This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/163B806EBEFF11F09AD7A978DAE4EC9C.roa
File: 163B806EBEFF11F09AD7A978DAE4EC9C.roa (raw, json)
Hash identifier: /RRdqAjpsv8m7r2GyY/BKUpRLM+07+N7E0oDvFGiBQ8=
Subject key identifier: 4C:70:72:42:CD:30:9A:75:85:9C:AE:1D:28:98:2B:66:D8:26:B9:41
Certificate issuer: /CN=F36E68C0AF/serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
Certificate serial: 01EF
Authority key identifier: 8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/163B806EBEFF11F09AD7A978DAE4EC9C.roa
Signing time: Tue 11 Nov 2025 13:05:25 +0000
ROA not before: Tue 11 Nov 2025 13:05:20 +0000
ROA not after: Sun 11 Nov 2035 13:05:20 +0000
asID: 328464
IP address blocks: 102.208.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E68C0AF, serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
Validity
Not Before: Nov 11 13:05:20 2025 GMT
Not After : Nov 11 13:05:20 2035 GMT
Subject: CN=69133495-dd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:fa:3a:f9:8a:fc:a8:38:b9:ca:5d:fb:7d:
47:fa:17:6a:0d:b0:de:d3:df:89:9f:e9:c0:e3:bb:
89:8e:51:fa:00:fd:09:30:0a:aa:c8:ce:cd:7e:8e:
a0:68:2f:0f:cf:f1:f2:2c:c7:12:c3:52:c8:35:b2:
63:b7:37:b7:bb:2d:f6:fe:e6:bf:4d:e4:2b:f2:c3:
b0:d3:09:24:85:60:79:63:44:c9:dc:9d:16:a0:9d:
6e:83:56:75:96:3a:f5:fc:aa:c4:59:78:8d:f6:14:
bc:1c:fd:dd:7a:7c:fa:40:eb:8c:93:42:d2:0a:e2:
cb:54:e5:85:39:7a:99:3d:6a:3c:56:23:72:62:8f:
82:72:10:27:76:30:b3:9e:7e:29:ae:69:6a:9b:31:
a9:e0:3e:3e:fa:cf:b4:b8:b5:45:64:7f:d2:57:21:
b5:89:e7:9a:62:9c:98:9d:74:91:c1:c8:bb:20:d3:
f7:74:91:b3:31:e4:55:e0:73:60:26:cd:fa:ab:1c:
a8:15:be:ad:34:fb:80:9c:36:1f:d1:f4:b4:6a:b0:
68:26:b2:79:98:2e:b2:9c:3f:81:d9:da:7b:ab:46:
63:76:a9:19:86:9d:66:df:c1:51:38:da:9f:70:d4:
48:e4:aa:92:a6:53:85:84:30:9c:b5:20:e8:50:9e:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:70:72:42:CD:30:9A:75:85:9C:AE:1D:28:98:2B:66:D8:26:B9:41
X509v3 Authority Key Identifier:
keyid:8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/163B806EBEFF11F09AD7A978DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:69:1d:d6:87:5b:b9:41:ac:17:cb:1f:e9:04:6e:4e:93:06:
8f:b7:b3:ef:2a:08:f8:d5:76:c1:b4:f5:54:dd:f4:65:ac:ff:
77:cd:fa:e9:d5:fa:6f:54:69:dc:a3:43:c8:61:ff:25:e3:89:
45:73:d4:6d:b0:ee:5e:0b:84:c1:ae:8b:42:ae:dd:cd:e0:ca:
0f:60:35:4c:82:39:31:da:62:a9:62:51:48:98:ad:b1:54:7f:
d3:85:cb:2a:c5:70:96:03:97:16:67:9c:ad:1e:f4:83:62:9a:
ed:f1:5e:c1:10:70:e5:57:da:2d:54:8f:68:bc:88:53:c3:2e:
b2:ea:f0:30:9c:07:de:5f:ff:85:b4:1b:64:3e:40:b7:fe:10:
0f:d7:7e:63:e3:b7:35:a8:1c:85:4d:e1:92:17:f3:94:4f:8b:
04:15:69:21:b6:f6:82:a6:ea:20:c5:47:68:16:3f:75:42:7f:
ea:4e:cb:21:70:0c:a5:df:16:a0:83:75:7e:28:5c:0a:ef:08:
72:b8:dd:32:b1:45:d9:a9:f3:6a:3f:51:40:37:1c:26:e1:c2:
20:ef:0d:02:f2:36:b7:19:5c:79:4f:89:18:f4:87:b3:88:a8:
f5:16:87:a1:7e:a9:09:ae:94:de:5b:f4:16:57:83:68:d6:ed:
c4:5a:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:49:42 2025 by rpki-client