This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/C9FD6A66EBCA11F0B1686FECDAE4EC9C.roa
File: C9FD6A66EBCA11F0B1686FECDAE4EC9C.roa (raw, json)
Hash identifier: KWF2f6lklc+ISvDAOfQP/bnZ/qUCac/YisXkzWEtuAw=
Subject key identifier: 4B:4C:40:17:4A:5D:7A:70:41:05:11:DB:C3:52:B8:89:C5:6B:3E:41
Certificate issuer: /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial: 044A
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/C9FD6A66EBCA11F0B1686FECDAE4EC9C.roa
Signing time: Wed 07 Jan 2026 13:14:26 +0000
ROA not before: Wed 07 Jan 2026 13:14:21 +0000
ROA not after: Mon 07 Jan 2036 13:14:21 +0000
asID: 327697
IP address blocks: 2c0f:3780:2250::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098 (0x44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAF, serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Validity
Not Before: Jan 7 13:14:21 2026 GMT
Not After : Jan 7 13:14:21 2036 GMT
Subject: CN=695e5c31-8d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:41:79:2b:24:b0:83:48:bb:77:91:8a:86:
2a:22:f5:4c:60:71:59:8c:80:45:22:a7:fd:ac:b5:
b1:c9:7d:68:ec:eb:0e:f0:7a:11:0a:c8:8a:0a:52:
a2:b4:49:e6:1e:db:81:b6:c6:85:4a:86:3c:e7:a1:
85:2e:2d:92:29:b3:87:b0:d2:5f:dd:84:11:04:c0:
65:0b:d0:ae:33:12:e2:20:4b:2c:b9:bb:fb:f3:d3:
97:16:7c:1a:ae:0b:e2:ee:b2:15:17:2d:1d:4b:07:
b8:fb:fb:3e:56:c8:5c:0c:61:52:91:96:ee:f1:de:
72:12:89:c8:7f:e3:86:d8:a1:bc:ba:c7:db:93:48:
73:46:fc:d1:c0:bc:4f:b0:25:d3:5b:ab:38:4c:8d:
d2:ce:6d:b7:7c:e3:42:d2:32:68:9c:b5:88:37:d3:
da:b1:41:64:0a:79:f9:97:c1:38:37:2c:90:39:4e:
db:f2:6c:36:c9:f5:42:26:b1:d7:ee:f5:45:27:9c:
27:06:b1:b6:cd:99:ce:26:7f:c9:09:ba:45:af:16:
4d:93:64:33:c7:5f:b3:57:62:bd:10:05:af:8f:4b:
a8:20:26:ec:00:a6:9a:a3:a6:a2:a4:f5:5b:4e:c3:
52:54:7e:69:26:fe:75:d3:e4:c9:d7:70:fa:2f:bd:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4C:40:17:4A:5D:7A:70:41:05:11:DB:C3:52:B8:89:C5:6B:3E:41
X509v3 Authority Key Identifier:
keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/C9FD6A66EBCA11F0B1686FECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:3780:2250::/44
Signature Algorithm: sha256WithRSAEncryption
2f:96:74:6b:c2:83:1e:ee:c7:c0:cd:fe:88:f4:b3:d8:c6:65:
9b:c7:88:62:9b:fb:f8:64:0b:51:31:8c:e9:e4:48:93:aa:9f:
bf:9a:a7:f0:34:f2:7a:4b:04:b4:66:d6:9b:ea:91:49:ee:e3:
a8:72:c6:e3:70:65:2a:d6:11:c8:80:67:f2:8e:fa:79:db:17:
40:c8:64:86:4f:a3:67:79:de:82:3c:75:6b:29:6d:79:ee:71:
3b:a9:76:ee:2a:cc:ff:eb:c8:f4:60:61:d2:e5:67:00:0a:a0:
44:02:ce:b4:2f:3f:29:aa:03:3c:43:77:9c:dc:b0:e0:c1:1e:
2c:26:6c:7f:6b:22:52:b6:17:09:82:83:9d:ba:2e:37:ba:3e:
b4:70:d5:8f:05:e0:da:f7:2a:2e:f7:62:96:3a:a2:bd:c5:be:
5d:b5:9a:a6:82:c3:d4:f5:8f:e1:2a:e8:34:a9:53:52:21:f3:
e3:f5:80:cc:07:ce:37:1e:ee:05:48:3d:84:2d:e4:85:db:4c:
9a:66:8f:30:c8:88:07:55:31:c9:dd:a3:1f:ea:bf:df:cb:2d:
d1:25:96:73:c9:fa:31:98:c7:e0:c3:dd:27:b7:12:79:c2:ff:
13:a9:c9:78:e0:10:0e:7b:f7:00:a1:6a:24:d0:ee:16:7b:2c:
c1:7f:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:25:59 2026 by rpki-client