME7L8gFgoL2xDu7LAy+8jzBST7alxeTzNvY4w6wjHs9DVZV6KqK
5YYt4x6Xj8eybuc8Stoyu/GheSmNC35BTRZKEWmMvO802sfnrolEZshWVbYgSjmI
VNb/cs9xOeDv+H2uCbJ2jimRu3MQMsrxWrFMqonepbjXrmfKNjXYj4u6luBC3GGD
Is06V5BzhZFoyf/TAYJUhfK3nrckOVZuF4TRoD4Nv7JKYc9sst9o5eqZDrMcSVU/
t9sSucOEd6m6orsBLUXICioyIgnglwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGsS
WUwmaTFWB/4m05N9LPRajmr9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RDNDMDExMkNDNEExMUYwQUJGRDlCQkREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQA1NQqBFrXSBlfdhRzBKr3UnnD8OI195Dj9yREci5z5ta6Ry0QpBmm5
5i7Tlifn8LeTm5L0/NODyUMEN5xn9sRdLpv2Slf43i/f1U8FzhPtcDjAFccpIRTN
NaYqQf4cCLA2D7PeaH7BjXTdc5ofai57h0GZoGzPauYSjenn13DuFog27qabo0K3
7I0HF1hr5/dguOzwP9gxx0cgZlkDZ+0XywfOr9f3AiYDHIR7ULkY3081lh5Fqkzp
GiNOgclaUo1+ZhmYIOhf/SmWNQ5Nh/0aUgIBCRxg/916TQ5s21i1RAxw3HC2oTf/
vrT1jEGOkAPVZ8v3gwNYGRFtR6ecGm8K
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:20 2025 by rpki-client