This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31A30E74C49211F0837CDBADDAE4EC9C.roa
File: 31A30E74C49211F0837CDBADDAE4EC9C.roa (raw, json)
Hash identifier: b3DQ2+AV8gWMvVHFTwe9GlGhp90FmLswWnsY6E38LHU=
Subject key identifier: 9D:CB:66:56:16:7C:97:54:85:88:6F:2B:AE:6E:C8:F2:53:85:92:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1CE3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31A30E74C49211F0837CDBADDAE4EC9C.roa
Signing time: Tue 18 Nov 2025 15:21:03 +0000
ROA not before: Tue 18 Nov 2025 15:20:58 +0000
ROA not after: Sat 20 Nov 2027 15:20:58 +0000
asID: 212238
IP address blocks: 154.16.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Nov 2025 01:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7395 (0x1ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 18 15:20:58 2025 GMT
Not After : Nov 20 15:20:58 2027 GMT
Subject: CN=691c8edf-740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:23:e6:fa:ae:ee:61:63:58:13:75:2c:75:
fc:8a:64:1f:90:b3:05:a8:33:ac:fa:12:22:8e:b3:
1e:f2:62:5e:fc:bd:6d:7d:f2:7e:9f:9c:1f:6b:b5:
c5:d4:04:28:ae:cf:69:29:75:66:17:ec:95:c7:e4:
5c:2d:37:24:42:54:46:5b:c1:dd:25:08:27:78:0f:
37:a1:33:5f:7e:7f:6e:24:36:2c:e2:b1:cb:67:04:
ec:a8:ae:b8:9a:34:7d:f1:d6:90:8f:b2:32:3b:e9:
0f:c4:81:b7:34:99:5c:78:25:24:51:13:97:13:55:
b6:cc:07:00:c9:2b:04:4e:a3:cc:8f:01:11:b7:4e:
73:1e:06:9d:a6:58:27:84:a3:26:99:85:57:3d:95:
81:ec:84:4a:dc:56:01:fe:be:4e:81:cb:82:8f:35:
ae:23:b0:a3:21:1f:5e:7d:bd:88:9c:c1:61:dd:82:
c8:b4:56:ed:78:aa:c9:27:31:c1:f4:94:03:81:c4:
23:41:2b:e7:3d:2a:af:1b:53:be:bd:68:42:08:8a:
1d:1a:db:42:42:75:6d:d0:42:4a:4c:5b:2f:d3:53:
d3:e7:db:d2:d9:c2:22:88:bb:5e:49:90:1a:70:e9:
7f:99:43:3e:58:9b:e8:75:4c:36:5f:2e:b3:4d:89:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:66:56:16:7C:97:54:85:88:6F:2B:AE:6E:C8:F2:53:85:92:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31A30E74C49211F0837CDBADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:81:99:86:56:7a:66:5e:a1:f7:a9:eb:fb:95:81:7a:18:be:
c5:68:e9:e3:18:8e:f7:9f:a0:e5:2f:8d:8e:bd:d5:f0:98:fc:
01:60:5a:ac:0c:65:79:cb:d5:d8:26:0c:2c:94:ae:a1:3f:6e:
64:a3:d2:6a:a9:e9:99:b3:0d:46:e2:bc:45:83:84:f8:65:36:
0e:4f:90:92:13:20:eb:78:cc:73:e2:e6:17:84:8b:f4:94:78:
5a:67:7f:be:01:6e:c1:e6:27:1e:fb:43:09:d4:a2:5a:87:df:
78:17:71:86:f8:96:48:9d:57:97:aa:9a:4d:38:06:8a:df:78:
95:a8:cd:be:5e:4e:d9:86:0f:7b:d8:ae:98:a7:da:97:85:71:
68:e3:36:06:e8:83:65:45:92:58:e5:2e:fc:e7:72:f5:e8:ca:
fb:72:ac:94:42:7f:72:a8:33:63:18:d6:ec:f8:1a:bd:32:c0:
62:b9:de:70:d3:9f:bd:96:d7:1a:59:85:45:67:9a:66:40:a4:
ca:b3:f2:8f:a8:4a:4e:ae:cf:ed:0d:9b:9f:fb:30:72:fc:63:
d3:43:91:bd:ab:f4:2a:7e:82:4e:ee:58:a0:a5:bf:7d:94:4a:
63:bf:1d:d0:bc:3e:a8:82:f5:13:4c:02:dd:1d:d3:3c:02:cf:
c6:ce:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 13:48:53 2025 by rpki-client