This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D692254D11611F092C843CDDAE4EC9C.roa
File: 2D692254D11611F092C843CDDAE4EC9C.roa (raw, json)
Hash identifier: D8SnxmY+JKS3R8OTjxgw7KE74qi9anS4VFWr9vTHpnA=
Subject key identifier: 9A:4E:74:94:99:E9:0C:76:12:87:0D:C1:72:F3:DD:4D:EF:B8:E3:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ACDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D692254D11611F092C843CDDAE4EC9C.roa
Signing time: Thu 04 Dec 2025 13:36:03 +0000
ROA not before: Thu 04 Dec 2025 13:35:57 +0000
ROA not after: Thu 25 Dec 2025 13:35:57 +0000
asID: 54801
IP address blocks: 154.90.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109786 (0x1acda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 13:35:57 2025 GMT
Not After : Dec 25 13:35:57 2025 GMT
Subject: CN=69318e43-9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:3b:e0:16:ad:60:fd:2f:7f:e4:1e:1a:b3:
90:ee:bf:64:db:75:fb:d0:51:f9:eb:95:7d:3d:be:
86:27:05:f6:e6:81:e6:bd:49:ec:5d:2e:e5:c2:f1:
92:b4:08:bf:20:d9:62:b6:b4:c0:bc:d6:c0:92:45:
09:a6:6b:bd:8b:de:23:b0:61:fd:88:33:df:24:9a:
60:cd:d6:17:d5:0d:ae:65:0a:2e:c0:08:70:77:58:
2a:6f:1d:22:a6:f9:a7:a8:36:da:b9:da:fb:27:a4:
99:4d:ce:57:27:e6:a6:5c:2c:01:72:15:1b:bb:18:
05:83:d7:03:ba:d9:62:2f:cd:55:52:5d:d0:b6:78:
88:10:e4:bc:b9:76:02:cb:d2:38:76:2c:49:1f:a0:
c5:34:c7:7d:2d:76:24:d0:51:18:4a:30:0f:b2:53:
6b:c4:01:83:aa:26:10:25:3d:3d:64:e7:a3:15:87:
b5:e0:1c:0a:33:78:33:25:e1:02:fb:6d:68:01:17:
7d:6a:94:be:5a:8b:5c:86:f7:df:48:df:2d:66:54:
80:a6:49:3b:a4:4f:23:9d:0a:a8:79:9f:f3:66:29:
c1:28:cf:9b:2f:01:15:4d:40:8f:f5:87:93:0b:48:
5c:2a:fb:ed:e6:17:d0:91:b7:41:2f:3b:f7:2e:2c:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4E:74:94:99:E9:0C:76:12:87:0D:C1:72:F3:DD:4D:EF:B8:E3:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D692254D11611F092C843CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:62:49:8f:25:43:71:d4:71:47:42:fe:75:8e:b5:17:0a:84:
9f:36:de:74:ab:6d:d7:ea:5b:69:48:7c:fa:17:ef:54:fa:c2:
bf:bf:aa:0d:80:29:8b:c0:7c:00:73:2c:26:32:4c:ec:eb:e5:
ef:63:58:4f:19:5d:6e:f1:bc:24:d3:02:8c:eb:b9:a0:e8:b0:
f6:69:7a:ef:71:7e:5f:6f:4f:15:77:b2:33:86:2a:8a:5a:c0:
18:0f:87:15:8c:58:22:12:ab:29:93:cb:01:1a:97:2f:a4:8d:
18:10:4e:9e:8c:7c:17:39:c1:8d:45:e8:da:53:e7:d6:b8:c2:
39:26:fd:c2:f9:71:ed:d6:5a:a7:88:b4:13:d9:79:b0:ec:60:
db:1a:35:f3:be:ca:33:56:eb:4e:79:60:c7:7f:19:b7:c7:b2:
ca:45:7a:82:75:4f:4f:c2:76:3e:16:7d:da:e1:f8:9a:00:02:
d1:9e:bd:b1:6c:a3:c2:c5:2d:d9:73:b1:aa:37:50:87:fd:10:
ec:d3:51:00:e6:5d:e3:1e:c2:0d:91:e5:15:d6:df:6f:df:6a:
79:6e:27:89:05:fd:4a:63:17:f0:07:a1:c3:8e:4a:73:10:fc:
a2:2b:fb:ba:dc:4c:5d:20:91:e9:81:33:f8:3b:4f:e3:62:a0:
53:91:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:50:23 2025 by rpki-client