Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
File: afrinic-ca.cer (raw, json)
Hash identifier: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=
Subject key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 41
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
caRepository: rsync://rpki.afrinic.net/repository/afrinic/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 14 Dec 2023 08:15:11 +0000
Certificate not after: Thu 14 Dec 2028 00:00:00 +0000
Subordinate resources: AS: 1228 -- 1232
AS: 2018
AS: 2561
AS: 2905
AS: 3067 -- 3068
AS: 3208
AS: 3741
AS: 4178
AS: 4571
AS: 5536
AS: 5713
AS: 5734
AS: 6083
AS: 6089
AS: 6127
AS: 6149
AS: 6180
AS: 6187
AS: 6351
AS: 6529
AS: 6560
AS: 6713
AS: 6879
AS: 6968
AS: 7020
AS: 7154
AS: 7231
AS: 7390
AS: 7420
AS: 7460
AS: 7971 -- 7972
AS: 8094
AS: 8524
AS: 8770
AS: 9129
AS: 10247
AS: 10262
AS: 10331
AS: 10393
AS: 10474
AS: 10505
AS: 10540
AS: 10575
AS: 10798
AS: 10803
AS: 10898
AS: 11125
AS: 11157
AS: 11201
AS: 11259
AS: 11265
AS: 11380
AS: 11569
AS: 11645
AS: 11744
AS: 11845
AS: 11909
AS: 12091
AS: 12143
AS: 12258
AS: 12455
AS: 12556
AS: 13224
AS: 13402
AS: 13519
AS: 13569
AS: 13854
AS: 14029
AS: 14115
AS: 14331
AS: 14429
AS: 14516
AS: 14988
AS: 15022
AS: 15159
AS: 15399
AS: 15475
AS: 15706
AS: 15804
AS: 15825
AS: 15834
AS: 15964
AS: 16058
AS: 16214
AS: 16284
AS: 16416
AS: 16547
AS: 16630
AS: 16637
AS: 16800
AS: 16853
AS: 16907
AS: 17148
AS: 17220
AS: 17260
AS: 17312
AS: 17400
AS: 17652
AS: 18775
AS: 18922
AS: 18931
AS: 19136
AS: 19232
AS: 19676
AS: 19711
AS: 19832
AS: 19847
AS: 20011
AS: 20086
AS: 20095
AS: 20180
AS: 20294
AS: 20459
AS: 20484
AS: 20858
AS: 20928
AS: 21003
AS: 21152
AS: 21242
AS: 21271
AS: 21278
AS: 21280
AS: 21391
AS: 21452
AS: 21739
AS: 21819
AS: 22354 -- 22355
AS: 22386
AS: 22572
AS: 22690
AS: 22735
AS: 22750
AS: 22939
AS: 23058
AS: 23549
AS: 23889
AS: 24736
AS: 24757
AS: 24788
AS: 24801
AS: 24835
AS: 24863
AS: 24878
AS: 24987
AS: 25163
AS: 25250
AS: 25362
AS: 25364
AS: 25543
AS: 25568
AS: 25576
AS: 25695
AS: 25726
AS: 25793
AS: 25818
AS: 26106
AS: 26130
AS: 26422
AS: 26625
AS: 26754
AS: 27576
AS: 27598
AS: 28683
AS: 28698
AS: 28913
AS: 29091
AS: 29338
AS: 29340
AS: 29428
AS: 29495
AS: 29544
AS: 29571
AS: 29614
AS: 29674
AS: 29918
AS: 29975
AS: 30073
AS: 30306
AS: 30429
AS: 30619
AS: 30896
AS: 30980
AS: 30982 -- 30999
