This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa
File: FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa (raw, json)
Hash identifier: NlrnUdZR4Us3Jd2Taubi/zlCvMz3FENn+7VE5ZJ8b8M=
Subject key identifier: DE:70:72:32:74:5A:90:BF:DD:7A:FA:4D:74:DB:01:54:E2:7F:4A:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa
Signing time: Mon 15 Dec 2025 12:53:06 +0000
ROA not before: Mon 15 Dec 2025 12:53:01 +0000
ROA not after: Tue 03 Mar 2026 12:53:01 +0000
asID: 399077
IP address blocks: 154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110141 (0x1ae3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 15 12:53:01 2025 GMT
Not After : Mar 3 12:53:01 2026 GMT
Subject: CN=694004b2-0d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:f0:3e:72:a8:3b:e5:9e:e7:cd:da:d5:34:
31:cf:3b:6b:ab:ba:99:81:f2:79:e9:5d:a7:09:aa:
fa:e9:97:db:ad:40:bb:86:39:0d:a9:7c:4e:31:90:
0c:6f:49:8e:bc:bc:e3:94:92:4c:ed:6f:0b:98:c5:
de:61:21:4c:67:08:ab:b4:24:08:09:7d:09:66:db:
94:18:31:6a:5d:e0:9a:96:0c:b8:ce:05:35:af:93:
06:3d:32:57:cb:bd:f0:7e:df:5b:2b:1d:8d:37:c5:
7c:8f:0f:0f:08:5e:98:47:6a:85:75:68:b2:8e:63:
2c:4e:2a:a4:f4:28:1b:5d:cf:26:d7:04:38:86:b6:
35:a6:8f:cd:6f:52:21:4f:22:c3:96:fd:8f:ec:87:
97:b7:9d:a6:4d:de:1c:28:7b:dd:ee:75:ac:b3:79:
b5:2e:13:b0:34:18:f9:42:10:e0:9c:a0:3c:31:06:
9d:e7:1f:17:bf:09:c4:59:23:3f:e4:c8:d7:2e:d7:
31:3a:62:92:81:28:30:b2:d4:ff:63:50:51:9e:4d:
44:fc:d4:31:4d:c4:a1:75:60:7d:e3:a6:8c:47:84:
19:23:24:64:e5:8c:92:40:ce:bc:34:41:db:27:ad:
90:8f:e8:fa:c8:5c:cb:b9:e5:90:a0:db:e6:6a:df:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:72:32:74:5A:90:BF:DD:7A:FA:4D:74:DB:01:54:E2:7F:4A:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.67.0-154.91.76.255
Signature Algorithm: sha256WithRSAEncryption
11:32:6b:78:6a:ed:5f:8d:5e:69:6b:3a:14:bd:23:b1:4e:7a:
0a:d1:52:d6:b2:5d:df:5d:da:5f:3e:b4:28:07:18:e0:fe:32:
b9:2d:5d:98:d7:ba:2b:6f:23:50:f4:37:01:88:e6:49:f3:86:
0f:55:02:db:50:56:dd:46:7d:71:0d:5d:e1:7b:cb:b8:6a:8a:
11:8b:61:b6:9d:51:b8:ef:19:3e:f0:6a:2d:b7:b7:da:f9:20:
75:a5:12:56:76:e8:16:e9:4a:c0:d5:ce:cc:ed:a1:4d:0e:dc:
f7:51:20:70:f4:9a:4b:73:4f:50:4e:5f:5c:23:45:d0:0c:49:
22:f0:43:7e:b1:1e:71:c3:d1:ce:07:73:fb:c4:db:96:5d:31:
dd:68:24:bf:42:c4:ab:e4:73:04:02:ec:c1:33:31:24:6b:8a:
06:68:0c:0c:01:c0:3b:76:67:6e:70:cb:a5:c7:c9:4e:66:00:
9c:a0:44:db:ae:3e:56:99:d2:e5:64:e2:3e:fc:35:86:4b:a8:
ca:ee:e3:4a:bb:66:68:03:ea:a1:23:5b:76:f2:9f:0a:2d:9c:
b3:93:3b:5f:d2:5b:ae:b8:87:2d:ed:70:d5:f3:2e:48:c7:91:
8b:79:cf:ed:c7:e5:69:2e:99:11:91:29:ac:cc:73:8d:5c:0c:
46:15:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:35:48 2025 by rpki-client