This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D86BD134E17D11F08C120CBADAE4EC9C.roa
File: D86BD134E17D11F08C120CBADAE4EC9C.roa (raw, json)
Hash identifier: 1Sw5H3m7p8yXSbJ/UEvOV37iMrCHxaPDGqCI+HItdGA=
Subject key identifier: F6:FF:4A:11:41:6D:3F:1B:1B:09:CC:01:83:EA:8D:E6:12:EC:D5:AA
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0879
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D86BD134E17D11F08C120CBADAE4EC9C.roa
Signing time: Thu 25 Dec 2025 10:38:27 +0000
ROA not before: Thu 25 Dec 2025 10:38:22 +0000
ROA not after: Fri 30 Jan 2026 10:38:22 +0000
asID: 22724
IP address blocks: 102.177.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169 (0x879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Dec 25 10:38:22 2025 GMT
Not After : Jan 30 10:38:22 2026 GMT
Subject: CN=694d1423-de6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:7b:5e:20:bb:4a:73:11:93:59:08:11:6e:
3d:49:3f:09:74:c8:60:5d:dd:a9:56:1b:ea:8b:7c:
54:31:49:8a:be:e1:03:dd:b7:2a:a0:82:80:ca:e6:
92:8c:a6:e2:68:88:39:a5:f7:4e:f2:7d:d8:5a:2a:
c0:23:4c:0b:4c:d7:32:43:81:00:c6:f6:76:9e:0f:
25:4d:6c:8c:5b:0f:1e:2b:e2:fc:85:5a:93:34:8f:
bc:f3:97:62:7c:b7:d8:7b:50:e1:d4:4d:1b:25:66:
06:6c:a1:59:0f:21:e2:da:0d:24:03:b1:68:9f:a8:
c9:1a:8f:db:86:5f:ba:88:c6:a6:b9:fe:d2:99:ff:
8a:91:02:82:89:11:ad:8a:75:7a:ea:00:73:65:38:
b7:7f:79:b4:1c:21:51:75:e8:41:28:bb:4c:7b:59:
8e:85:94:c6:f9:80:a4:4c:7b:fd:ac:7e:60:d3:dc:
70:14:7a:82:f9:6a:77:49:e6:45:71:0b:16:40:5d:
39:6c:c4:3e:8e:ed:c8:f6:29:0f:6b:77:20:fd:6a:
c3:02:75:02:23:76:4c:26:6e:1c:f4:6d:5e:2e:e4:
ce:29:95:d5:47:d8:0f:39:6f:ab:ca:22:0b:3c:8e:
b0:d0:36:b6:b9:37:75:ad:c2:8b:e4:2f:56:c6:6e:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:4A:11:41:6D:3F:1B:1B:09:CC:01:83:EA:8D:E6:12:EC:D5:AA
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D86BD134E17D11F08C120CBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:98:37:75:92:58:26:c3:6c:59:41:32:db:65:7c:df:6c:2d:
e4:52:0a:36:46:60:2f:ed:69:7f:8d:11:fd:2f:71:05:2e:42:
d3:7c:71:3d:20:5d:3e:cb:02:aa:46:71:06:82:e0:be:76:a2:
c9:de:1f:c0:5b:42:4c:c9:51:57:57:6d:65:fb:27:9e:23:48:
84:99:ec:56:b6:0d:37:02:f7:1b:5d:11:1a:4b:a9:cb:ac:8f:
57:f4:c0:62:41:51:8b:6f:fc:4c:be:8e:92:7c:6d:e5:63:ee:
08:c0:52:9b:62:14:78:b4:db:39:6e:06:5f:3c:4b:f6:fb:88:
85:d8:59:1b:df:00:08:f6:6b:c4:11:d8:18:cf:77:e5:a0:fa:
da:d6:fc:b5:58:e6:29:e8:d9:82:1e:37:6f:ae:8d:8d:9a:56:
64:2c:69:04:81:d1:98:63:14:da:10:61:cf:8a:eb:b0:e0:40:
a6:ca:fc:27:67:91:75:34:8e:27:50:99:06:54:d7:e2:72:c6:
ff:a0:1e:36:c9:81:27:30:82:62:46:14:3c:2d:5f:36:ba:72:
e5:8e:21:c3:31:b8:09:bb:40:19:cd:8f:bf:e8:ab:c7:27:0c:
d4:b7:19:cb:a3:d2:f4:f7:7c:e5:30:20:31:75:e9:7f:b2:5b:
20:3f:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:05 2026 by rpki-client