AS: 31065
AS: 31245
AS: 31619
AS: 31810
AS: 31856
AS: 31960
AS: 32017
AS: 32279
AS: 32398
AS: 32437
AS: 32653
AS: 32714
AS: 32717
AS: 32842
AS: 32860
AS: 33567
AS: 33579
AS: 33762 -- 33791
AS: 36864 -- 37887
AS: 327680 -- 329727
IP: 41.0.0.0/8
IP: 102.0.0.0/8
IP: 105.0.0.0/8
IP: 154.0.0.0/16
IP: 154.16.0.0/16
IP: 154.65.0.0 -- 154.255.255.255
IP: 196.0.0.0 -- 196.1.0.255
IP: 196.1.4.0/24
IP: 196.1.7.0 -- 196.1.63.255
IP: 196.1.71.0/24
IP: 196.1.74.0 -- 196.1.103.255
IP: 196.1.115.0 -- 196.1.133.255
IP: 196.1.137.0/24
IP: 196.1.143.0 -- 196.1.159.255
IP: 196.1.176.0 -- 196.1.255.255
IP: 196.2.2.0/23
IP: 196.2.8.0 -- 196.2.255.255
IP: 196.3.14.0/23
IP: 196.3.57.0 -- 196.3.64.255
IP: 196.3.90.0/24
IP: 196.3.92.0 -- 196.3.94.255
IP: 196.3.96.0/21
IP: 196.3.105.0/24
IP: 196.3.107.0 -- 196.3.131.255
IP: 196.3.148.0/22
IP: 196.3.154.0 -- 196.3.183.255
IP: 196.3.224.0 -- 196.4.45.255
IP: 196.4.71.0 -- 196.11.171.255
IP: 196.11.174.0 -- 196.11.239.255
IP: 196.11.248.0/21
IP: 196.12.10.0 -- 196.12.31.255
IP: 196.12.128.0/19
IP: 196.12.192.0 -- 196.15.15.255
IP: 196.15.64.0 -- 196.26.255.255
IP: 196.27.64.0 -- 196.28.47.255
IP: 196.28.64.0 -- 196.29.63.255
IP: 196.29.96.0 -- 196.31.255.255
IP: 196.32.8.0 -- 196.32.31.255
IP: 196.32.96.0/19
IP: 196.32.160.0 -- 196.39.255.255
IP: 196.40.96.0 -- 196.41.255.255
IP: 196.42.64.0 -- 196.216.0.255
IP: 196.216.2.0 -- 197.255.255.255
IP: 2001:4200::/23
IP: 2c00::/12
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 11:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Dec 14 08:15:11 2023 GMT
Not After : Dec 14 00:00:00 2028 GMT
Subject: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:13:1d:d0:f6:16:98:ec:db:65:9a:bb:c0:
00:25:1d:d9:a4:00:97:8c:96:e4:90:e4:c6:b4:dc:
ce:f8:ee:0b:01:91:db:d3:d9:7f:39:53:99:f9:e8:
ba:bc:72:83:c5:f7:af:06:2b:53:ac:3d:14:38:de:
ff:38:0d:3a:65:96:dc:45:71:76:31:5a:4f:7e:b2:
d5:c0:e5:89:ee:70:66:4e:42:4e:c4:88:c8:57:c0:
5a:5f:15:21:39:6b:65:da:a6:70:ca:83:10:c3:b9:
7a:82:8d:41:6b:c4:9e:ae:8b:74:5b:17:9a:40:8f:
39:d8:6f:a4:0a:6c:41:8c:25:7a:80:c5:83:1c:5d:
2b:67:b9:f9:03:54:b4:f9:3d:09:cc:fd:19:a6:6c:
77:01:4e:4e:c0:fb:d6:61:81:e9:8c:e2:80:4c:40:
0b:97:e4:94:97:0f:3a:27:ac:de:55:90:6e:94:7f:
96:7a:45:a6:6f:f3:d9:55:6e:cc:e6:b4:39:96:76:
9b:59:5e:60:9c:16:03:34:eb:25:16:41:37:03:0b:
7e:76:b7:42:b7:70:e4:d0:4b:d7:45:23:b5:01:da:
