This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa
File: A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa (raw, json)
Hash identifier: FPn34pgCjuP6cAh/SurMOHy9xbj0AlBjoeYkZypc8vQ=
Subject key identifier: 71:7E:40:4E:6E:BC:CA:4C:0E:8D:5B:07:E9:EC:B3:93:CE:17:3E:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AAD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa
Signing time: Thu 27 Nov 2025 11:31:42 +0000
ROA not before: Thu 27 Nov 2025 11:31:37 +0000
ROA not after: Sat 03 Jan 2026 11:31:37 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109269 (0x1aad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 11:31:37 2025 GMT
Not After : Jan 3 11:31:37 2026 GMT
Subject: CN=6928369e-9f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:79:24:c2:64:cf:de:8c:bb:4f:c4:ad:dc:
7d:d6:68:56:d7:38:b1:c7:e3:b4:d9:2b:97:d6:46:
7b:fd:39:4d:7b:68:16:e6:36:f7:04:76:91:c1:db:
9c:4d:f4:d8:e4:b3:d6:bc:bc:5b:a1:ee:48:19:2f:
12:25:01:b4:47:b5:77:7d:dc:08:82:40:31:98:16:
00:96:a7:78:58:7e:9d:ea:5a:e7:39:4b:4a:5a:52:
25:5a:a7:fc:25:18:72:18:f7:24:64:8e:2d:00:1e:
37:f2:27:06:1a:47:15:3a:eb:e0:c6:01:92:22:29:
c8:ef:14:24:85:2d:d7:59:d1:f6:f0:bf:3d:ba:04:
7a:99:d4:6d:b9:1d:a0:06:ab:33:39:19:60:1f:03:
31:5d:1f:f2:75:85:a6:b7:d8:c6:6f:74:8d:a0:ad:
64:66:0f:aa:91:1d:4d:7d:0b:df:7d:4b:6a:3a:0b:
e8:a0:4a:f3:7c:17:51:c1:48:0d:a7:e7:3b:81:76:
8b:03:67:d4:09:a2:5b:42:2a:86:b3:99:bf:6e:05:
dd:a0:61:28:10:de:48:3e:d8:73:f0:ce:73:5b:f8:
54:38:48:1f:51:14:dd:39:83:a9:fc:98:85:9d:4f:
89:b2:a6:de:07:b1:ba:45:79:e0:4b:12:08:21:bb:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:40:4E:6E:BC:CA:4C:0E:8D:5B:07:E9:EC:B3:93:CE:17:3E:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
51:21:53:ac:e8:4d:21:34:e0:60:28:73:bf:bb:f6:9d:0f:6e:
18:87:09:8a:5d:9c:69:19:7e:73:f2:7b:6e:38:2d:e7:5d:63:
ba:83:c3:3c:c8:eb:19:74:cd:7c:3a:ec:9c:5f:75:3e:ba:b9:
b9:b5:d4:39:b9:1c:b7:e5:40:91:35:71:af:dc:c3:e7:cb:68:
11:40:45:01:1e:03:97:e5:c2:ee:a0:5e:ed:54:a0:32:67:64:
27:30:d9:11:d7:14:ff:da:02:9e:cd:bc:b4:c0:7c:ca:60:67:
04:98:83:da:5d:20:1a:7d:b5:b0:8d:b9:18:62:78:ff:58:86:
5f:e6:ef:6b:aa:1e:29:cb:88:b6:49:6b:18:dc:8d:23:bf:7d:
ce:6a:52:bc:87:eb:c4:89:92:eb:75:f2:97:c9:35:7c:bd:c7:
0c:c4:30:20:0a:fe:57:92:23:28:ca:84:94:f5:df:98:20:46:
ed:22:76:1b:b5:c4:4f:12:c6:ea:81:8c:f9:06:90:78:6a:87:
33:bd:d1:4d:45:7c:19:e9:a9:f1:f2:2a:20:12:6e:05:9e:94:
01:6b:a2:86:b3:28:e9:47:f7:9d:ab:4c:7c:12:af:ee:62:78:
16:0a:b6:d3:d4:59:ea:bd:4a:8a:ad:a7:d9:6a:3b:43:e6:39:
4f:f5:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:13 2025 by rpki-client