This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa
File: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (raw, json)
Hash identifier: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=
Subject key identifier: D2:B7:B2:48:E6:33:04:13:AA:D6:2D:5F:08:70:FA:06:CC:99:25:9B
Certificate issuer: /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial: 12
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa
Signing time: Wed 10 Dec 2025 21:34:02 +0000
ROA not before: Wed 10 Dec 2025 21:33:58 +0000
ROA not after: Sun 31 Dec 2045 21:33:58 +0000
asID: 37069
IP address blocks: 41.91.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Dec 2025 00:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Validity
Not Before: Dec 10 21:33:58 2025 GMT
Not After : Dec 31 21:33:58 2045 GMT
Subject: CN=6939e74a-c064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:47:d6:0e:1a:b5:30:2c:1f:3a:df:57:f2:
a5:d7:47:eb:c5:41:a2:83:19:8c:87:e3:fd:6f:d6:
e0:b7:17:da:8a:02:a3:08:66:d1:11:56:2e:cd:0e:
b1:38:55:b4:da:87:7f:69:92:82:5c:99:a8:bf:59:
13:c8:e4:69:31:37:5f:9a:f5:ec:bf:39:b8:39:be:
7e:75:e5:6a:00:4a:99:bb:d6:94:b7:29:70:01:16:
8d:32:08:eb:60:9a:78:4d:a1:5d:ea:4e:d3:f5:06:
14:15:d7:56:ee:72:fa:00:d9:5d:eb:aa:b2:cf:1a:
2a:63:7d:28:5d:05:1e:58:db:29:5a:34:9f:9c:0c:
69:7c:19:77:e0:ac:68:67:93:24:5d:79:5b:db:3e:
05:6f:28:5d:12:9b:f8:b2:23:73:f1:f4:37:e5:d3:
16:f5:f4:69:2e:11:eb:54:b3:9e:57:3c:e7:34:9e:
18:ed:69:3a:b8:65:4b:ca:ff:b2:9c:38:13:7e:9c:
07:0f:51:6c:72:71:cc:8d:36:0e:ea:ee:7d:c6:b4:
2a:94:45:8b:10:bd:96:69:b7:87:7d:f4:66:1a:34:
9a:1d:20:58:db:f1:5e:54:85:93:70:d8:b8:40:61:
c1:2d:6c:48:62:8c:78:4f:7e:49:f6:31:4d:d5:df:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:B2:48:E6:33:04:13:AA:D6:2D:5F:08:70:FA:06:CC:99:25:9B
X509v3 Authority Key Identifier:
keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.91.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:f8:e6:af:4a:93:40:7a:e0:82:a3:e3:94:8c:2e:88:16:15:
b1:a0:2a:25:79:4f:0e:83:88:cb:f9:49:fd:28:bb:dd:6f:da:
5b:bf:f3:cd:68:5a:38:e8:10:97:69:28:a9:4b:ac:fc:02:b4:
f8:c7:22:2b:70:49:20:df:c2:38:c2:36:03:80:4a:da:f1:ae:
d4:4e:47:07:c0:32:de:11:45:9e:2a:7f:4e:d1:ef:7c:95:4e:
c5:4b:32:94:73:71:5a:a5:16:0c:3d:71:87:fa:a7:43:1d:a4:
aa:93:f5:fb:f6:24:6d:1d:31:22:c3:31:7e:78:0a:5c:6e:50:
68:34:22:79:2a:1d:ed:fe:f8:e4:ef:2d:22:95:93:7c:2d:ca:
fb:9b:d3:ee:37:99:d0:51:da:d1:d1:63:d2:e1:df:3b:c7:e9:
a0:f1:47:1d:e1:33:c5:37:61:60:6e:7c:d2:ea:d8:93:4d:52:
f7:95:d5:aa:2b:7f:a3:6a:45:5b:68:2f:ec:2f:3b:64:5a:a8:
06:71:c5:d6:a8:34:c3:02:9d:1d:75:0a:40:3e:cc:0b:13:fa:
69:62:57:63:a1:da:f8:9d:96:a1:e6:ef:60:12:62:93:e3:19:
5c:91:3a:4d:28:dc:e1:3a:f7:5a:0c:52:b3:58:d0:a4:ad:f8:
e2:aa:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:43 2025 by rpki-client