a1:92:ae:a5:9d:71:e9:5d:f7:51:84:7c:74:54:4c:
6c:7d:c7:94:5e:1f:f3:ef:e5:55:d1:96:68:16:c5:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/afrinic/
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1228-1232
2018
2561
2905
3067-3068
3208
3741
4178
4571
5536
5713
5734
6083
6089
6127
6149
6180
6187
6351
6529
6560
6713
6879
6968
7020
7154
7231
7390
7420
7460
7971-7972
8094
8524
8770
9129
10247
10262
10331
10393
10474
10505
10540
10575
10798
10803
10898
11125
11157
11201
11259
11265
11380
11569
11645
11744
11845
11909
12091
12143
12258
12455
12556
13224
13402
13519
13569
13854
14029
14115
14331
14429
14516
14988
15022
15159
15399
15475
15706
15804
15825
15834
15964
16058
16214
16284
16416
16547
16630
16637
16800
16853
16907
17148
17220
17260
17312
17400
17652
18775
18922
18931
19136
19232
19676
19711
19832
19847
20011
20086
20095
20180
20294
20459
20484
20858
20928
21003
21152
21242
21271
21278
21280
21391
21452
21739
21819
22354-22355
22386
22572
22690
22735
22750
22939
23058
23549
23889
24736
24757
24788
24801
24835
24863
24878
24987
25163
25250
25362
25364
25543
25568
25576
25695
25726
25793
25818
26106
26130
26422
26625
26754
27576
27598
28683
28698
28913
29091
29338
29340
29428
29495
29544
29571
29614
29674
29918
29975
30073
30306
30429
30619
30896
30980
30982-30999
31065
31245
31619
31810
31856
31960
32017
32279
32398
32437
32653
32714
32717
32842
32860
33567
33579
33762-33791
36864-37887
327680-329727
sbgp-ipAddrBlock: critical
IPv4:
41.0.0.0/8
102.0.0.0/8
105.0.0.0/8
154.0.0.0/16
154.16.0.0/16
154.65.0.0-154.255.255.255
196.0.0.0-196.1.0.255
196.1.4.0/24
196.1.7.0-196.1.63.255
196.1.71.0/24
196.1.74.0-196.1.103.255
196.1.115.0-196.1.133.255
196.1.137.0/24
196.1.143.0-196.1.159.255
196.1.176.0-196.1.255.255
196.2.2.0/23
196.2.8.0-196.2.255.255
196.3.14.0/23
196.3.57.0-196.3.64.255
196.3.90.0/24
196.3.92.0-196.3.94.255
196.3.96.0/21
196.3.105.0/24
196.3.107.0-196.3.131.255
196.3.148.0/22
196.3.154.0-196.3.183.255
196.3.224.0-196.4.45.255
196.4.71.0-196.11.171.255
196.11.174.0-196.11.239.255
196.11.248.0/21
196.12.10.0-196.12.31.255
196.12.128.0/19
196.12.192.0-196.15.15.255
196.15.64.0-196.26.255.255
196.27.64.0-196.28.47.255
196.28.64.0-196.29.63.255
196.29.96.0-196.31.255.255
196.32.8.0-196.32.31.255
196.32.96.0/19
196.32.160.0-196.39.255.255
196.40.96.0-196.41.255.255
