This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB86A340C60911F0AABAC2DEDAE4EC9C.roa
File: FB86A340C60911F0AABAC2DEDAE4EC9C.roa (raw, json)
Hash identifier: 3ZPgnn3YognTuoLQz5tsd7f7n/aXZSUGt1wtAal8a+Y=
Subject key identifier: 51:23:C2:2D:71:13:AD:BE:DA:5B:C8:3C:59:E2:E2:E9:D2:56:0A:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A9FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB86A340C60911F0AABAC2DEDAE4EC9C.roa
Signing time: Thu 20 Nov 2025 12:11:03 +0000
ROA not before: Thu 20 Nov 2025 12:10:58 +0000
ROA not after: Tue 30 Dec 2025 12:10:58 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109052 (0x1a9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:10:58 2025 GMT
Not After : Dec 30 12:10:58 2025 GMT
Subject: CN=691f0557-f193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:75:a3:3f:74:59:63:cb:64:e1:29:06:58:
e4:a9:f4:b3:ad:7d:89:bd:61:87:42:36:d1:04:2f:
5b:b8:de:df:36:81:45:cf:be:e6:e7:17:1e:5d:e6:
c9:10:eb:93:4d:15:fb:cd:57:3c:f9:01:b7:55:ca:
ec:5e:93:d9:7b:df:02:09:1c:ac:3e:76:4b:de:5b:
2d:61:b0:1c:dd:1e:26:3d:87:1a:01:f9:e6:83:76:
75:bd:b1:d0:b0:3e:96:8b:18:38:5b:71:74:bf:27:
b1:be:a5:fc:ff:d2:f7:3c:30:69:ab:2e:c1:9b:42:
53:b2:0b:c4:36:1d:3a:8c:6e:78:64:5b:9c:bb:47:
ac:dc:37:f6:44:0c:e4:c1:6f:08:39:1a:3d:a5:a3:
9c:9e:cd:c0:dc:d6:28:0f:4b:c1:97:8e:a1:cc:43:
9d:98:09:ac:6a:d1:bb:ee:67:c8:d6:c3:ec:a9:f4:
cb:80:e0:76:2c:34:68:a2:47:f0:9e:ff:1a:fb:5c:
9e:b7:6d:f8:f3:78:ad:b3:0d:65:70:9e:59:58:66:
87:9f:22:de:45:f9:6b:03:4e:f6:77:18:fe:6f:01:
66:6f:60:4a:97:8b:28:f0:47:95:6b:60:ff:b5:e6:
7f:bd:05:b6:2c:bd:9b:24:f9:13:44:db:f5:6b:8e:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:C2:2D:71:13:AD:BE:DA:5B:C8:3C:59:E2:E2:E9:D2:56:0A:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB86A340C60911F0AABAC2DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:10:0e:61:a7:e0:d0:32:81:3d:52:18:81:14:ad:17:53:51:
c3:1d:15:18:54:03:81:49:06:7b:10:61:25:55:fe:fe:b0:35:
51:0f:85:1c:de:54:f6:fb:18:48:2d:0c:84:08:1c:5a:f1:aa:
2b:f6:41:e5:c1:01:c9:2e:b5:5b:e8:a4:f0:02:70:6e:6c:cc:
e3:f4:e0:56:c2:83:93:f7:2a:b3:62:e7:35:6e:26:6c:df:24:
e0:56:39:1a:09:d6:4a:a7:aa:16:93:29:54:a4:98:be:ab:df:
5e:c2:62:07:7b:c2:54:fc:26:e8:a6:69:1f:37:11:20:13:1c:
29:e4:f1:34:8e:ff:87:b6:53:c2:88:a3:37:33:78:6a:86:d5:
d1:67:52:b0:ff:11:53:2f:b0:56:f0:88:ed:37:49:2c:5d:e4:
97:c5:7e:d9:2f:38:2b:f3:10:1f:33:bc:51:45:6f:35:66:d6:
b6:c5:e3:54:5a:db:f6:31:d3:74:7a:46:46:87:10:f6:31:d1:
ab:b0:78:af:dd:3a:68:3a:55:f6:30:b9:e1:36:bf:00:8d:4d:
74:cd:31:ff:d8:6c:69:08:17:8b:57:b6:4a:f1:29:cf:8e:94:
64:cd:da:fa:0f:b6:8d:f1:76:a2:48:79:ad:78:07:66:0e:d8:
e8:a8:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:08 2025 by rpki-client