This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D65230CE52911F084897C97DAE4EC9C.roa
File: 3D65230CE52911F084897C97DAE4EC9C.roa (raw, json)
Hash identifier: jNt0auLZ2L9L079lfC760eMw8c1gj5ycrMwoRur7hYM=
Subject key identifier: BD:DA:BF:28:E3:3E:47:52:56:F5:02:9E:D1:C4:59:C7:C7:7E:AC:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B1AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D65230CE52911F084897C97DAE4EC9C.roa
Signing time: Tue 30 Dec 2025 02:42:54 +0000
ROA not before: Tue 30 Dec 2025 02:42:49 +0000
ROA not after: Sat 07 Mar 2026 02:42:49 +0000
asID: 142403
IP address blocks: 154.221.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111020 (0x1b1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 02:42:49 2025 GMT
Not After : Mar 7 02:42:49 2026 GMT
Subject: CN=69533c2e-e37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:c8:d7:f2:65:52:2f:30:b6:54:9f:eb:05:
3d:e9:d5:22:48:1d:34:f4:90:02:23:7d:de:15:66:
b0:70:25:22:6e:7a:66:8d:ef:89:f0:40:5e:74:57:
e0:fa:ef:2f:97:18:ba:a7:c6:b8:04:72:5a:61:42:
85:22:fe:13:7e:01:7c:7f:74:eb:bf:a9:ec:c9:33:
fb:79:e2:6e:c7:f1:06:62:7a:2d:56:1c:73:01:27:
6b:cf:69:4f:2d:6e:0f:a6:89:4d:6a:72:61:f6:71:
d5:79:2d:22:b4:0a:b3:f4:d1:32:9b:04:f9:45:ec:
36:f2:c5:45:1e:78:0f:b2:05:8b:0d:ae:b8:21:12:
a7:be:39:0d:7e:c0:1b:c9:3c:07:1b:dd:d0:ed:76:
20:c8:bb:0a:37:96:a7:bd:fb:b7:35:39:7f:51:3c:
4e:54:cb:9a:d6:f5:1b:91:14:b0:72:84:b8:a6:78:
c3:c0:59:ff:89:3f:3e:c9:c8:44:3e:4f:2f:e2:3c:
36:49:e8:66:b9:b1:01:0c:cc:b7:c2:f7:80:e6:39:
b4:42:76:a2:a4:9c:80:d2:e5:82:59:4d:41:9b:9c:
40:db:3e:a8:bd:72:4a:6a:c7:04:57:08:3a:d5:d5:
1f:09:db:71:d2:74:b6:ca:55:d0:a3:4d:41:2a:bb:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:BF:28:E3:3E:47:52:56:F5:02:9E:D1:C4:59:C7:C7:7E:AC:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D65230CE52911F084897C97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.22.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4d:2c:c9:64:30:c6:ee:9f:d9:08:4c:02:87:23:66:f9:22:
40:ae:d1:bc:45:d0:5f:6e:91:10:75:8d:04:83:87:f2:1f:76:
9e:2e:8c:86:09:5d:bb:7e:e9:80:bc:45:5e:65:6c:a6:1f:54:
ce:4c:8e:48:b4:08:38:52:1b:58:ca:9c:0b:e0:1f:6a:1c:eb:
e5:c8:cf:a6:ce:19:2c:0b:6d:1d:e7:18:b5:65:2a:89:68:cc:
7e:0d:a9:6c:27:c2:56:75:f3:dc:65:c9:8d:ea:09:d7:d6:73:
26:f2:b0:e5:d3:d6:4d:e0:77:6d:8f:e4:b1:86:ae:c2:56:f2:
83:6b:97:56:2e:4e:8e:9b:4b:d4:d2:dd:53:af:91:65:d9:c2:
26:47:56:58:ea:3c:de:ba:b7:87:11:e9:fa:72:84:8f:72:c0:
17:75:8f:03:f4:04:52:9c:ba:bf:f7:f2:d5:7f:e9:d0:3b:e5:
98:55:5a:5c:be:3c:61:57:ab:9b:69:e5:4e:a5:ce:33:99:a7:
08:9a:01:ba:e7:90:95:50:c9:d0:49:38:be:00:06:51:8f:ae:
df:6d:37:15:41:39:f0:6f:7b:97:3a:67:a1:b9:ba:82:8d:a6:
6e:a7:59:86:d7:c8:bf:a0:64:b6:e8:6b:b7:a2:bb:7c:8a:89:
7c:5a:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:29 2026 by rpki-client