This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8922096DF0F11F094CFF4F2DAE4EC9C.roa
File: A8922096DF0F11F094CFF4F2DAE4EC9C.roa (raw, json)
Hash identifier: W2IEN0WRCucMVU8+LWx8UJ55gOrCzsoIC2Z4EXvUD4w=
Subject key identifier: 57:9F:B0:D0:67:85:9B:82:12:DE:89:55:2D:A3:40:BF:F6:ED:B5:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AFD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8922096DF0F11F094CFF4F2DAE4EC9C.roa
Signing time: Mon 22 Dec 2025 08:24:40 +0000
ROA not before: Mon 22 Dec 2025 08:24:35 +0000
ROA not after: Sat 03 Jan 2026 08:24:35 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Dec 2025 08:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110548 (0x1afd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 22 08:24:35 2025 GMT
Not After : Jan 3 08:24:35 2026 GMT
Subject: CN=69490048-d7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:2c:07:16:35:85:65:5d:1b:a0:f6:77:3c:
da:4f:58:7a:55:d1:0d:9a:a2:55:b2:8d:be:a6:6b:
dd:52:04:24:38:90:77:a4:9a:bd:d6:a9:ca:43:3b:
f4:bd:43:10:9b:27:5a:cd:1e:63:45:23:59:b8:fa:
2e:c3:88:33:33:5f:68:30:75:df:d2:a5:70:01:4a:
e8:10:c9:bb:20:3a:1f:85:f3:af:48:9e:ed:6a:aa:
24:80:de:9f:b9:c9:6b:52:6b:02:c8:de:7f:f0:8a:
0e:f3:98:d5:fc:95:76:46:2b:84:49:68:9a:40:d7:
30:34:3e:84:45:db:2a:79:0d:f2:8a:1d:78:9a:88:
c9:5d:c5:a9:c4:a0:18:d9:7f:14:2c:84:e5:3c:e0:
91:98:5d:db:f4:52:d4:20:23:c8:14:31:13:13:41:
bb:fe:ef:38:e6:34:1a:ba:b9:5d:bc:e8:79:7b:97:
34:f7:f6:c1:1c:28:96:4c:e1:66:25:81:95:51:ea:
77:96:61:c7:d8:d7:d5:33:df:c2:b7:e1:d8:2b:05:
56:95:ef:e1:d3:38:99:9c:3f:c6:15:97:4a:74:a1:
79:87:ea:75:d2:f4:67:0c:0a:9e:e5:11:c9:5b:65:
fd:c7:06:c0:3f:a8:0f:21:5e:b7:23:bb:08:0d:04:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:B0:D0:67:85:9B:82:12:DE:89:55:2D:A3:40:BF:F6:ED:B5:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8922096DF0F11F094CFF4F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.166.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:02:62:a7:88:16:c0:b0:7f:d6:06:db:bc:d9:f7:14:6c:af:
36:f9:69:f6:47:be:7d:de:50:a7:0d:0e:a5:5a:07:d9:a0:7f:
f5:f7:cd:df:90:e0:96:13:fe:24:52:df:d3:9e:15:a3:9f:3a:
01:bd:89:9e:c8:17:4f:8a:55:55:98:ab:94:aa:78:03:54:0a:
71:84:b1:f8:ad:b0:cc:e5:18:52:be:53:10:1f:5c:90:b0:d2:
22:4e:13:66:2e:e3:a1:81:ae:31:6b:30:29:15:89:5c:37:c5:
87:25:86:49:6d:e8:4c:06:a1:51:1f:b1:40:20:25:cd:83:77:
8a:45:cb:f2:79:d0:77:a7:2a:a0:48:ea:13:74:d2:7f:19:3e:
1b:e8:93:04:4a:eb:ce:81:75:8f:bd:fe:7a:9f:a2:ae:4f:3d:
c2:33:38:9d:7f:0e:2e:41:63:81:88:22:f8:53:38:83:c5:bd:
94:57:a7:f4:d0:f4:72:81:e0:f3:a9:7e:37:b9:58:09:44:fc:
60:36:d5:4b:94:4b:41:7b:b8:c6:32:e2:bf:b8:6b:ce:15:bc:
82:d2:5d:0e:0a:58:ac:50:85:a5:77:10:ab:10:3a:4a:63:bb:
f6:e0:45:be:8f:14:c7:be:1e:9b:73:46:2b:13:18:65:b3:e4:
90:1f:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:38:01 2025 by rpki-client