This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DF36CBCABEF711F08A36B0CADAE4EC9C.roa
File: DF36CBCABEF711F08A36B0CADAE4EC9C.roa (raw, json)
Hash identifier: AOAhdb8NfSG9X3GlC/Vi6d309IftduVQ5MLyZDqd8CA=
Subject key identifier: 89:83:66:72:27:8F:05:EC:AC:8A:2B:0C:4B:61:D7:BE:E2:C6:10:6F
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 06DB
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DF36CBCABEF711F08A36B0CADAE4EC9C.roa
Signing time: Tue 11 Nov 2025 12:13:46 +0000
ROA not before: Tue 11 Nov 2025 12:13:42 +0000
ROA not after: Sun 01 Nov 2026 12:13:42 +0000
asID: 398465
IP address blocks: 196.44.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 25 Nov 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Nov 11 12:13:42 2025 GMT
Not After : Nov 1 12:13:42 2026 GMT
Subject: CN=6913287a-d354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:28:a1:cd:9d:7d:92:f7:4a:0c:7a:95:79:
a1:b2:89:2a:d0:a8:07:11:75:ca:e6:a0:99:aa:95:
c3:6d:46:15:5c:89:2d:21:34:db:d3:0f:81:02:40:
10:51:2b:06:23:61:4f:33:97:01:47:97:8c:6f:e1:
d1:9b:59:b3:56:d5:95:4c:e5:04:12:0a:0b:ee:44:
75:5a:89:57:b0:4a:10:8a:4a:6b:7a:f7:08:e1:fb:
a3:52:9a:ed:99:47:63:90:15:89:1d:25:cf:40:a6:
57:b5:96:e4:01:0e:0e:47:ef:d9:31:6b:a2:66:40:
98:51:c4:f0:49:62:10:87:4a:6c:e3:4b:1b:91:c1:
a4:53:25:11:33:a6:c0:15:b5:cd:0f:1e:3d:ad:e2:
f3:3b:e9:ad:09:1b:52:30:69:3a:93:79:32:be:08:
9b:7d:ee:13:9d:62:a4:f3:52:0c:c8:87:cd:8a:e5:
f5:88:ad:19:93:42:be:27:c4:4b:db:3f:78:31:1e:
2f:4c:43:c9:e7:4e:6d:b4:03:6e:92:73:68:4f:62:
40:28:41:99:37:b7:84:f0:32:7a:12:dd:a5:6d:2b:
fe:40:d2:f8:e0:71:d6:db:da:a9:a5:7d:46:67:87:
67:e5:f4:0a:09:28:d8:07:00:31:71:0c:81:92:d4:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:66:72:27:8F:05:EC:AC:8A:2B:0C:4B:61:D7:BE:E2:C6:10:6F
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DF36CBCABEF711F08A36B0CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.126.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8d:00:c0:cb:3e:be:e6:32:d7:c2:ce:5f:87:0c:3e:bc:58:
11:1b:37:95:26:5a:74:22:74:c6:c3:0f:fd:8e:82:98:3e:1c:
27:09:fc:f6:31:3b:d6:57:86:5c:18:6d:bf:e8:bc:d4:03:67:
fa:63:74:e5:2a:88:65:d8:52:3f:d4:2e:87:17:59:29:b0:24:
f0:21:d7:8f:8d:4b:ae:67:28:77:9d:93:75:4b:97:7a:d6:10:
52:9f:31:26:75:69:20:da:fe:33:a4:ca:e2:e9:9f:54:df:41:
3a:3b:9b:fd:d8:44:7a:b6:c0:c4:e0:6b:87:e7:96:55:c7:8c:
ab:43:40:8f:87:e9:82:18:ec:0e:3a:73:ef:44:67:4a:7f:5d:
9c:cd:33:bc:a3:da:17:5d:42:db:d3:03:0d:62:ee:1f:ad:14:
5a:c2:a7:4e:8b:bf:ff:8b:8f:95:c4:64:1a:09:d4:7a:8a:ec:
2c:28:53:ac:95:fd:ae:f1:ed:d6:63:a4:33:b2:25:87:c5:65:
6b:90:a9:14:cc:02:34:e6:2e:50:db:1b:72:16:88:80:2f:16:
4a:47:02:b4:14:e3:0d:8b:0d:25:15:81:16:bb:3a:f7:fe:19:
14:8b:14:22:08:98:43:05:bc:c7:55:ba:11:44:79:6e:a6:4e:
5b:2f:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 05:20:22 2025 by rpki-client