This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa
File: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (raw, json)
Hash identifier: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=
Subject key identifier: 65:DD:67:AC:55:8E:F6:30:AA:66:0A:24:E8:58:DF:D3:6F:AD:A9:CC
Certificate issuer: /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial: 04DF
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa
Signing time: Thu 20 Nov 2025 08:24:09 +0000
ROA not before: Thu 20 Nov 2025 08:24:04 +0000
ROA not after: Mon 31 Dec 2035 08:24:04 +0000
asID: 328888
IP address blocks: 102.206.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Dec 2025 02:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Validity
Not Before: Nov 20 08:24:04 2025 GMT
Not After : Dec 31 08:24:04 2035 GMT
Subject: CN=691ed029-2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:2f:a3:6f:ee:81:78:34:7b:1f:a9:8e:be:
31:55:e6:36:66:7f:7e:60:f1:47:e5:35:e1:b3:ee:
c4:e1:b0:e2:8b:3c:be:d9:10:8a:6e:b4:4a:ad:33:
02:a9:68:fd:3a:54:ef:0b:ca:93:7f:fc:2e:dc:9e:
58:d7:83:99:2e:79:14:84:ec:d1:ea:8e:3f:5d:1b:
4c:2c:b0:d6:89:a0:0c:57:5d:3f:54:4e:b5:38:44:
bf:92:fe:41:0e:82:aa:d1:67:d4:c6:e3:e2:e7:f5:
e7:29:51:eb:6a:6d:ab:34:55:5e:24:7e:71:5d:dd:
93:5e:2e:1b:c2:07:16:95:0c:19:75:c0:f6:86:16:
3f:07:fe:df:90:c7:8e:79:df:af:e8:b8:82:9a:97:
37:06:2c:39:a9:2e:a8:49:7c:03:ae:5f:27:a9:e1:
fb:4f:2b:58:ad:bd:34:1f:bb:26:39:f0:2a:79:f7:
50:ce:09:8e:f2:c8:83:09:2f:97:dd:18:94:18:0a:
5f:89:61:f8:10:87:71:72:97:04:51:1e:f0:d3:d8:
e4:8b:75:1f:40:af:6c:f4:51:ef:e9:15:0b:f0:71:
ba:9e:07:8b:ea:e2:9e:6d:b7:3e:90:0d:c5:e6:e8:
8b:db:51:57:56:96:7a:8c:b0:43:1f:4d:40:44:37:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:67:AC:55:8E:F6:30:AA:66:0A:24:E8:58:DF:D3:6F:AD:A9:CC
X509v3 Authority Key Identifier:
keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.100.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:e6:9c:f8:a1:99:65:23:2b:11:20:ba:02:c0:66:36:9d:cb:
b2:83:38:fe:11:98:3a:49:6c:da:0c:73:6a:d7:39:e3:7a:13:
2e:22:f7:4a:fb:19:2a:21:4c:f7:ab:38:05:45:99:ac:38:58:
99:d3:ca:71:40:c7:c1:7a:55:4b:85:8c:f2:3c:5e:e2:c8:22:
5a:45:2f:a5:80:8d:f4:06:93:e1:d8:8d:4e:60:87:9d:14:8e:
23:16:27:7e:e7:63:58:a0:94:e0:7c:ea:8f:cc:37:2b:71:b4:
40:11:ec:81:ee:4f:11:ea:e1:1e:c9:41:6e:b7:11:1d:5f:0f:
6e:fa:61:5d:67:85:65:dc:39:67:93:c4:ae:79:cd:34:5a:16:
81:bd:53:44:fa:15:62:f3:2d:e2:6a:e9:cb:73:7b:b8:f1:a6:
4f:ed:2b:eb:8a:41:8f:5e:e3:be:8f:b1:fa:93:ca:1e:3e:3c:
e4:e9:32:a0:13:90:09:bb:30:d0:47:c8:87:2c:36:b8:d3:db:
f9:a4:14:26:b8:06:8b:28:f5:fd:76:2e:e9:18:4d:f1:e1:29:
38:8d:0e:5e:02:0b:50:a1:43:a4:b1:ad:1d:6b:fb:6a:5f:b8:
d6:92:dc:21:b6:ca:14:b2:ae:c5:60:0f:18:2f:f9:b3:6f:72:
73:d8:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:44:12 2025 by rpki-client