This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F725A30EC13711F0B5359384DAE4EC9C.roa
File: F725A30EC13711F0B5359384DAE4EC9C.roa (raw, json)
Hash identifier: hL9G0zv4h9+fzVUQWj1gKbfCqCea9uYmrF+BqxVRDxs=
Subject key identifier: 22:E4:94:83:E3:13:20:3F:85:91:8A:27:B4:F6:0D:61:54:BF:F0:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A8F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F725A30EC13711F0B5359384DAE4EC9C.roa
Signing time: Fri 14 Nov 2025 08:57:36 +0000
ROA not before: Fri 14 Nov 2025 08:57:31 +0000
ROA not after: Sat 27 Dec 2025 08:57:31 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/22 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108792 (0x1a8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:57:31 2025 GMT
Not After : Dec 27 08:57:31 2025 GMT
Subject: CN=6916ef00-00d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:6d:f8:4c:2f:b4:40:dd:12:9d:8a:7b:f6:
2d:14:63:9d:90:85:12:42:aa:c7:b2:f0:ec:09:26:
7c:6b:6d:19:2a:5d:9b:37:67:63:23:33:ff:a6:fe:
07:e6:3a:85:79:d9:28:20:28:1e:55:b4:10:3c:42:
09:81:d3:bf:e8:da:ee:62:c8:10:2d:3e:87:82:01:
7d:62:c7:97:64:0c:7d:5f:7f:05:75:9c:02:fd:c5:
24:03:ff:21:6b:69:92:05:3a:2a:f6:2f:97:63:39:
4b:2d:e4:7e:72:5a:55:a8:e5:dd:b6:3d:9b:ab:8e:
2d:36:40:56:a8:9b:d5:81:65:d1:a9:b2:f1:57:c6:
0c:d6:43:a2:3d:65:fe:ba:29:34:ad:ec:cf:88:7b:
00:bc:9d:2f:e2:81:3f:20:f4:2e:95:a9:92:d1:7a:
58:3e:2d:8e:4c:66:f3:a7:bd:8b:8b:50:ff:7c:b5:
ef:1e:7f:13:4e:9d:53:64:4c:50:d2:d2:63:e9:b9:
83:1b:55:2d:31:14:2d:5c:7c:f0:9f:36:45:d2:e7:
c5:23:f6:7b:36:7f:2b:9d:06:d1:09:00:84:90:6f:
44:a3:70:4b:5f:27:49:72:8f:5e:f7:3e:19:0f:26:
1f:82:aa:10:df:51:6c:20:5d:46:24:a0:06:76:f6:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E4:94:83:E3:13:20:3F:85:91:8A:27:B4:F6:0D:61:54:BF:F0:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F725A30EC13711F0B5359384DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
154.200.55.0-154.200.59.255
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b7:bf:ed:51:42:94:46:8d:98:27:e5:4a:a6:3f:43:e2:2e:
d9:40:da:0e:91:e3:c1:93:6e:42:6f:26:94:06:b2:b9:a1:fb:
d5:8d:e9:29:eb:74:e3:c8:a4:a7:aa:30:4d:74:ee:77:e9:c7:
63:4d:80:27:27:52:f9:17:90:d1:d0:42:9e:94:ed:e8:08:a2:
72:f0:c5:8f:25:12:d8:20:17:26:87:4a:b0:68:a5:90:4e:0f:
eb:7f:7d:d5:27:d8:13:c3:6c:c4:4f:28:6d:84:eb:4a:7c:4c:
52:a4:99:30:9e:e6:91:5f:e6:35:c7:52:1d:7c:6c:35:87:7d:
e0:03:ec:b6:42:76:bd:6e:6b:f7:4a:c7:2c:54:9a:d3:44:3b:
de:c3:78:78:2d:8a:94:bb:93:24:cc:d9:fb:d8:44:03:14:1e:
c5:44:79:af:82:b6:b7:7f:1d:23:55:9e:a8:c6:0e:68:d2:c5:
c1:24:34:04:97:5c:f7:0e:97:39:49:6d:b7:3e:24:7e:cc:63:
58:1a:b8:52:51:0e:9f:85:56:42:f3:c0:a7:03:26:e7:ed:65:
76:7a:7f:01:15:69:32:93:01:ae:71:18:c5:02:89:20:fc:c8:
d1:b1:3e:6b:8b:80:26:34:29:37:41:a5:bd:50:27:80:78:4c:
0d:7e:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:13 2025 by rpki-client