This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB53A2A8C3C011F0B08AE67FDAE4EC9C.roa
File: DB53A2A8C3C011F0B08AE67FDAE4EC9C.roa (raw, json)
Hash identifier: zmzzrYT3285saD27TBri4nh4KifFK7svVtKj3TSm4RQ=
Subject key identifier: C6:84:6D:CD:A5:1F:39:F2:DA:8A:24:CE:9C:08:59:D8:3C:47:1D:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A967
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB53A2A8C3C011F0B08AE67FDAE4EC9C.roa
Signing time: Mon 17 Nov 2025 14:22:33 +0000
ROA not before: Mon 17 Nov 2025 14:22:29 +0000
ROA not after: Wed 24 Dec 2025 14:22:29 +0000
asID: 13335
IP address blocks: 154.90.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108903 (0x1a967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 14:22:29 2025 GMT
Not After : Dec 24 14:22:29 2025 GMT
Subject: CN=691b2fa9-1e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:ae:9f:cf:7c:bf:98:8a:72:1b:20:f6:19:
cd:ca:09:39:e5:12:ec:8d:d8:2d:0f:a1:67:1e:11:
82:e4:75:8f:48:04:23:b4:cb:76:49:2d:85:ea:db:
d2:ad:86:c0:5f:e8:49:2a:0f:51:9a:34:6d:ac:a5:
83:87:59:e9:ff:b1:95:60:ba:29:58:6d:4e:0d:9d:
0b:f6:35:f1:76:e4:25:fc:1a:a4:3a:5e:be:9b:6c:
6a:fd:70:6a:0d:ba:02:3f:4b:bf:76:0e:c2:32:31:
56:aa:c1:a0:ea:4c:d9:26:2e:7d:73:ab:ca:32:4a:
4c:18:15:f5:e9:a7:b0:05:36:af:27:f0:e2:37:bb:
60:2b:87:2a:41:8e:e8:d9:79:ea:5f:6a:89:c5:2f:
2d:44:ae:6e:d5:6c:98:3e:02:37:b1:4e:87:91:10:
bb:98:5b:1f:5e:d9:1d:63:b6:ee:2e:43:6d:cd:44:
a5:b0:74:a4:53:4a:e2:c8:55:20:ab:ec:97:b9:d6:
61:3b:26:cf:c7:73:b9:98:c6:5c:bf:24:9e:a1:59:
0d:37:eb:2e:73:ff:a0:ca:02:a8:33:b8:06:27:ae:
28:f1:95:dc:35:2b:c6:bb:0b:b7:ca:b2:79:fa:aa:
e2:f9:fb:0d:9e:f9:f9:60:42:19:82:a0:d7:c7:98:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:6D:CD:A5:1F:39:F2:DA:8A:24:CE:9C:08:59:D8:3C:47:1D:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB53A2A8C3C011F0B08AE67FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:19:be:2a:fb:2e:d9:a8:1e:db:0c:16:ce:5c:ae:69:43:1b:
e7:04:9d:64:1f:0e:b8:94:ad:04:5d:c5:98:d4:93:7d:bc:bc:
1b:a0:0b:0a:cd:db:5d:00:ec:ca:c4:c3:e1:20:f8:2a:48:78:
69:b0:93:a0:1b:9d:46:41:7f:67:d1:87:1e:1b:c1:25:8d:4d:
ab:fb:07:79:79:75:ed:71:64:4a:e3:ac:77:86:78:da:98:d0:
8e:07:c6:b3:84:34:69:0e:18:d4:92:1c:85:75:98:2d:01:b2:
98:a3:dd:ad:bf:1e:ea:b2:fe:b4:4a:6f:f1:43:63:c6:8c:bf:
e2:5b:97:f8:78:e9:b9:0c:97:01:78:61:4d:f7:8f:02:fb:ad:
d9:16:c2:b2:3b:cf:06:ee:2c:60:b9:1f:96:74:f3:f4:ce:be:
8c:e6:62:08:d3:a1:5e:38:b0:8f:eb:94:70:07:10:aa:0c:33:
0a:94:66:ad:10:79:25:30:28:6f:8e:14:18:db:d3:05:04:db:
e0:6c:b3:b8:1d:33:ad:e6:e9:72:21:87:7b:0f:67:f9:f4:38:
5d:0b:01:7f:e6:cf:ea:ee:68:92:1c:2e:34:2c:7d:a3:b1:d9:
5e:f1:cb:fe:7a:c6:97:0e:c8:1f:7d:4e:b1:f8:42:88:32:75:
51:88:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:22 2025 by rpki-client