This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B42A82EBF0211F0A59E348CDAE4EC9C.roa
File: 5B42A82EBF0211F0A59E348CDAE4EC9C.roa (raw, json)
Hash identifier: HWDCCJkf/njQkTINRQ4Fe5WMeXmE0cwouuhJ7N5eZbw=
Subject key identifier: 1B:F6:CF:CA:D0:D5:A2:22:80:EE:4C:DC:48:79:41:DA:A1:31:2A:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A84A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B42A82EBF0211F0A59E348CDAE4EC9C.roa
Signing time: Tue 11 Nov 2025 13:28:49 +0000
ROA not before: Tue 11 Nov 2025 13:28:43 +0000
ROA not after: Thu 18 Dec 2025 13:28:43 +0000
asID: 984
IP address blocks: 154.90.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108618 (0x1a84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 11 13:28:43 2025 GMT
Not After : Dec 18 13:28:43 2025 GMT
Subject: CN=69133a11-68a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:fd:bb:06:3e:9e:f6:4d:a7:76:07:d6:3f:
ca:2e:64:1d:6a:d7:4e:8c:29:77:03:2f:d4:2b:ce:
8d:4e:e7:a4:80:9d:59:ef:cb:59:55:31:af:25:67:
94:33:ca:f5:85:45:17:7e:fb:01:67:8d:0e:0a:77:
bf:4b:da:bc:0e:2e:a2:0a:8e:ce:1d:9c:58:80:3b:
1a:fe:eb:bf:dd:a2:a3:dc:3f:2a:4e:ac:f6:12:3f:
70:1b:30:77:f8:0d:44:6e:40:b7:46:0b:d9:0a:c2:
9d:ea:06:5a:da:81:84:da:92:c7:4d:69:8f:c3:cf:
16:46:2f:e7:70:99:a0:e7:5e:08:66:30:94:31:69:
0c:18:2c:7e:cb:f1:b4:f0:c9:ed:71:81:8b:be:a9:
fd:f0:fe:8a:33:79:08:ae:5a:1a:55:85:6a:14:fe:
64:77:94:a5:50:74:12:8f:a5:d7:71:87:c3:29:ec:
fd:12:ce:74:5a:0b:60:25:c1:ba:98:10:03:1f:fd:
7a:42:82:14:20:89:14:be:da:dc:ef:1c:d9:38:cc:
5e:51:bc:1e:19:e2:e9:08:3f:33:e2:8f:3f:82:98:
5e:16:b1:1a:49:4d:1c:ec:44:21:b2:dd:48:22:02:
b4:91:44:c9:ad:9c:3c:2b:e3:7b:8f:e2:e6:bf:e8:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:CF:CA:D0:D5:A2:22:80:EE:4C:DC:48:79:41:DA:A1:31:2A:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B42A82EBF0211F0A59E348CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:75:14:33:cc:73:68:4a:8e:91:a6:47:c9:50:c1:49:95:e0:
64:ed:64:55:d6:8b:18:f4:94:fa:0d:98:28:03:5b:d6:01:b5:
87:aa:33:57:39:f9:73:1a:4c:6f:31:4c:93:80:c2:d5:53:c9:
54:16:2f:c8:59:b9:6b:d5:29:1d:d2:5e:cd:4e:01:4f:68:4d:
85:49:a1:81:7b:25:2e:92:e0:e1:13:ff:e7:59:b1:91:7b:8e:
a4:2d:61:6c:05:1a:85:fe:83:c6:dc:59:f1:0b:c6:2e:36:5b:
7c:3e:f7:dd:e1:c9:cf:b5:27:f0:84:45:ba:dd:8e:5e:e5:91:
ee:cb:4f:2c:61:e7:fa:f3:1e:00:7d:94:b6:59:f8:f3:82:77:
9c:bb:28:7f:ba:2f:69:3b:f5:33:a0:4b:f8:a7:7d:25:3e:9c:
31:d3:17:d2:76:33:29:97:24:f7:ef:8c:02:c4:66:ac:22:ea:
43:47:69:04:dd:c6:a9:42:53:e3:5d:94:af:6b:f4:51:82:74:
89:34:98:54:c9:da:3c:e3:05:40:ee:9b:28:4e:21:ac:bc:0d:
36:e4:e5:2f:dd:50:a8:27:c9:c9:3b:ec:f4:4e:3f:34:fa:27:
9c:04:82:fc:3b:17:71:38:b1:03:b9:db:f5:1e:e2:17:68:2d:
90:08:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:07 2025 by rpki-client