This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa
File: 9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa (raw, json)
Hash identifier: 2uFOUkSFKVasJhOLfUiTVE3r4VWf4k4tupX7FNxvep4=
Subject key identifier: 31:98:9B:CE:41:C0:8F:A7:D4:65:D8:8F:6E:11:5A:5E:F0:88:E7:85
Certificate issuer: /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial: 01AC
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa
Signing time: Wed 12 Nov 2025 17:46:59 +0000
ROA not before: Wed 12 Nov 2025 17:46:54 +0000
ROA not after: Tue 31 Dec 2030 17:46:54 +0000
asID: 328270
IP address blocks: 102.165.168.0/21 maxlen: 24
2c0f:eee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Validity
Not Before: Nov 12 17:46:54 2025 GMT
Not After : Dec 31 17:46:54 2030 GMT
Subject: CN=6914c813-fe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:19:db:8b:c7:2e:49:9b:4d:15:7b:d5:a5:
76:31:20:25:2a:da:f3:23:94:25:a4:e3:7b:15:44:
40:0c:b7:f4:8b:55:50:be:d3:25:0d:44:ac:b5:5e:
23:46:29:55:f2:ac:a8:dd:01:18:41:1d:98:28:10:
e0:da:d7:82:1e:06:5a:aa:af:2b:1e:06:08:9d:9f:
29:b4:b0:44:22:94:e5:6c:14:d0:9b:cb:52:c2:e3:
f1:23:67:22:b3:e3:16:b6:b0:a1:d3:55:06:6f:a5:
c5:bb:f2:2f:4e:c3:6a:5f:ad:f5:4d:1e:61:9d:be:
c4:54:4f:ee:ca:25:62:08:6e:11:31:f6:c6:4b:5a:
7b:68:9b:ae:f6:b3:11:0f:72:a6:50:da:3d:f0:5d:
ed:88:80:cf:10:58:1e:7a:79:ba:96:e7:d9:bf:f6:
66:2c:69:e2:77:0a:f4:9c:51:a0:4b:59:75:dd:ed:
1d:fb:b1:33:92:c0:08:95:45:cb:d2:50:c0:30:24:
f3:ea:c2:eb:a2:b1:c3:5f:bc:3a:52:c3:06:41:fd:
ef:93:ec:40:43:c9:6f:de:12:c0:f5:b5:61:65:4d:
de:fb:d6:12:fb:fd:85:38:77:16:57:33:0a:d1:61:
b6:ea:23:3b:d3:39:83:c3:ef:7f:76:44:22:16:5d:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:98:9B:CE:41:C0:8F:A7:D4:65:D8:8F:6E:11:5A:5E:F0:88:E7:85
X509v3 Authority Key Identifier:
keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.168.0/21
IPv6:
2c0f:eee0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:25:1a:fe:e9:24:75:c1:fd:a5:94:ab:15:9e:3f:e7:d4:e0:
16:4c:60:c7:63:9a:f4:02:6a:78:40:96:21:a5:82:9f:c4:87:
68:46:41:11:8c:f2:d8:0a:51:d1:f9:8d:19:e1:81:c2:0f:73:
68:b7:e5:c4:34:3c:62:a7:a1:d7:94:70:c4:a3:af:dc:14:8d:
a6:54:4e:f0:86:b6:a6:a2:15:21:9d:1a:50:e8:90:36:df:71:
0c:f3:75:27:19:d3:83:0c:de:69:64:c4:0e:fd:8c:49:24:56:
e1:43:66:bd:9d:93:2e:e2:5a:e3:67:55:54:4e:28:8e:50:21:
28:af:23:d7:6f:d6:73:70:36:63:e2:f6:91:91:fa:b1:70:27:
9b:bc:fa:4b:0f:61:bb:ee:4b:09:15:4f:16:97:40:15:fb:8b:
44:c0:e8:bc:0e:6e:3a:fc:f2:26:9d:74:85:77:ff:8a:03:78:
d2:30:8d:02:bc:85:b2:af:70:a2:6e:0f:68:20:fc:e8:da:f6:
5c:7e:40:06:60:b5:f8:52:78:c8:d3:ec:7f:8f:e2:f3:c1:30:
7d:6a:8f:47:e8:d7:d0:2a:9d:8b:ba:38:f8:3d:9f:e3:c0:4f:
c1:a5:ab:84:17:75:a1:2a:4b:d8:b4:9c:c3:42:23:b2:28:48:
a1:4f:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:41 2025 by rpki-client