This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D82E42EC48911F0BC7506F4DAE4EC9C.roa
File: 9D82E42EC48911F0BC7506F4DAE4EC9C.roa (raw, json)
Hash identifier: Zt/yWAQi6ahROZlkMnNlofa8dpwzGrwyLELVOLgztGc=
Subject key identifier: C6:DD:7C:4A:B6:54:3E:7A:84:87:17:C8:4A:50:FF:35:8E:B9:2A:62
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1CBE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D82E42EC48911F0BC7506F4DAE4EC9C.roa
Signing time: Tue 18 Nov 2025 14:19:39 +0000
ROA not before: Tue 18 Nov 2025 14:19:33 +0000
ROA not after: Sat 20 Nov 2027 14:19:33 +0000
asID: 212238
IP address blocks: 154.16.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Nov 2025 01:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7358 (0x1cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 18 14:19:33 2025 GMT
Not After : Nov 20 14:19:33 2027 GMT
Subject: CN=691c807a-ad2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:6b:5d:ca:59:d4:21:d8:66:1b:25:78:d7:
35:4e:ee:a4:c0:5e:b3:ac:0c:a9:31:86:55:a0:01:
97:be:94:47:57:d6:ab:f8:73:bc:ae:06:ba:7a:b1:
be:b2:8e:a7:6b:5b:3d:0a:3c:a9:f9:2b:c4:2c:ef:
bc:ca:d9:39:85:54:ae:bc:1c:75:5e:60:0f:7d:39:
aa:ff:ad:d6:bd:a8:c0:96:50:d3:3e:97:4c:2e:da:
e7:97:99:4c:24:f8:56:a8:94:6c:49:7b:01:09:ff:
83:64:e6:34:95:c1:d0:f7:6b:76:82:e8:05:67:d2:
d2:3e:b2:8c:47:05:02:e9:7a:fc:31:02:1a:9f:bf:
93:ef:2f:1f:0d:b0:06:56:6d:2f:65:59:b9:4f:5a:
c2:e5:d3:9e:e5:1b:65:3d:35:04:46:ef:26:3b:a1:
73:bd:12:4d:81:85:7e:16:87:30:f1:69:81:3b:14:
f7:d9:1b:c5:18:90:a3:cc:e4:25:df:e2:47:49:cb:
4e:88:63:d9:39:c5:d7:fd:6f:fe:19:1d:4e:d4:ba:
18:dc:37:f2:fe:67:94:41:aa:b4:ac:72:dc:ea:9b:
35:27:2a:57:89:a5:cc:9e:c3:d1:59:5c:99:fc:b6:
88:01:93:5d:e1:5d:78:8a:fa:15:31:ab:dd:46:1d:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DD:7C:4A:B6:54:3E:7A:84:87:17:C8:4A:50:FF:35:8E:B9:2A:62
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D82E42EC48911F0BC7506F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.30.0/24
Signature Algorithm: sha256WithRSAEncryption
36:7c:45:0a:49:b4:b6:f3:2d:6c:6e:31:0b:30:9e:3f:9e:3e:
d1:7f:15:51:c8:ae:41:32:37:78:d0:d1:d4:c3:a5:59:64:2a:
12:6a:22:c8:f5:de:18:64:a0:17:be:53:59:ff:f4:3f:63:fd:
1a:67:29:3c:e6:ea:4a:8c:db:65:67:05:3a:c4:35:03:11:cb:
87:54:df:9b:bf:cb:d3:78:f5:48:99:32:36:8a:6a:c8:83:88:
a1:f9:55:2a:ef:55:d2:f8:03:d1:bb:e2:1c:7c:69:2f:fa:0a:
34:94:e8:2c:f3:b5:c4:9a:e4:ce:64:c9:2d:8d:72:50:3e:ed:
ed:dd:2f:df:52:e9:bc:db:0a:45:4b:2f:2e:bd:d5:bf:e6:0e:
c3:79:0a:32:56:f3:3e:33:59:bf:91:54:3c:90:b5:14:e1:92:
6a:e1:48:b8:01:70:66:40:61:cf:73:ec:35:9b:49:db:45:35:
00:dd:69:4d:47:6f:64:ad:9b:1c:a4:5e:d3:58:2f:22:ab:9f:
79:3c:6c:81:51:e4:38:1f:e5:27:df:bb:18:d7:34:08:60:a2:
08:54:d7:98:d1:fe:ae:b9:df:22:05:12:0b:2f:90:c5:7f:15:
96:84:bf:9d:3d:0a:74:a5:f7:e7:3a:e4:dd:77:60:53:a6:35:
62:a3:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 13:52:01 2025 by rpki-client