This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD0C398CC4311F0B4C16695DAE4EC9C.roa
File: 8AD0C398CC4311F0B4C16695DAE4EC9C.roa (raw, json)
Hash identifier: odfw2K7HkstGl8AuKClbH2GxelNhzMfasOlCc4wzpB8=
Subject key identifier: 1A:67:6C:CE:26:EE:82:A4:06:7C:8C:D0:50:F0:11:AC:D0:8F:38:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AAEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD0C398CC4311F0B4C16695DAE4EC9C.roa
Signing time: Fri 28 Nov 2025 10:18:11 +0000
ROA not before: Fri 28 Nov 2025 10:18:07 +0000
ROA not after: Sun 28 Dec 2025 10:18:07 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109294 (0x1aaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 10:18:07 2025 GMT
Not After : Dec 28 10:18:07 2025 GMT
Subject: CN=692976e3-535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:d7:b9:e0:66:62:21:f6:2f:a6:7d:83:4a:
ce:cc:84:98:c0:d4:3d:46:d3:9e:83:d7:04:e8:5b:
9f:f9:b1:4d:5c:d6:56:ea:7a:ac:99:db:a0:52:9b:
b9:96:b6:06:12:9d:6b:8e:b3:0d:c5:7f:a6:6a:af:
e8:c1:b1:bd:1f:d8:99:d0:3f:3d:0d:ee:a7:d8:2f:
f0:88:fa:b5:cd:15:41:25:df:bd:6b:89:da:3f:de:
58:b2:98:96:2c:be:6c:29:5c:7a:6c:03:1c:bf:96:
a6:2d:ec:cb:f0:f3:5c:cf:2b:36:0b:ce:f7:f1:b0:
c8:92:de:b1:f8:69:92:c8:88:09:da:6f:73:9b:40:
6d:11:7f:59:6d:dc:34:d9:f5:5e:1d:ff:49:2c:f4:
35:2c:18:83:a0:78:08:53:af:26:a6:49:58:9f:3f:
d3:e8:67:f1:00:9f:7e:0d:d0:08:9c:b5:e4:23:b7:
65:e4:ff:40:9c:0b:cc:fa:6f:0b:99:fb:91:10:e2:
0b:a0:47:f2:4b:1b:43:8a:30:ef:55:ab:b9:2c:e2:
6b:8e:94:fb:37:07:e5:36:93:d0:10:e9:d7:6b:78:
8c:0b:32:76:e4:00:dd:ae:51:06:16:33:cb:ca:12:
68:c9:48:79:8a:fb:f5:a7:e4:33:4f:93:12:43:44:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:6C:CE:26:EE:82:A4:06:7C:8C:D0:50:F0:11:AC:D0:8F:38:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD0C398CC4311F0B4C16695DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ce:86:4d:91:bc:1a:76:76:ae:49:12:db:b6:a1:40:6e:8e:
1c:8c:a8:1d:8f:21:1d:80:03:f2:94:ce:aa:0a:fd:ec:fc:30:
5b:2e:18:cc:df:40:ba:b4:99:c0:09:17:fe:c4:0f:8b:dd:91:
25:87:37:cc:85:cc:0d:68:07:05:69:5f:40:5d:2c:86:06:1f:
5f:c1:fb:0f:10:19:93:25:27:54:da:33:f4:9b:88:9c:c2:ce:
d5:31:c8:68:0c:dc:4f:62:b7:19:29:49:02:2b:51:d7:78:bb:
a1:6b:3b:a5:73:4c:28:c8:cc:ed:5a:e7:3f:13:3e:54:83:b3:
7f:92:19:59:70:c5:44:54:59:49:c8:6f:ba:3a:0f:34:35:b5:
73:96:5d:35:b8:5f:42:4c:68:65:46:d2:c1:41:73:eb:cb:49:
bd:6a:f0:7a:6c:2a:26:b4:e4:bf:cf:fc:05:84:3b:e3:64:99:
f2:87:09:12:09:58:75:f5:b4:ff:2c:f5:86:92:7b:d5:d1:89:
53:24:98:17:66:21:da:d3:71:cf:ba:09:f8:72:c9:22:6d:b5:
22:a6:a4:ba:ab:7d:e9:b9:93:95:22:21:a9:df:4c:9f:5c:56:
11:58:58:fb:93:68:86:9e:e2:d8:bb:b1:06:66:b4:ea:d5:b0:
42:e6:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:08 2025 by rpki-client