This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa
File: D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa (raw, json)
Hash identifier: 9nS9/qZCYlRlsFfFJabMOal4M3j3reJuxpTuSFn2jwk=
Subject key identifier: 46:BC:7F:1B:0F:A1:00:34:AE:40:0E:49:06:EA:50:2C:2C:5D:36:16
Certificate issuer: /CN=F36BE2EDAF/serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
Certificate serial: 0425
Authority key identifier: 74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa
Signing time: Thu 06 Nov 2025 11:29:25 +0000
ROA not before: Thu 06 Nov 2025 11:29:20 +0000
ROA not after: Mon 31 Dec 2035 11:29:20 +0000
asID: 33779
IP address blocks: 102.204.112.0/22 maxlen: 27
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Dec 2025 03:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BE2EDAF, serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
Validity
Not Before: Nov 6 11:29:20 2025 GMT
Not After : Dec 31 11:29:20 2035 GMT
Subject: CN=690c8695-67c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:2c:0c:dc:82:07:16:47:d8:6b:ce:87:3d:
66:fb:17:e9:ea:a1:8b:5a:ce:94:71:e7:75:35:f6:
eb:17:8d:7e:4c:8c:3f:7c:55:bb:d6:52:92:e3:3b:
a5:b1:48:5e:6b:f2:4a:59:1b:91:ef:c9:69:c8:d7:
2a:d0:eb:e3:cf:7b:5e:62:87:11:09:a9:e5:01:e2:
56:45:65:55:96:ab:e6:19:18:b9:f0:8c:a9:37:4f:
f8:6a:5d:3c:0c:6c:4f:00:b4:ef:af:b6:73:a1:d0:
f7:9d:92:89:8d:cb:91:25:18:b7:a9:56:7c:77:fd:
98:85:12:0b:c7:25:43:57:f6:21:1c:5f:16:da:79:
24:53:3b:75:d3:ed:c8:3e:14:84:ac:a6:1b:f9:9c:
db:dd:7f:f3:66:20:8e:ee:9c:e0:74:ad:45:a0:6f:
8d:2d:08:ee:ec:51:6e:73:14:37:19:7a:5b:e1:8f:
47:9f:ac:90:c3:21:4c:0a:bc:f3:f9:69:3b:f2:ad:
ec:65:4c:c6:17:b6:34:a5:f1:25:fe:e5:20:cd:dd:
76:4f:2e:00:c9:ec:2c:e5:11:57:64:71:5e:82:2a:
52:c2:0b:fb:70:d5:e8:69:43:ca:23:05:b7:dd:2a:
9c:0c:da:00:37:8d:75:bc:dd:c9:93:7d:a8:0e:fe:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:7F:1B:0F:A1:00:34:AE:40:0E:49:06:EA:50:2C:2C:5D:36:16
X509v3 Authority Key Identifier:
keyid:74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.112.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b0:65:cc:47:d6:8d:77:72:46:fd:7e:f0:30:6a:27:96:05:
54:fa:df:2c:19:25:6e:57:86:85:db:7e:f1:6d:d4:a0:c7:08:
4f:42:63:f7:ef:e8:db:4f:8e:95:89:45:2b:cc:74:91:21:80:
a2:48:d9:00:cd:3e:f3:e7:94:bb:17:5f:c0:fc:12:f4:c6:93:
ae:55:45:92:88:0b:60:e3:a2:f4:d4:fe:da:8c:20:0d:bb:1a:
c0:a6:60:f6:de:15:b8:21:4e:8a:a1:11:c7:20:c2:38:14:ae:
eb:7f:de:3c:0a:f9:6d:99:97:f6:36:25:9f:83:00:1b:57:79:
47:d0:78:9d:44:ae:0a:31:8b:e2:f1:13:6c:f1:81:c9:7c:9c:
ae:d9:76:e8:e4:30:02:37:3c:3e:a5:07:4d:96:d3:f0:17:3b:
c6:ce:82:c4:b2:a7:b2:55:54:c3:58:89:e9:c7:4f:14:38:c3:
77:33:54:71:4b:07:50:a3:43:0c:4f:3a:e5:fa:e5:6f:26:e6:
83:58:2c:9a:e4:13:0f:f7:9f:8d:7d:c0:73:db:04:50:57:3e:
30:ef:cc:3c:9c:3f:01:8a:b8:5a:36:86:ff:a2:36:88:15:09:
98:00:3a:49:14:a0:7a:5a:37:e2:34:b3:e6:f3:10:cb:bb:84:
7a:3e:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:45:33 2025 by rpki-client