This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BDB6B8AC9D011F0B86D5FBADAE4EC9C.roa
File: 0BDB6B8AC9D011F0B86D5FBADAE4EC9C.roa (raw, json)
Hash identifier: gVBqq0Z8Na6/7pcw7szPzNkqvAFH7ehEZeI8Mzl5SZs=
Subject key identifier: 22:9C:2F:B7:93:DA:88:54:87:11:E3:D4:96:17:87:9D:93:A3:7A:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 168A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BDB6B8AC9D011F0B86D5FBADAE4EC9C.roa
Signing time: Tue 25 Nov 2025 07:26:24 +0000
ROA not before: Tue 25 Nov 2025 07:26:15 +0000
ROA not after: Thu 25 Nov 2027 07:26:15 +0000
asID: 60949
IP address blocks: 102.129.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 30 Nov 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5770 (0x168a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 25 07:26:15 2025 GMT
Not After : Nov 25 07:26:15 2027 GMT
Subject: CN=69255a20-b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:8e:b1:7a:8b:a0:61:fa:b5:56:c9:fe:b2:
bf:75:c1:0b:dd:be:4f:f7:64:b3:be:32:c7:ef:6b:
d0:b0:3e:0e:29:ab:fd:fe:e2:6a:d0:9f:d3:53:fc:
39:c2:9c:d8:17:00:de:77:09:30:1e:17:38:9e:f2:
c2:ed:84:69:31:27:07:44:4e:e6:a1:44:dd:d7:ef:
ce:4e:a4:1b:2d:f3:98:b6:47:c9:86:96:f0:cf:44:
fb:73:ae:bb:0c:af:4c:2b:e2:80:dc:5d:84:2e:44:
5d:e2:37:f7:b1:f6:c1:a0:33:81:22:c4:4b:ca:78:
97:65:8b:36:76:04:18:39:56:7d:33:9b:c1:5b:49:
56:71:2a:a2:e7:a7:e6:9c:c4:6e:58:db:5c:de:32:
96:e5:93:53:93:78:6a:0e:df:68:0f:87:ef:9f:92:
0c:55:29:be:24:5c:d5:d0:5e:1a:28:ab:e8:72:86:
95:30:76:4a:23:49:47:14:ab:ab:c5:07:8a:55:0c:
7c:d4:10:87:85:11:83:f3:07:a3:04:d6:7a:3d:ab:
bc:12:2c:f5:02:af:85:ca:a4:5c:97:68:1d:58:8f:
2d:5b:58:ed:17:43:c9:75:ca:e9:99:05:13:90:a0:
1e:a8:58:36:38:8a:49:a2:5e:b9:dc:fa:2c:a3:db:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:2F:B7:93:DA:88:54:87:11:E3:D4:96:17:87:9D:93:A3:7A:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BDB6B8AC9D011F0B86D5FBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:3b:8d:bf:12:51:c6:ed:db:4e:90:df:35:84:26:f1:a8:94:
31:a5:c4:6f:b8:00:d7:15:63:08:eb:b6:df:d0:fe:89:b2:32:
53:dc:eb:76:c6:22:6c:5f:ca:2f:b7:95:c2:82:d9:9d:b4:a9:
ed:a7:ba:7e:76:46:8f:cc:08:db:07:37:4a:a9:ea:81:9b:cc:
ad:e7:31:bc:ac:38:74:a5:ec:8a:49:88:04:aa:64:22:ee:a5:
c5:98:10:bc:08:30:0e:65:d7:52:3b:d1:d7:e1:d1:2d:63:8e:
e8:ec:b8:4a:0a:db:ba:65:99:10:96:c9:4d:02:c0:8d:e5:6d:
de:86:33:56:0e:e0:8c:2c:9d:44:c4:84:bb:02:6a:9c:26:74:
01:f5:3a:44:c1:2b:9b:5f:24:27:14:33:7a:2a:4e:79:6a:b4:
d8:aa:01:ed:3b:2f:25:3b:45:bc:53:e0:bc:3a:60:24:35:b3:
7c:7d:b6:3d:4c:e6:62:c9:f1:5a:04:01:ee:74:8e:71:01:81:
02:ac:ed:be:9c:2b:e6:70:c1:df:3e:c6:44:d0:2e:35:5e:71:
37:eb:cf:d0:ed:90:88:94:f5:ae:7f:b5:f1:00:ac:c5:ce:1f:
e9:75:56:15:79:6d:27:f9:49:62:b4:6e:a8:cc:95:e5:aa:61:
e7:bf:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 04:11:51 2025 by rpki-client