This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81FB02DCB011F0840D0B94DAE4EC9C.roa
File: 4C81FB02DCB011F0840D0B94DAE4EC9C.roa (raw, json)
Hash identifier: MsG1aC/D+pZ2ougs3sgtHw91NOR9YusFAutV1O7CL0I=
Subject key identifier: 03:42:95:6C:B8:D7:8E:10:7E:AB:A2:89:C2:BA:26:0C:3E:80:8B:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AF90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81FB02DCB011F0840D0B94DAE4EC9C.roa
Signing time: Fri 19 Dec 2025 07:57:01 +0000
ROA not before: Fri 19 Dec 2025 07:56:56 +0000
ROA not after: Sat 27 Dec 2025 07:56:56 +0000
asID: 140224
IP address blocks: 154.205.212.0/24 maxlen: 24
154.205.213.0/24 maxlen: 24
154.205.214.0/24 maxlen: 24
154.205.215.0/24 maxlen: 24
154.205.216.0/24 maxlen: 24
154.205.217.0/24 maxlen: 24
154.205.218.0/24 maxlen: 24
154.205.219.0/24 maxlen: 24
154.205.220.0/24 maxlen: 24
154.205.221.0/24 maxlen: 24
154.205.222.0/24 maxlen: 24
154.205.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110480 (0x1af90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 19 07:56:56 2025 GMT
Not After : Dec 27 07:56:56 2025 GMT
Subject: CN=6945054d-3150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:6e:63:e4:a9:16:8a:09:49:cf:ac:49:0b:
f3:3d:e8:49:dd:ba:0f:2f:81:8e:3e:5c:62:b7:ea:
46:8a:37:63:98:57:33:8d:e1:15:6d:d2:b3:1e:77:
31:e8:87:a6:95:aa:e3:9e:07:86:80:28:ed:a8:8c:
24:f8:6d:82:c1:c5:d7:e0:a9:fa:a8:b0:69:43:ca:
f1:02:f5:4a:18:04:c1:9b:2d:bd:d1:ff:17:b1:c7:
4f:c9:fe:59:13:b1:b0:07:2d:b9:30:84:d6:8c:ba:
26:ec:a9:2b:e9:8c:02:48:ec:ec:f0:45:42:6a:ad:
26:fa:47:af:75:73:c7:9b:88:f9:92:51:7a:07:5b:
dd:cd:57:02:4e:34:fb:42:c3:67:8e:7f:44:df:a1:
7d:d0:b4:b8:de:bc:9c:ab:aa:6b:f0:15:30:b9:b1:
fe:96:36:1a:c9:fe:a8:3a:47:73:d0:e4:2d:a8:ee:
78:cb:cb:56:26:b3:3d:41:7a:3a:1f:ad:bd:a8:b3:
e2:8e:1b:7a:fb:2d:14:4c:e7:8b:06:a9:82:ff:69:
c0:97:e4:d9:1e:21:33:4e:1e:50:36:3c:f5:2a:aa:
a5:b3:e4:19:88:c4:a1:04:cb:b9:46:c8:fb:f5:78:
25:35:4e:6e:02:f4:60:22:18:c1:4e:28:12:6f:fe:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:42:95:6C:B8:D7:8E:10:7E:AB:A2:89:C2:BA:26:0C:3E:80:8B:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81FB02DCB011F0840D0B94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.212.0-154.205.223.255
Signature Algorithm: sha256WithRSAEncryption
6c:27:8c:b5:9b:17:77:e3:c4:31:af:9d:45:1d:25:af:98:8a:
9a:78:43:a6:3f:8e:cf:8c:9f:bb:a2:68:aa:ec:57:f6:52:93:
97:16:7d:8a:c1:1c:88:03:13:a4:2f:8b:f9:94:b6:72:4b:3b:
db:a9:4c:36:b2:6f:01:b0:12:9c:4d:7d:01:43:df:71:02:8a:
a3:5d:86:81:eb:13:32:ce:8a:40:af:63:4b:f0:51:7f:d9:5e:
cc:c2:a3:10:ef:27:5f:b9:9e:85:03:84:25:2b:9d:6c:5a:ef:
ff:3e:ba:d8:4e:d9:6f:ae:f9:82:83:7c:62:59:e1:ae:81:ce:
02:a5:34:68:d1:54:62:16:6b:79:2d:8d:23:0e:f1:fe:9b:a6:
0e:d7:08:c2:74:1f:c6:fb:78:b9:2b:ab:82:fd:87:8a:38:9d:
7f:b2:03:26:02:89:ab:fe:5a:2f:18:5b:86:8b:5d:b2:32:d5:
2a:a4:6c:12:bd:eb:34:75:8e:72:b5:be:5a:67:d3:45:a5:08:
67:d4:8c:3e:aa:86:5b:e9:a4:49:80:a6:49:43:85:0c:d4:a9:
e2:e8:bc:ac:0c:f0:dc:eb:45:d6:23:a3:2a:d5:89:de:35:50:
ba:5c:87:74:f3:37:f4:8a:a9:e1:c0:5e:df:5e:df:d0:aa:84:
07:14:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:35 2025 by rpki-client