This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C7F98CDA7211F0B1196383DAE4EC9C.roa
File: A4C7F98CDA7211F0B1196383DAE4EC9C.roa (raw, json)
Hash identifier: r7ALf7P/BNrqieNgtzyy4Xppvg8bWGHOLsbFnFCCip8=
Subject key identifier: DC:01:02:C0:03:AA:79:2E:C3:CD:70:69:AF:31:14:99:0B:51:AB:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C7F98CDA7211F0B1196383DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 11:30:38 +0000
ROA not before: Tue 16 Dec 2025 11:30:33 +0000
ROA not after: Sat 16 Dec 2028 11:30:33 +0000
asID: 17561
IP address blocks: 154.202.129.0/24 maxlen: 24
154.202.130.0/24 maxlen: 24
154.202.131.0/24 maxlen: 24
154.202.132.0/24 maxlen: 24
154.202.133.0/24 maxlen: 24
154.202.134.0/24 maxlen: 24
154.202.135.0/24 maxlen: 24
154.213.193.0/24 maxlen: 24
154.213.194.0/24 maxlen: 24
154.213.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110225 (0x1ae91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 11:30:33 2025 GMT
Not After : Dec 16 11:30:33 2028 GMT
Subject: CN=694142de-d13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:25:d5:cc:fe:fd:36:fe:55:09:5a:c0:44:
af:fc:e3:e4:9c:22:d5:94:27:86:97:81:50:88:80:
88:5e:a7:ec:87:f0:de:7a:ec:13:4a:6e:9f:57:9c:
8b:0d:9e:97:31:02:95:b5:5b:67:67:45:76:c4:02:
9d:0d:f1:2b:8c:dd:7e:94:4f:b1:10:49:e4:8f:02:
0f:9c:2d:f3:f9:47:3d:66:9b:a6:6a:d4:bb:a7:46:
f1:d6:15:59:3d:54:79:09:3c:0f:99:46:47:6c:ba:
5d:34:0a:a2:76:34:a1:66:9c:8a:c5:b5:cd:1f:15:
3f:e5:c0:80:d7:97:cd:5a:7f:82:7e:a8:9f:7a:87:
55:ff:c7:16:ee:62:be:28:2d:20:f6:bd:11:97:6b:
2d:49:5d:7c:11:85:e0:05:fb:19:2f:ac:f0:9a:f6:
6d:84:d1:af:94:c9:62:56:b8:51:6b:78:bb:eb:d1:
ed:50:5d:2d:14:94:b5:79:59:1c:dd:6d:2b:2b:29:
33:41:4c:2c:7a:59:2f:ee:36:09:52:6a:83:a0:67:
b2:df:41:40:85:3e:b4:b7:a8:87:d2:93:ca:bf:ea:
fb:d9:57:57:90:c9:29:6c:4a:04:cd:3d:91:48:25:
43:1b:5b:39:3e:68:e7:9b:04:21:d9:25:59:4a:08:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:02:C0:03:AA:79:2E:C3:CD:70:69:AF:31:14:99:0B:51:AB:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C7F98CDA7211F0B1196383DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.129.0-154.202.135.255
154.213.193.0-154.213.195.255
Signature Algorithm: sha256WithRSAEncryption
0c:73:e9:b8:18:5e:76:56:22:b1:a0:eb:6d:d2:13:f2:f6:fd:
17:c5:6f:56:90:49:85:68:13:57:9f:a0:1d:80:25:69:f9:7c:
b9:8b:88:c1:a9:ff:a5:e0:e7:dd:45:40:3f:fb:4f:40:13:bd:
b6:ef:e2:36:c5:44:af:21:25:c5:2f:60:d8:48:5d:e7:b0:2e:
90:98:b5:f5:fe:32:61:2e:81:4a:42:41:a5:cd:41:47:4d:24:
10:85:f6:33:15:8b:95:e2:dc:ca:0d:a6:97:4f:1f:e8:fc:12:
df:4e:63:16:7f:d4:7a:6e:19:9a:80:43:6a:69:8c:97:36:d1:
b0:a7:a9:a4:d8:71:6e:81:7f:a5:dc:cf:85:f6:72:ec:5d:67:
d1:63:88:49:e7:15:4c:da:a8:6d:71:62:b1:d6:93:a8:be:be:
fd:26:43:c2:3c:b6:3e:e1:6f:c4:6a:0d:89:b4:bb:cb:dc:de:
71:5b:1d:d8:05:00:9c:ce:5a:4e:10:fa:f0:91:4a:4d:68:d3:
61:3f:b1:cf:f5:c2:ed:f9:9a:96:77:54:d3:88:3f:36:aa:e0:
38:c2:ba:74:37:2a:42:55:c4:ca:c2:c8:83:53:9a:c2:f8:9e:
77:8a:26:d5:ef:d0:e3:41:4f:78:ab:e4:30:1c:75:d9:43:5f:
ba:5f:2d:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:09:32 2025 by rpki-client