This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa
File: 0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa (raw, json)
Hash identifier: /4YHq3BANrH6zj5ZW3WniXclt80OdwksEgZ2uFMe3wM=
Subject key identifier: 51:43:D8:12:BE:5B:2A:50:0D:FC:84:BD:46:7D:8C:E6:5C:54:54:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa
Signing time: Fri 05 Dec 2025 13:41:12 +0000
ROA not before: Fri 05 Dec 2025 13:41:07 +0000
ROA not after: Tue 27 Jan 2026 13:41:07 +0000
asID: 137899
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109857 (0x1ad21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 5 13:41:07 2025 GMT
Not After : Jan 27 13:41:07 2026 GMT
Subject: CN=6932e0f8-4f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:10:9e:5a:b9:b1:2b:24:91:1f:e6:9f:38:
ed:fa:ca:72:d0:78:d5:64:70:d0:dc:86:39:ab:20:
a5:1b:62:2a:f0:13:9d:46:a4:2d:25:09:67:16:78:
03:00:fb:4f:28:42:60:46:0b:b8:22:fb:b6:7b:2e:
d1:1c:99:ee:05:04:c5:1a:62:27:57:0a:6e:cf:b2:
06:9a:29:35:0e:1a:1d:bc:53:be:c6:8c:8e:dc:59:
00:e2:6e:7b:74:0c:66:89:77:fc:5b:a2:23:00:75:
3a:9e:9b:d0:4c:16:a5:f2:89:95:3e:0e:8a:47:71:
48:d1:1d:ee:7f:25:00:d7:49:06:7b:89:ec:e1:5f:
23:a6:d1:50:37:2a:db:22:f5:4c:15:01:4c:51:b1:
0c:25:50:ce:b8:82:07:30:eb:ea:c8:b9:61:a0:dc:
d5:27:92:7d:b5:47:db:29:e6:81:23:f6:ba:c6:36:
84:5b:90:00:38:8f:82:73:3f:82:92:82:34:3d:4e:
c8:19:ca:bf:00:35:be:94:63:31:ae:4d:37:99:fb:
b7:33:b1:14:6b:e9:cd:b0:e1:8e:17:e6:15:1d:56:
0f:26:6a:70:ac:19:d2:91:68:2d:de:a6:8b:81:47:
71:11:c6:d9:49:d3:72:68:6c:62:33:a1:d8:a5:15:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:D8:12:BE:5B:2A:50:0D:FC:84:BD:46:7D:8C:E6:5C:54:54:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:f6:dd:6e:66:a1:4a:61:9d:e9:c5:74:17:b9:d2:ba:ca:e9:
01:e0:94:87:02:07:58:fb:43:76:50:63:ef:b9:6e:a4:a3:23:
f1:1f:2e:4c:f5:ba:12:c1:04:21:45:6f:68:34:8b:f2:05:d8:
d8:b7:9d:e6:2f:91:7e:85:48:bc:8c:0a:3f:0d:23:65:0e:ae:
62:b1:6a:28:50:de:c6:7b:64:5e:d8:a2:af:50:30:f7:cd:56:
97:6f:1e:cc:f6:91:a9:f0:29:de:3a:b3:cc:a1:3b:a8:9e:aa:
ce:ac:8b:4a:bb:44:13:49:52:40:cf:85:03:0b:a2:a7:e1:a2:
75:9f:74:9e:cb:96:51:74:50:23:66:d2:e7:13:54:e4:68:df:
cd:c3:db:32:27:79:44:b1:fb:64:ec:53:94:a2:fa:d1:bd:44:
db:d6:35:c6:f7:ea:b4:5f:91:ea:40:89:e1:da:34:e3:40:50:
e3:21:e1:5e:2e:87:32:31:72:94:54:d9:ea:5b:0b:d0:10:64:
f5:6e:73:4f:e0:e6:14:82:15:90:8d:97:f7:36:26:a0:23:cf:
31:e2:d6:46:9b:bc:5d:87:f9:a1:f3:8b:2d:c3:73:2a:4b:83:
22:d8:55:52:e7:f0:34:ef:bb:e1:82:e4:39:31:b3:98:2f:13:
4b:65:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:26 2025 by rpki-client