This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa
File: 8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa (raw, json)
Hash identifier: 5C+hEBMNjRF4cqm1NrcQC0QwwqKnzrdIKyJzRPpLnMc=
Subject key identifier: B3:DA:16:B6:D0:56:F5:7E:17:59:59:5F:85:2A:86:5D:63:16:F7:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AA2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa
Signing time: Fri 21 Nov 2025 12:49:40 +0000
ROA not before: Fri 21 Nov 2025 12:49:30 +0000
ROA not after: Tue 30 Dec 2025 12:49:30 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109102 (0x1aa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 21 12:49:30 2025 GMT
Not After : Dec 30 12:49:30 2025 GMT
Subject: CN=69205fe4-80a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:e1:a3:7a:d3:58:a1:a8:2c:52:f9:c3:c3:
10:05:64:af:56:82:bf:9b:be:79:4c:b9:0d:a8:f6:
19:bf:80:fc:f5:1d:99:8e:d7:f1:e2:37:54:04:0e:
8c:d6:ff:3f:31:28:36:40:21:c3:8b:b1:3d:ae:21:
f1:25:26:9d:44:99:56:ba:45:fb:1f:42:f7:e2:9a:
34:d2:85:9c:d2:74:34:bd:9b:c7:fe:44:47:1a:0d:
57:19:5b:fe:da:c8:1f:96:5e:64:61:36:e8:f0:58:
5d:13:c6:ca:29:99:46:ad:4a:79:6a:ab:34:dd:bb:
00:41:32:f2:1e:25:55:df:bd:71:c9:59:ca:3f:ba:
ac:36:a0:8f:7a:41:33:e5:09:f3:c2:61:63:8f:6d:
19:62:ce:8c:d9:d3:2b:64:20:f6:4f:30:e1:01:39:
ef:ca:cb:4f:31:58:57:d8:63:c8:c2:e5:4c:ab:27:
f6:28:13:f4:c5:8e:ab:18:f9:fa:9f:bb:b5:6e:19:
fa:69:67:46:bd:d6:76:a2:7d:2e:f3:22:92:9e:1e:
d5:86:68:57:9c:66:1f:69:f3:af:c5:53:2b:e2:6a:
f5:c1:87:78:c7:0f:9b:79:5b:8c:11:6e:5a:ff:72:
33:9b:51:48:17:33:f3:13:95:d6:f5:a1:16:92:8c:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:16:B6:D0:56:F5:7E:17:59:59:5F:85:2A:86:5D:63:16:F7:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
96:85:5b:63:b0:40:72:e8:93:b2:b0:83:84:92:80:a4:2c:29:
12:8c:3c:8f:a9:d7:d6:18:83:84:66:20:16:ab:f3:d2:60:2f:
8e:c0:e7:84:6f:8f:e8:dd:98:30:b2:c3:d0:cd:66:54:c3:04:
20:5d:b5:58:6b:b4:09:fb:22:48:ff:48:cc:af:01:dc:4b:35:
68:1d:49:52:5e:d6:c5:15:b1:48:16:86:6f:11:4e:b0:c7:b0:
6c:ea:1c:3c:7c:69:53:9f:11:2f:d4:a7:b7:c1:86:94:96:ad:
8d:81:23:2d:e7:4b:de:21:68:6e:03:d5:4c:b0:45:e2:bc:b0:
ca:ca:8a:82:23:a3:ac:32:ae:db:51:19:2f:93:e3:62:dc:2c:
99:dd:8c:03:30:24:3d:4a:be:0e:6d:7f:8a:d3:e5:da:fe:d5:
8d:0d:35:dd:24:ad:e6:b9:d4:92:25:aa:58:15:64:10:69:b8:
70:02:35:94:cd:2c:a9:48:b2:10:40:b5:30:0d:f5:35:ac:4b:
24:ec:41:07:c0:83:4c:a8:08:2f:19:17:83:79:41:13:e5:66:
06:88:9d:fe:1c:cc:e5:a4:7b:27:12:58:12:b4:48:a4:ab:4d:
9f:27:6f:71:a6:33:27:5c:d7:03:2c:a9:ac:b1:fe:dd:7c:02:
72:1b:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:28:58 2025 by rpki-client