196.42.64.0-196.216.0.255
196.216.2.0-197.255.255.255
IPv6:
2001:4200::/23
2c00::/12
Signature Algorithm: sha256WithRSAEncryption
2a:bc:15:45:0d:3d:5b:10:f7:df:5d:a9:88:2b:cb:1e:b1:a5:
4b:2c:59:2f:5a:09:95:1e:43:d0:49:b8:8c:1e:78:52:b3:f4:
58:0f:ff:a6:f6:ab:58:c0:27:18:8c:86:06:e2:ed:fb:64:4f:
99:1f:72:73:17:0d:d4:dd:fb:f4:18:ef:d5:23:69:bc:af:7d:
4b:15:f3:28:81:e8:58:50:b4:dc:05:5e:a6:bd:d7:1f:0a:2f:
8f:e3:d4:1a:86:44:3a:52:e4:2d:b7:83:6f:aa:2c:4d:9d:22:
9b:78:51:ef:30:94:78:ab:1f:02:eb:cd:42:66:a1:57:3e:83:
1f:cf:41:31:f5:21:d7:4b:64:08:a7:71:0f:13:94:e5:5b:49:
77:7c:76:77:25:fa:e2:d9:16:1c:3e:5a:c3:75:08:ca:fe:22:
18:c4:ff:47:0c:43:a2:01:ac:6c:f7:39:29:00:d4:2d:bf:a6:
2a:e5:0a:01:3f:21:94:61:68:aa:f3:d2:3d:57:67:0d:49:3a:
2c:d4:dc:ec:88:eb:ae:6b:ae:7d:f8:03:5f:29:5d:cd:07:bc:
b3:80:e4:39:6f:d2:54:8c:e9:77:3e:12:90:8e:04:b9:9d:62:
49:2f:ff:3d:87:d9:d6:17:de:1f:88:7f:ae:85:00:0f:d8:01:
b0:61:2b:01
-----BEGIN CERTIFICATE-----
MIIKuDCCCaCgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjMxMjE0MDgxNTExWhcNMjgxMjE0MDAw
MDAwWjBFMRAwDgYDVQQDEwdBRlJJTklDMTEwLwYDVQQFEygyQjU3ODk3QTdDQTk2
NEMzQzhCN0Y3QkREQUE3QTREQTM0QTk4RjgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxxkTHdD2Fpjs22Wau8AAJR3ZpACXjJbkkOTGtNzO+O4LAZHb
09l/OVOZ+ei6vHKDxfevBitTrD0UON7/OA06ZZbcRXF2MVpPfrLVwOWJ7nBmTkJO
xIjIV8BaXxUhOWtl2qZwyoMQw7l6go1Ba8Serot0WxeaQI852G+kCmxBjCV6gMWD
HF0rZ7n5A1S0+T0JzP0Zpmx3AU5OwPvWYYHpjOKATEALl+SUlw86J6zeVZBulH+W
ekWmb/PZVW7M5rQ5lnabWV5gnBYDNOslFkE3Awt+drdCt3Dk0EvXRSO1Adqhkq6l
nXHpXfdRhHx0VExsfceUXh/z7+VV0ZZoFsUO3wIDAQABo4IH0zCCB88wHQYDVR0O
BBYEFCtXiXp8qWTDyLf3vdqnpNo0qY+AMB8GA1UdIwQYMBaAFOtoDzj11scbtLEG
uL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5
LzA0RThCMEQ4MEY0RDExRTBCNjU3RDg5MzEzNjdBRTdELzYyZ1BPUFhXeHh1MHNR
YTR2UVpZVUJMYU1iWS5jcmwwSwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUFBzAChi9y
c3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9BZnJpTklDLmNlcjBP
BgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8v
cnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCB2gYIKwYBBQUHAQsEgc0w
gcowOAYIKwYBBQUHMAWGLHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0
b3J5L2FmcmluaWMvMFcGCCsGAQUFBzAKhktyc3luYzovL3Jwa2kuYWZyaW5pYy5u
ZXQvcmVwb3NpdG9yeS9hZnJpbmljL0sxZUplbnlwWk1QSXRfZTkycWVrMmpTcGo0
QS5tZnQwNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMIIDgwYIKwYBBQUHAQgBAf8EggNyMIIDbqCCA2owggNmMAgC
