Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/10BE688A8A5711F18C506009CF1D38B0.roa
File: 10BE688A8A5711F18C506009CF1D38B0.roa (raw, json)
Hash identifier: lC/r5XRT9wiwQaTE7675t9IEuG/3v0/7lZJEiCHl0Jw=
Subject key identifier: 68:5D:B5:E1:3F:2E:9A:C3:EC:38:81:F6:7E:53:73:85:B5:B0:4D:4E
Certificate issuer: /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial: 0A32
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/10BE688A8A5711F18C506009CF1D38B0.roa
Signing time: Tue 28 Jul 2026 07:36:38 +0000
ROA not before: Tue 28 Jul 2026 07:36:33 +0000
ROA not after: Thu 29 Dec 2033 07:36:33 +0000
asID: 33770
IP address blocks: 152.108.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AR, serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Validity
Not Before: Jul 28 07:36:33 2026 GMT
Not After : Dec 29 07:36:33 2033 GMT
Subject: CN=6a685c05-3910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:19:4a:7d:86:da:7e:a6:04:b2:4a:40:75:
28:d9:7a:d0:4b:cf:af:2e:18:77:37:d7:66:28:bc:
b8:66:b9:87:cf:49:b2:84:ac:a2:78:8e:3f:7f:78:
55:ee:de:fc:36:74:38:96:34:47:c4:61:4c:fc:2a:
d4:84:25:53:30:f8:cc:f2:a5:40:57:10:02:f8:12:
10:fe:b6:ea:28:82:47:6f:42:04:91:55:d7:0d:30:
8a:da:41:7e:80:be:43:ea:c9:d4:c0:1f:3a:84:bc:
f7:09:11:10:53:c3:28:f8:51:f1:0b:29:09:88:79:
59:63:93:3c:96:c9:d7:16:e8:f0:1e:cf:b0:1b:1e:
68:b2:7c:e8:74:5e:cb:15:91:e2:76:19:bb:2d:91:
8f:04:b6:ad:3e:83:97:8e:17:67:24:3e:c3:5f:7b:
e8:04:19:4b:0e:f1:41:f6:63:5f:c6:da:60:a5:41:
5e:13:a6:a6:5f:2e:76:1b:bb:46:ad:8d:ac:48:6b:
98:12:95:9f:51:52:05:46:44:16:1b:1b:b8:7a:d5:
ce:3d:a1:db:a7:f2:89:83:b9:64:80:0e:23:a7:ad:
8d:61:c1:f5:ed:cf:ca:7e:f3:43:c7:41:a6:fe:30:
8a:a6:8c:eb:e8:22:30:e9:81:ab:d4:0e:96:ba:81:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:B5:E1:3F:2E:9A:C3:EC:38:81:F6:7E:53:73:85:B5:B0:4D:4E
X509v3 Authority Key Identifier:
keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/10BE688A8A5711F18C506009CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:3e:60:f9:d0:1a:35:a2:02:72:5a:2d:86:f3:93:b8:5b:5a:
1a:02:74:c1:8c:43:8d:bf:5f:20:a8:97:94:52:67:f9:9d:dd:
a0:ff:3f:88:10:cf:41:97:a0:e5:ee:c3:e8:88:50:cb:1e:a4:
92:76:6e:63:1d:0d:1f:29:d3:2f:cb:c1:a5:fa:08:18:6e:7c:
e4:bc:26:d0:c6:fa:43:63:69:f9:1e:81:4a:6d:ef:5d:31:07:
3a:fd:ac:8e:ea:65:3e:cf:3c:c1:39:46:9a:cc:63:8c:9e:6b:
29:ea:c1:74:89:7b:c0:60:4d:b7:8f:dd:c4:6a:5a:a2:f2:98:
2f:53:c7:69:c4:a9:c2:ee:b2:e6:24:01:7d:a8:6d:e8:87:f9:
f7:85:43:8c:97:65:60:66:c3:4b:77:79:69:d2:0a:10:84:00:
61:0d:26:ba:fb:cb:0a:ae:42:e6:ec:d6:c9:98:59:7e:89:21:
30:da:72:62:00:93:fa:4f:95:eb:e2:da:8d:ea:b1:6d:10:96:
28:5f:25:fe:0c:d7:7b:32:5b:a1:c3:29:82:5c:aa:e2:3d:2c:
b4:6e:56:db:dd:01:e5:93:e6:a5:01:6a:00:1a:8b:6c:9d:c5:
c7:1f:8d:97:15:de:2f:db:11:0d:56:90:4d:4a:ac:12:15:80:
ba:b4:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:25:18 2026 by rpki-client