This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa
File: 53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa (raw, json)
Hash identifier: cGpCRLgB+ZMT5V09TUL4T7O95v6QPHJThcCpj/W6Mbs=
Subject key identifier: 5D:D8:19:A9:26:5D:3A:75:7E:51:E7:10:4A:F5:32:3B:AE:89:3A:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B07D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa
Signing time: Tue 23 Dec 2025 22:18:37 +0000
ROA not before: Tue 23 Dec 2025 22:18:32 +0000
ROA not after: Fri 06 Feb 2026 22:18:32 +0000
asID: 20326
IP address blocks: 154.193.134.0/23 maxlen: 24
154.193.156.0/23 maxlen: 24
154.222.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Dec 2025 18:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110717 (0x1b07d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 23 22:18:32 2025 GMT
Not After : Feb 6 22:18:32 2026 GMT
Subject: CN=694b153d-51d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:f9:fc:f8:2b:e9:27:bc:82:e8:7d:e6:a9:
27:1d:fa:aa:21:3e:5f:6d:3a:52:46:48:a9:7b:db:
c7:11:eb:09:dc:7f:68:e5:98:06:cd:16:9a:2d:b2:
f9:50:fd:f4:65:cf:9f:ac:46:e3:1d:ed:9b:b5:57:
d5:39:34:cf:a4:cb:77:9e:6f:1e:31:68:40:d7:3a:
07:4a:7b:fc:04:4b:61:d2:ce:44:22:95:33:34:51:
ad:1f:37:06:56:4a:07:45:50:d9:8e:94:80:e7:e9:
92:77:cc:fc:bc:b9:b0:97:e2:a1:c4:b7:a8:29:85:
42:5d:88:5f:3b:ec:29:b3:b5:a1:ec:58:58:fb:a3:
23:6f:ee:c9:2c:37:a8:21:14:4a:85:bf:c3:52:20:
60:a1:17:42:59:8a:7c:66:9e:7a:a2:3b:23:5d:8e:
d7:4b:f3:c3:08:4b:11:4b:5c:08:85:39:b6:1b:ca:
af:aa:a9:ca:91:07:3e:a6:4e:9b:d6:2f:e8:e6:a2:
fa:76:12:41:d0:5b:ca:85:33:8c:c7:28:fa:a5:3a:
98:ac:80:79:37:5f:fb:e5:66:63:83:98:e3:a2:eb:
2f:d1:f2:35:64:71:a8:78:26:6f:a6:b2:a2:7b:ba:
84:1b:98:90:47:9f:31:51:c5:21:e8:f2:13:58:c8:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:19:A9:26:5D:3A:75:7E:51:E7:10:4A:F5:32:3B:AE:89:3A:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.134.0/23
154.193.156.0/23
154.222.118.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:6c:6a:85:b9:45:cb:4b:c4:e4:4e:d6:df:12:4d:e4:ab:fd:
43:6d:10:91:ab:65:61:79:89:73:b3:c6:6d:df:3f:d0:91:e8:
3c:d3:31:8c:62:79:07:a0:10:41:36:eb:e8:df:90:61:9e:91:
03:13:b0:0d:73:d0:78:09:a0:a2:2f:7f:ee:7c:91:1e:43:6e:
2f:32:b3:41:38:96:d8:d2:61:d2:b6:90:a6:e6:87:f6:51:96:
7e:65:f2:24:d5:90:1f:21:38:5d:70:87:3f:3f:3f:f2:1f:73:
02:92:72:90:d1:d9:dd:f6:d7:f6:e9:42:14:2d:bf:9e:9e:33:
93:0c:3c:0e:80:5c:03:d8:7a:87:09:ff:3e:55:a2:46:5b:17:
6d:76:24:f2:28:52:73:7b:66:ea:7c:14:b8:7c:3b:f5:81:ae:
0b:e9:85:d0:1f:fb:7a:7e:4d:da:da:f2:35:6d:6c:45:16:1a:
70:6f:e3:45:76:cc:43:3b:7f:a5:a0:37:5d:8f:46:11:f8:12:
0e:88:ee:30:64:a5:ca:5b:d5:73:47:22:28:4d:98:d2:3e:8e:
be:05:8b:a3:ab:dd:0d:7a:1d:e1:85:a1:74:2b:8b:f1:bd:c5:
47:d8:40:ba:52:b8:7d:fa:37:56:1d:40:72:18:5f:01:d9:78:
b3:e6:af:02
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAbB9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIzMjIxODMyWhcNMjYwMjA2MjIxODMyWjAYMRYw
FAYDVQQDEw02OTRiMTUzZC01MWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAk4L5/Pgr6Se8guh95qknHfqqIT5fbTpSRkipe9vHEesJ3H9o5ZgGzRaa
LbL5UP30Zc+frEbjHe2btVfVOTTPpMt3nm8eMWhA1zoHSnv8BEth0s5EIpUzNFGt
HzcGVkoHRVDZjpSA5+mSd8z8vLmwl+KhxLeoKYVCXYhfO+wps7Wh7FhY+6Mjb+7J
LDeoIRRKhb/DUiBgoRdCWYp8Zp56ojsjXY7XS/PDCEsRS1wIhTm2G8qvqqnKkQc+
pk6b1i/o5qL6dhJB0FvKhTOMxyj6pTqYrIB5N1/75WZjg5jjousv0fI1ZHGoeCZv
prKie7qEG5iQR58xUcUh6PITWMhywwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFF3Y
GakmXTp1flHnEEr1MjuuiToaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81M0MxNEREQ0UwNEQxMUYwQTFCOEY2QUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmsGGAwQBmsGcAwQBmt52
MA0GCSqGSIb3DQEBCwUAA4IBAQDPbGqFuUXLS8TkTtbfEk3kq/1DbRCRq2VheYlz
s8Zt3z/Qkeg80zGMYnkHoBBBNuvo35BhnpEDE7ANc9B4CaCiL3/ufJEeQ24vMrNB
OJbY0mHStpCm5of2UZZ+ZfIk1ZAfIThdcIc/Pz/yH3MCknKQ0dnd9tf26UIULb+e
njOTDDwOgFwD2HqHCf8+VaJGWxdtdiTyKFJze2bqfBS4fDv1ga4L6YXQH/t6fk3a
2vI1bWxFFhpwb+NFdsxDO3+loDddj0YR+BIOiO4wZKXKW9VzRyIoTZjSPo6+BYuj
q90Neh3hhaF0K4vxvcVH2EC6Urh9+jdWHUByGF8B2Xiz5q8C
-----END CERTIFICATE-----
Generated at Wed Dec 24 20:19:54 2025 by rpki-client