This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3955398B57611F09AE16DE7DAE4EC9C.roa
File: D3955398B57611F09AE16DE7DAE4EC9C.roa (raw, json)
Hash identifier: xjhE1S6j2ITv2RYqSG8eD/tAsEG4heXsWQpnGIP8eXA=
Subject key identifier: 8B:06:E4:E1:FF:4E:73:6A:D4:7D:A4:37:9F:9F:C0:11:78:C3:8F:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3955398B57611F09AE16DE7DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 09:57:21 +0000
ROA not before: Thu 30 Oct 2025 09:57:17 +0000
ROA not after: Sat 21 Nov 2026 09:57:17 +0000
asID: 201390
IP address blocks: 154.91.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108201 (0x1a6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 09:57:17 2025 GMT
Not After : Nov 21 09:57:17 2026 GMT
Subject: CN=69033681-5842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:a2:33:65:0a:9d:1b:e7:ad:d0:f9:02:6e:
24:ab:94:b5:67:62:38:13:51:06:f3:f9:8a:f1:c3:
7f:02:d9:fe:85:1f:53:20:2a:a5:60:20:70:3d:01:
90:22:ba:93:2a:21:b7:84:7e:d4:a6:e8:85:ad:b3:
e9:4e:b6:94:22:0e:93:6f:b7:11:58:2a:0f:de:43:
c8:59:92:09:b3:40:a6:a7:9b:65:d4:2a:06:42:3f:
d1:15:39:81:53:c5:fd:3a:29:02:46:08:77:09:df:
d8:7c:5e:ce:54:31:53:fd:30:a2:be:39:6d:37:4f:
4c:31:88:7e:4f:20:78:65:a4:75:47:75:da:71:b8:
fa:1b:de:11:fc:26:49:27:f4:1f:12:a3:f6:96:aa:
34:70:b0:a5:d4:53:bc:d9:9c:45:78:06:ac:8e:82:
ee:cd:6a:37:5e:db:71:ab:92:d9:9c:a2:eb:70:63:
6c:25:fc:87:ec:5d:db:5f:c0:75:0a:76:20:62:3b:
86:01:ab:79:51:74:de:f2:87:a7:07:92:d8:41:d5:
42:d5:f0:55:17:42:78:21:3a:5b:eb:f5:1f:e9:60:
5f:b2:8f:f5:a8:96:a8:bc:e1:83:e5:56:9f:75:af:
22:ea:61:1f:eb:a4:f8:50:5b:6b:5e:3b:44:34:c3:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:E4:E1:FF:4E:73:6A:D4:7D:A4:37:9F:9F:C0:11:78:C3:8F:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3955398B57611F09AE16DE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.2.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b4:77:e9:b9:86:0a:80:5f:58:aa:78:fa:49:16:37:34:63:
42:77:f0:07:ee:18:24:46:79:a2:26:14:7b:dc:77:c7:cf:ab:
95:f4:91:a5:82:c2:51:26:62:5e:71:60:91:b2:7e:a9:bf:cc:
85:68:a6:71:6c:53:24:d4:e8:33:0b:cc:9f:21:6f:21:50:1a:
c1:e2:a2:80:22:17:40:5d:f7:57:01:75:90:14:fc:be:aa:ca:
a7:b4:1d:0c:f0:d5:13:6a:a6:9a:fe:a3:42:00:b5:bb:87:b3:
72:a4:ec:d4:28:35:dc:e5:b9:4b:e0:43:c2:4d:f8:d3:f0:78:
6a:e1:fc:e2:4c:5d:b6:3d:9c:af:0e:ff:7a:5b:d3:d8:61:47:
13:2f:c6:31:5f:97:75:57:1b:b8:62:62:b4:d6:2b:dd:b7:6b:
ef:fe:6c:3e:d7:15:33:de:ce:16:75:39:31:a8:4e:1a:c6:a3:
a3:17:3a:50:e9:3f:0b:00:c7:2c:64:15:20:84:1a:6a:b5:ba:
64:2a:13:dd:66:c0:c4:7d:52:b0:c5:c4:25:58:ba:be:e5:59:
48:04:84:d4:8d:a8:ad:62:47:fb:fd:74:11:06:3e:aa:c1:f2:
fb:1f:4d:95:9e:64:1e:7b:98:6d:a6:b5:9f:dc:6e:6b:3a:70:
1a:6b:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:09 2025 by rpki-client