This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC8D234BFBF11F09C043AB8DAE4EC9C.roa
File: AFC8D234BFBF11F09C043AB8DAE4EC9C.roa (raw, json)
Hash identifier: ZkUpEtcYJCIXjrpnrI9v7IZQXZY+6+um5HQK3jQgqcU=
Subject key identifier: F6:67:D6:2C:FD:D1:7F:6F:C2:81:63:0F:80:F7:ED:65:05:17:DB:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A892
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC8D234BFBF11F09C043AB8DAE4EC9C.roa
Signing time: Wed 12 Nov 2025 12:04:06 +0000
ROA not before: Wed 12 Nov 2025 12:04:01 +0000
ROA not after: Mon 18 May 2026 12:04:01 +0000
asID: 55020
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108690 (0x1a892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 12:04:01 2025 GMT
Not After : May 18 12:04:01 2026 GMT
Subject: CN=691477b6-0428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:3b:fc:55:96:7a:83:85:ce:bd:6f:9f:92:
e2:14:0f:b1:c1:7a:23:4c:44:c6:b7:c6:ac:03:71:
07:d2:fe:50:13:bd:16:24:f6:1e:68:a1:39:f1:1e:
ef:6f:72:95:77:29:54:d7:a2:90:a1:27:45:1d:78:
cf:d7:19:f9:bc:e7:88:17:60:06:92:93:b3:58:d8:
b8:19:45:b0:45:86:8a:0c:07:bb:02:e8:9b:7a:1b:
76:0b:7a:67:e7:0a:09:4a:de:97:25:77:10:dc:20:
dc:84:ac:a2:35:4f:d4:71:46:20:36:af:1f:e3:ec:
45:f9:eb:f1:67:23:0b:4d:1d:13:bb:f2:6b:12:72:
99:1f:9a:fd:ad:22:cf:e0:f8:75:ff:53:a5:eb:c2:
83:4f:7d:81:bc:c9:9e:5c:41:c7:67:75:14:db:5a:
53:fa:07:71:bc:68:42:74:33:ff:5b:9a:34:a5:b6:
51:8e:e3:6d:32:fa:5a:08:a9:4c:ab:25:3b:23:e3:
c4:de:e3:8d:3d:62:11:47:39:73:6b:f0:8b:39:1d:
f9:ce:60:d5:c3:21:79:d7:12:14:58:8a:40:85:55:
64:88:30:07:db:b3:d3:c7:a3:5c:0e:40:e3:e6:72:
8f:89:29:48:47:0f:bc:d6:41:83:e6:f0:a3:1f:f6:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:D6:2C:FD:D1:7F:6F:C2:81:63:0F:80:F7:ED:65:05:17:DB:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC8D234BFBF11F09C043AB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
12:de:db:36:8c:60:d3:67:20:76:f9:a4:1a:1b:5c:6a:c5:ad:
d4:34:26:02:48:b4:6b:0f:76:a8:ea:d3:23:1a:b6:47:86:a8:
f8:bd:2b:15:b6:09:7f:6d:aa:f0:33:94:97:c9:03:38:78:87:
73:9c:34:97:bb:81:80:89:f2:ed:55:91:78:bb:00:a0:d6:d4:
f0:b0:df:29:1c:d1:04:72:9e:6c:db:c5:98:2f:2a:ab:06:91:
40:10:af:f8:de:e4:83:f9:92:5c:22:78:a0:8e:37:7a:98:e9:
eb:b9:22:39:89:d1:17:a1:95:a9:a3:17:7b:9e:c4:eb:33:fa:
eb:69:96:d6:11:01:aa:31:d0:85:b0:21:37:4c:1e:f1:87:a1:
87:7f:d6:c5:72:e4:58:78:75:e7:3b:72:3f:a2:4d:7b:fd:db:
6b:34:e8:61:3b:ef:e7:9d:0b:9d:b0:5c:d4:05:16:e6:b9:07:
5a:64:37:a8:f4:cb:c5:35:41:a2:c8:9b:c5:18:dd:f7:22:08:
4d:df:ca:0b:54:c4:dd:72:e5:67:cf:f4:ce:5e:a9:5a:84:73:
6f:15:ef:b6:6b:e1:bc:c4:5a:c1:d2:be:af:c4:d0:ac:22:7b:
ba:73:2f:a0:ac:c6:3d:52:52:80:87:9e:5c:46:97:c8:d9:08:
bb:b1:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:23 2025 by rpki-client