AgTMAgIE0AICB+ICAgoBAgILWTAIAgIL+wICC/wCAgyIAgIOnQICEFICAhHbAgIV
oAICFlECAhZmAgIXwwICF8kCAhfvAgIYBQICGCQCAhgrAgIYzwICGYECAhmgAgIa
OQICGt8CAhs4AgIbbAICG/ICAhw/AgIc3gICHPwCAh0kMAgCAh8jAgIfJAICH54C
AiFMAgIiQgICI6kCAigHAgIoFgICKFsCAiiZAgIo6gICKQkCAiksAgIpTwICKi4C
AiozAgIqkgICK3UCAiuVAgIrwQICK/sCAiwBAgIsdAICLTECAi19AgIt4AICLkUC
Ai6FAgIvOwICL28CAi/iAgIwpwICMQwCAjOoAgI0WgICNM8CAjUBAgI2HgICNs0C
AjcjAgI3+wICOF0CAji0AgI6jAICOq4CAjs3AgI8JwICPHMCAj1aAgI9vAICPdEC
Aj3aAgI+XAICProCAj9WAgI/nAICQCACAkCjAgJA9gICQP0CAkGgAgJB1QICQgsC
AkL8AgJDRAICQ2wCAkOgAgJD+AICRPQCAklXAgJJ6gICSfMCAkrAAgJLIAICTNwC
Akz/AgJNeAICTYcCAk4rAgJOdgICTn8CAk7UAgJPRgICT+sCAlAEAgJRegICUcAC
AlILAgJSoAICUvoCAlMXAgJTHgICUyACAlOPAgJTzAICVOsCAlU7MAgCAldSAgJX
UwICV3ICAlgsAgJYogICWM8CAljeAgJZmwICWhICAlv9AgJdUQICYKACAmC1AgJg
1AICYOECAmEDAgJhHwICYS4CAmGbAgJiSwICYqICAmMSAgJjFAICY8cCAmPgAgJj
6AICZF8CAmR+AgJkwQICZNoCAmX6AgJmEgICZzYCAmgBAgJoggICa7gCAmvOAgJw
CwICcBoCAnDxAgJxowICcpoCAnKcAgJy9AICczcCAnNoAgJzgwICc64CAnPqAgJ0
3gICdRcCAnV5AgJ2YgICdt0CAnebAgJ4sAICeQQwCAICeQYCAnkXAgJ5WQICeg0C
AnuDAgJ8QgICfHACAnzYAgJ9EQICfhcCAn6OAgJ+tQICf40CAn/KAgJ/zQIDAIBK
AgMAgFwCAwCDHwIDAIMrMAoCAwCD4gIDAIP/MAoCAwCQAAIDAJP/MAoCAwUAAAID
BQf/MIIB8QYIKwYBBQUHAQcBAf8EggHgMIIB3DCCAcUEAgABMIIBvQMCACkDAgBm
AwIAaQMDAJoAAwMAmhAwCQMDAJpBAwIAmjAKAwICxAMEAMQBAAMEAMQBBDAMAwQA
xAEHAwQGxAEAAwQAxAFHMAwDBAHEAUoDBAPEAWAwDAMEAMQBcwMEAcQBhAMEAMQB
iTAMAwQAxAGPAwQFxAGAMAsDBATEAbADAwHEAAMEAcQCAjALAwQDxAIIAwMAxAID
BAHEAw4wDAMEAMQDOQMEAMQDQAMEAMQDWjAMAwQCxANcAwQAxANeAwQDxANgAwQA
xANpMAwDBADEA2sDBALEA4ADBALEA5QwDAMEAcQDmgMEA8QDsDAMAwQFxAPgAwQB
xAQsMAwDBADEBEcDBALEC6gwDAMEAcQLrgMEBMQL4AMEA8QL+DAMAwQBxAwKAwQF
xAwAAwQFxAyAMAwDBAbEDMADBATEDwAwCwMEBsQPQAMDAMQaMAwDBAbEG0ADBATE
HCAwDAMEBsQcQAMEBsQdADALAwQFxB1gAwMFxAAwDAMEA8QgCAMEBcQgAAMEBcQg
YDALAwQFxCCgAwMDxCAwCwMEBcQoYAMDAcQoMAwDBAbEKkADBADE2AAwCgMEAcTY
AgMCAcQwEQQCAAIwCwMEASABQgMDBCwAMA0GCSqGSIb3DQEBCwUAA4IBAQAqvBVF
DT1bEPffXamIK8sesaVLLFkvWgmVHkPQSbiMHnhSs/RYD/+m9qtYwCcYjIYG4u37
ZE+ZH3JzFw3U3fv0GO/VI2m8r31LFfMogehYULTcBV6mvdcfCi+P49QahkQ6UuQt
t4NvqixNnSKbeFHvMJR4qx8C681CZqFXPoMfz0Ex9SHXS2QIp3EPE5TlW0l3fHZ3
Jfri2RYcPlrDdQjK/iIYxP9HDEOiAaxs9zkpANQtv6Yq5QoBPyGUYWiq89I9V2cN
STos1NzsiOuua659+ANfKV3NB7yzgOQ5b9JUjOl3PhKQjgS5nWJJL/89h9nWF94f
iH+uhQAP2AGwYSsB
-----END CERTIFICATE-----
Generated at Mon Jul 7 00:30:37 2025 by rpki-client