This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD165894CFF411F0A3E7B3B2DAE4EC9C.roa
File: CD165894CFF411F0A3E7B3B2DAE4EC9C.roa (raw, json)
Hash identifier: tLl/geUuXwtmRSHAJKdGUV4LNYnR58U8+IJdAIt2Q28=
Subject key identifier: 19:07:26:F1:B1:75:7D:AF:69:89:58:7D:0D:9F:62:F8:42:25:C7:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ABFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD165894CFF411F0A3E7B3B2DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 03:04:37 +0000
ROA not before: Wed 03 Dec 2025 03:04:32 +0000
ROA not after: Thu 01 Jan 2026 03:04:32 +0000
asID: 44559
IP address blocks: 154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109562 (0x1abfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 03:04:32 2025 GMT
Not After : Jan 1 03:04:32 2026 GMT
Subject: CN=692fa8c5-82ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:3d:16:63:88:f7:8d:9b:fd:a0:29:61:f6:
c0:09:82:12:18:b0:37:da:0c:07:57:2e:d4:9f:39:
0e:6a:23:88:05:81:1a:91:aa:54:3b:3a:f2:8f:7c:
26:aa:54:9c:8a:bb:4c:20:f7:74:62:7a:00:1b:8a:
13:79:8c:79:e5:24:06:60:e6:d7:5f:2f:ee:9c:aa:
25:8b:d9:73:29:39:14:5e:d2:73:d3:2e:6a:4d:45:
0a:03:ec:48:6e:d1:a1:07:7b:41:35:05:56:da:85:
f6:ba:30:f9:d7:29:be:e3:50:6e:4b:f9:22:71:3b:
63:77:44:7e:eb:e1:0f:8b:59:17:27:51:23:fe:7b:
77:e8:83:15:fa:27:4f:40:35:df:e4:2a:34:29:a4:
61:d8:c5:18:05:8e:b0:d1:52:e9:49:b5:87:3f:a9:
a8:25:24:0e:cc:90:16:f4:d7:d5:ad:fa:f5:57:c4:
bc:99:84:03:05:1e:c7:16:8c:5d:25:cd:f5:c4:cb:
e3:01:df:da:26:58:f5:49:bd:c4:0f:57:03:9f:52:
28:f9:60:88:f3:77:c5:65:d4:1e:72:db:48:1b:28:
86:17:ca:d6:dc:8f:de:3a:47:bc:95:f9:09:c7:38:
a7:84:df:d2:7a:45:04:1c:ae:82:bf:17:e2:b1:91:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:26:F1:B1:75:7D:AF:69:89:58:7D:0D:9F:62:F8:42:25:C7:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD165894CFF411F0A3E7B3B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b1:93:9c:a4:3d:54:c0:1c:80:33:30:c5:07:f5:ca:fd:d1:
ea:a4:b5:29:2f:13:94:1f:91:5d:77:5f:4f:5b:2b:8c:64:c5:
68:0e:c6:11:14:66:e7:78:02:82:bc:35:0c:3b:02:53:38:1c:
d2:be:49:bc:e1:37:be:6f:95:5c:41:1d:ec:8a:99:91:f3:d4:
dd:66:a4:1a:47:a6:fc:2f:91:a2:e4:50:56:60:30:9d:d7:e1:
42:9e:72:e3:95:cd:c7:c0:df:85:b6:2e:18:93:cf:95:db:2d:
08:8e:c9:0b:2b:7b:53:14:7b:d9:73:e6:bb:18:17:ed:60:6c:
fa:c0:f9:1b:f7:5f:87:54:cf:73:fc:55:dd:c9:17:30:94:18:
95:1e:b8:f9:4f:99:ee:b4:97:fb:03:e8:04:92:9b:2b:6b:35:
5d:20:38:7e:5d:7c:d2:19:dc:b1:93:13:1f:66:61:02:8b:ae:
75:93:42:fe:f1:42:65:d9:45:3d:16:d6:c8:6e:2a:8c:fe:bc:
db:1e:d7:1e:76:51:31:d4:f6:d3:cb:55:07:31:58:13:9b:9a:
95:10:80:8c:27:3a:5f:69:d3:53:15:5b:74:37:15:5b:da:69:
53:b0:d1:3b:3d:bc:2b:e4:ad:a9:2f:82:e0:81:c4:a0:5e:2c:
c9:60:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:33 2025 by rpki-client