This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F24240E16B11F08A5C0FCADAE4EC9C.roa
File: F0F24240E16B11F08A5C0FCADAE4EC9C.roa (raw, json)
Hash identifier: XsTrZeZUdu3l0W2WlkY/H98VOcdXWtdA0wrjS9cbzj4=
Subject key identifier: 88:15:8F:F9:44:59:5C:56:B5:E8:65:C2:C9:FF:88:71:23:16:D2:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B138
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F24240E16B11F08A5C0FCADAE4EC9C.roa
Signing time: Thu 25 Dec 2025 08:30:17 +0000
ROA not before: Thu 25 Dec 2025 08:30:12 +0000
ROA not after: Sun 01 Feb 2026 08:30:12 +0000
asID: 62240
IP address blocks: 154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Dec 2025 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110904 (0x1b138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:30:12 2025 GMT
Not After : Feb 1 08:30:12 2026 GMT
Subject: CN=694cf619-f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:fb:0a:ab:69:53:89:d0:48:a9:b5:04:77:
25:31:36:ca:13:b2:57:ac:ef:ff:1c:60:1d:8d:8b:
cf:c8:f9:ba:58:5e:47:b7:4e:9f:f2:63:f4:2d:7a:
6f:97:8a:f9:e4:ee:1f:62:6c:d1:02:fb:4b:7d:4a:
3b:f8:69:51:ac:24:b8:a1:6d:f3:35:b1:f5:74:c9:
1a:cf:55:69:f4:52:af:d8:70:95:30:05:7f:53:b8:
2f:54:3a:f5:bb:03:db:72:68:4f:e4:9c:fc:a0:b9:
5d:3f:6e:7d:47:44:93:23:59:b1:ed:08:44:69:ab:
61:5e:25:2a:7d:9e:db:24:f7:05:94:78:9e:ca:18:
60:3b:3a:a1:ad:7b:c2:bd:6b:dc:59:8c:0e:38:af:
94:6c:fc:d9:63:d6:f8:68:21:1e:9a:c1:1c:b6:22:
f3:9d:41:ba:b1:9a:49:61:e6:8d:46:36:06:bc:fe:
46:e8:07:4f:93:9b:5e:6f:0b:c3:08:70:e5:60:3b:
3f:a6:fb:82:8b:07:22:51:bf:83:a6:2d:ff:84:5e:
3f:3a:51:9f:ea:c6:18:c7:1e:b6:de:00:8b:07:71:
9f:4e:b4:e8:fc:50:f6:92:1a:55:ba:95:9f:5e:a7:
58:f4:8b:ff:9a:8d:5b:31:1f:43:ed:45:3e:4f:c2:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:8F:F9:44:59:5C:56:B5:E8:65:C2:C9:FF:88:71:23:16:D2:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F24240E16B11F08A5C0FCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.208.0-154.223.217.255
Signature Algorithm: sha256WithRSAEncryption
07:c2:5c:5d:85:3f:b4:a4:d4:42:06:9c:a3:23:d5:4c:ee:e5:
11:ac:f6:c8:9c:2e:9f:13:5a:fd:70:ce:e8:d8:8b:ce:4a:36:
cb:ca:b6:7a:d6:24:da:38:c6:47:1b:7c:af:44:2e:f8:91:ee:
8b:a4:f1:81:47:3f:98:a2:4d:81:20:4a:d6:eb:f5:5b:b6:67:
cc:d0:94:4a:ce:44:12:04:1b:18:09:7d:f0:5f:1d:e7:ed:c1:
5f:ad:db:4b:07:32:46:aa:af:0e:c7:ff:10:c5:7a:ff:01:5e:
9e:3e:a4:81:df:3c:46:d3:51:7d:e5:be:9d:7f:70:ff:6e:41:
c7:74:d5:72:21:c1:6f:74:6d:92:4d:07:b2:2e:61:51:ac:85:
24:43:d1:19:a2:d0:7d:9f:e8:65:00:00:51:32:12:fb:e7:b6:
32:af:81:01:99:88:2b:d2:01:d6:c8:a5:08:95:e3:40:99:9d:
23:f3:9a:22:30:36:28:19:94:01:b7:6b:d7:5c:92:b7:c7:4a:
b5:b7:97:e3:b6:7e:d9:80:94:98:7d:4f:cb:aa:6a:ac:8f:3a:
7f:25:69:24:df:bc:3a:d6:5f:5c:2a:97:bc:44:13:e9:23:3a:
39:5c:df:9a:e5:58:60:81:f8:57:9a:c8:6a:e2:6f:b6:f2:d7:
b8:0e:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:47:06 2025 by rpki-client