This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/538D0634E04E11F08F5B82B3DAE4EC9C.roa
File: 538D0634E04E11F08F5B82B3DAE4EC9C.roa (raw, json)
Hash identifier: IkSyK7UEkrAapI6JbkTRof+oVuhwmRWJU7/aX+nECqY=
Subject key identifier: B7:18:96:42:5C:20:8D:E7:87:03:A0:7F:26:4A:EA:69:42:6C:71:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B07F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/538D0634E04E11F08F5B82B3DAE4EC9C.roa
Signing time: Tue 23 Dec 2025 22:25:47 +0000
ROA not before: Tue 23 Dec 2025 22:25:42 +0000
ROA not after: Thu 29 Jan 2026 22:25:42 +0000
asID: 214143
IP address blocks: 154.82.172.0/23 maxlen: 24
154.82.174.0/23 maxlen: 24
154.83.18.0/23 maxlen: 24
154.83.32.0/24 maxlen: 24
154.83.40.0/23 maxlen: 24
154.83.42.0/23 maxlen: 24
154.83.72.0/23 maxlen: 24
154.83.74.0/23 maxlen: 24
154.83.76.0/23 maxlen: 24
154.93.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Jan 2026 13:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110719 (0x1b07f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 23 22:25:42 2025 GMT
Not After : Jan 29 22:25:42 2026 GMT
Subject: CN=694b16ea-9aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:29:24:6f:50:fc:90:21:2f:f6:fa:10:1e:
97:c4:40:fc:38:d8:d7:5d:3d:e5:a2:46:59:2e:d8:
0d:1f:67:6c:63:82:c7:a5:dc:f6:dd:7a:db:f2:73:
7d:3a:5c:d8:6e:51:26:ba:12:98:15:be:96:50:9b:
2d:82:b0:d3:35:85:6e:38:99:04:1e:c7:67:f4:fd:
37:73:76:42:90:db:b1:dc:60:99:d4:33:9e:f1:46:
c4:87:41:9c:75:db:08:0d:5c:61:c8:1f:55:88:4b:
c7:25:c5:ab:65:b4:96:a0:aa:01:8d:7c:f4:1f:45:
83:00:95:c4:81:92:fa:7e:ec:37:32:d8:85:15:bd:
e0:11:be:af:c2:df:63:ff:02:5a:33:38:94:46:17:
0b:11:29:c8:04:5b:2c:29:a1:e3:bc:0c:8e:be:26:
4b:e1:2a:1f:ef:60:7a:37:94:52:5c:b5:32:ac:e9:
7e:1e:69:4d:57:f8:04:63:14:cf:99:a1:66:ee:8a:
e6:be:30:a6:dc:67:25:6c:1f:64:70:57:67:53:b1:
51:98:99:16:fc:2d:7a:c8:f9:bc:63:b6:7b:92:27:
6b:ad:f1:0b:0c:0d:ac:09:a7:e4:c6:d5:0c:f3:f7:
2a:38:12:fe:96:cb:6f:15:c5:3f:5a:4b:d1:42:12:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:96:42:5C:20:8D:E7:87:03:A0:7F:26:4A:EA:69:42:6C:71:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/538D0634E04E11F08F5B82B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.172.0/22
154.83.18.0/23
154.83.32.0/24
154.83.40.0/22
154.83.72.0-154.83.77.255
154.93.28.0/22
Signature Algorithm: sha256WithRSAEncryption
58:5f:e6:7b:8b:22:79:35:aa:1c:78:4c:61:d8:1f:45:f1:b1:
fc:c2:f3:5f:aa:c9:ac:e3:62:0b:37:1c:2c:d8:75:31:3c:7b:
08:e6:74:d2:e8:fa:52:6f:18:b3:76:25:8d:ff:a8:ab:c2:7c:
c8:2f:cd:f8:3a:a2:9d:42:aa:02:c9:42:8e:b3:11:d1:13:2e:
97:91:c0:a7:f9:c9:20:b9:f2:ab:84:6d:73:44:6d:30:07:c3:
3b:17:f3:36:da:49:2e:bd:34:63:0a:07:5b:2a:9e:98:0f:06:
c2:c7:ca:0c:6f:97:45:ba:55:3f:b9:44:6f:3f:16:40:0e:ed:
81:13:a6:fa:bf:99:f1:9f:5b:d3:4e:e6:d8:be:77:fe:04:0f:
37:c4:17:62:50:15:9c:44:f6:72:75:9d:52:18:e8:65:32:70:
07:82:7c:b9:af:40:bf:cf:03:5d:df:bd:7b:3a:0c:b4:61:32:
12:39:6e:25:4a:4f:9e:05:da:95:11:73:51:41:0b:c5:31:93:
6d:67:0d:6d:52:b0:5e:4a:c4:f3:f8:7a:3e:b9:71:32:4e:48:
da:21:2a:2f:20:cf:3f:70:30:3c:17:69:85:dc:75:bf:76:a0:
82:bf:ff:3d:2b:64:32:9d:16:d4:06:a1:1d:21:4e:18:6e:08:
c4:4b:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:23:29 2026 by rpki-client