This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E344A2C2C011F09F7761B3DAE4EC9C.roa
File: B5E344A2C2C011F09F7761B3DAE4EC9C.roa (raw, json)
Hash identifier: sSxTK6AyGAZK2n9y5VJniL7VPwG55hlC+vEVBiZKL5I=
Subject key identifier: C8:5D:B6:76:4A:25:17:A0:FE:88:B3:3C:C4:BA:3C:D0:76:FF:3C:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A928
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E344A2C2C011F09F7761B3DAE4EC9C.roa
Signing time: Sun 16 Nov 2025 07:48:59 +0000
ROA not before: Sun 16 Nov 2025 07:48:51 +0000
ROA not after: Mon 08 Dec 2025 07:48:51 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 25 Nov 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108840 (0x1a928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 07:48:51 2025 GMT
Not After : Dec 8 07:48:51 2025 GMT
Subject: CN=691981eb-8f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:b3:1c:8c:ff:f1:27:b2:12:0b:98:07:86:
9b:3f:97:9d:52:16:93:33:cf:c4:79:b8:6b:f7:7d:
9c:82:fb:d8:82:94:27:54:ed:0c:1a:82:7d:c3:fb:
72:4a:b4:d2:f7:06:4a:19:7a:9e:18:8f:2c:fd:01:
0c:75:98:7e:7c:a5:cd:95:dd:e4:9a:92:59:6d:ee:
0b:a5:17:50:ad:3d:46:75:d7:33:c6:03:e8:4a:a4:
01:5f:64:ad:e6:ca:8f:72:ed:7b:b5:28:5a:21:6e:
f4:a3:9f:8e:54:5b:61:20:26:ae:31:d3:29:a1:0e:
6b:59:00:49:d4:f5:c1:2a:c0:a4:5d:ea:50:03:38:
d3:14:3a:12:2c:e7:a4:43:02:8d:c0:91:b9:a2:55:
f2:2c:92:2e:49:03:1c:f1:b7:4f:23:9c:78:22:76:
75:27:8a:c7:d4:08:f5:4d:84:cb:df:ef:11:0d:77:
87:28:a5:1a:7c:b0:83:75:cf:03:80:b8:ce:f2:76:
51:41:3e:2e:e9:30:d0:00:74:59:ea:ff:0d:8c:b6:
04:a0:18:7b:9b:d5:d7:5f:5e:dc:ba:ac:9f:b5:50:
88:bb:0f:7b:94:41:ec:35:48:b2:b2:03:33:3f:4e:
9d:1a:92:bb:1a:e2:de:a0:6f:5b:29:c6:b7:1b:95:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:B6:76:4A:25:17:A0:FE:88:B3:3C:C4:BA:3C:D0:76:FF:3C:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5E344A2C2C011F09F7761B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fd:20:25:2f:a8:0d:1b:72:97:cb:83:cf:64:7e:3e:aa:ef:
3f:7b:8e:ea:34:36:da:01:ae:fa:0b:f7:a0:2e:c7:89:dc:bb:
a2:3e:f7:2c:28:4b:d5:63:eb:74:3a:b1:11:b4:0e:4d:1b:09:
75:67:6b:85:3b:4d:2b:72:69:1b:fa:cd:83:b9:72:05:7f:41:
81:34:c6:a3:33:8d:ff:c2:1b:30:f5:12:d3:58:63:13:1c:d4:
83:62:a2:3e:95:5c:f9:f4:6c:2d:1d:e0:a5:25:5b:2f:fe:4d:
90:7c:e6:84:9c:82:71:57:79:ef:89:57:b1:97:97:d4:da:da:
79:e2:4b:00:99:98:43:2c:bf:2c:13:cd:1b:e4:fa:0b:7b:d3:
94:a1:ea:29:97:d0:1e:0f:f0:99:67:7f:a7:08:80:81:a1:2f:
cb:b4:13:48:5f:19:a5:5b:0c:48:70:ae:bb:1e:a4:a6:64:23:
de:39:4e:86:e8:b2:25:8b:b6:e7:bc:a9:8f:e6:f5:20:d5:0a:
fc:9d:99:97:bd:e3:b8:00:04:2f:61:fd:53:ae:af:33:0b:ea:
27:d4:0e:ac:01:ed:a5:8d:fa:46:45:fe:4e:e3:23:30:3d:6d:
e0:83:e3:67:20:1f:41:2b:c0:42:6d:31:60:bf:c6:d6:8e:a3:
6f:a7:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 13:05:32 2025 by rpki-client