This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C4940406C51711F0B575887EDAE4EC9C.roa
File: C4940406C51711F0B575887EDAE4EC9C.roa (raw, json)
Hash identifier: 4RugfSiJesfYSypFZBITfNgFCsRewIA3FsvOJEUwpec=
Subject key identifier: 7B:AC:EA:EF:7D:24:77:76:0A:70:FA:93:8C:82:20:93:B2:7D:54:A9
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0824
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C4940406C51711F0B575887EDAE4EC9C.roa
Signing time: Wed 19 Nov 2025 07:17:12 +0000
ROA not before: Wed 19 Nov 2025 07:17:08 +0000
ROA not after: Sun 28 Dec 2025 07:17:08 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084 (0x824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Nov 19 07:17:08 2025 GMT
Not After : Dec 28 07:17:08 2025 GMT
Subject: CN=691d6ef8-6f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:fc:e8:aa:dd:8b:a9:65:32:27:c3:bf:8a:
57:53:df:29:7b:aa:19:30:1b:c6:0d:b2:88:c2:06:
7a:da:d4:d5:f7:b0:87:19:2e:ac:67:df:1b:24:3f:
d8:ec:5e:10:b6:3f:ae:e8:cb:55:71:c1:db:70:d7:
c1:28:36:e2:f0:0b:cf:0f:93:ec:30:57:c3:fa:31:
16:d1:1d:03:78:1d:c1:8d:ba:0b:e0:ee:c5:33:b1:
91:a5:d5:73:e3:d6:6a:13:f4:0b:31:6d:2d:4f:ef:
2d:50:0c:73:7c:69:1d:47:14:72:c9:fb:c3:29:66:
0d:90:27:cb:5e:20:5c:f5:eb:7e:03:53:6f:05:f9:
68:0f:0e:14:02:15:b6:ac:92:c7:b7:a2:fa:5e:23:
dc:df:f8:4f:ff:3d:ab:b7:5f:21:a7:d3:fd:10:db:
ed:ee:75:a8:80:c5:ad:2b:23:ae:94:3f:1f:a2:68:
8a:d1:47:a6:8b:20:71:61:3f:e1:da:61:1d:a0:a2:
8d:b5:af:91:61:c6:f4:d2:be:73:d5:00:89:a2:f6:
8f:a3:13:54:2e:24:e0:43:57:07:2b:2f:c9:a2:b1:
fc:3b:a9:ab:38:20:89:aa:25:a3:8d:29:d3:8a:d3:
a8:d8:55:7f:42:19:41:a9:d1:7e:77:df:de:f1:c4:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:EA:EF:7D:24:77:76:0A:70:FA:93:8C:82:20:93:B2:7D:54:A9
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C4940406C51711F0B575887EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b3:27:74:1a:6a:75:f4:b0:ae:d8:98:30:62:f6:2f:61:39:
3b:44:02:f6:59:c8:11:dc:7d:7e:a2:27:7d:e7:6b:ee:65:34:
28:b0:1e:22:b4:1a:ea:2a:4c:07:47:f7:28:b1:97:70:99:42:
8d:ea:52:7c:ad:57:8d:09:f2:bd:11:d4:40:d3:82:e1:9e:f0:
16:a3:36:1c:b4:46:bd:8a:5a:41:20:af:44:af:9a:c2:1e:7c:
5f:b3:02:e6:1b:29:c6:26:49:d9:1e:5c:60:64:b2:f6:07:5b:
4c:5e:85:f7:ea:f8:e0:0d:54:46:08:c9:63:b7:42:8a:99:7b:
f4:c3:75:44:a0:3e:b5:b2:a4:31:87:07:5b:98:71:10:cb:f5:
b8:0a:b9:f5:e3:c6:d2:49:18:e4:d7:8b:5d:4f:a7:06:dc:d4:
1f:cd:61:a7:95:12:fb:5e:ae:28:9c:de:b7:b6:77:5c:76:57:
87:b3:42:30:62:9a:ae:03:58:46:67:8b:b6:c8:d2:8f:94:34:
64:7f:5f:08:b8:87:f1:8d:31:d0:ae:4b:1e:80:95:48:47:c6:
df:97:79:09:43:62:af:44:13:24:fd:48:5a:33:4f:22:74:0e:
de:0e:fc:c9:5c:94:0c:2b:4f:ce:a0:dc:f0:e3:ae:6e:1a:25:
1a:a7:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:52:01 2025 by rpki-client