Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEF436CA34711F09B7D9B7EDAE4EC9C.roa
File: BFEF436CA34711F09B7D9B7EDAE4EC9C.roa (raw, json)
Hash identifier: HosS9AJXIJP1CLmDPwqlwbJaRARQBlcbS2/n8LQtGe4=
Subject key identifier: B8:37:67:60:18:D8:90:FE:1B:57:0F:32:33:EE:0D:BC:D5:81:7F:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017F15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEF436CA34711F09B7D9B7EDAE4EC9C.roa
Signing time: Tue 07 Oct 2025 06:35:01 +0000
ROA not before: Tue 07 Oct 2025 06:34:53 +0000
ROA not after: Sun 09 Nov 2025 06:34:53 +0000
asID: 395793
IP address blocks: 156.243.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98069 (0x17f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 7 06:34:53 2025 GMT
Not After : Nov 9 06:34:53 2025 GMT
Subject: CN=68e4b495-4d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:af:30:b9:ad:36:69:dd:ae:fe:5e:1e:43:
9d:a9:e8:84:52:ae:64:2e:96:97:96:74:ce:ee:1e:
b7:5e:7c:eb:e6:06:7a:f4:96:1a:34:2e:e6:a2:21:
97:51:65:b7:99:26:d8:a7:b0:c8:10:67:15:96:b9:
26:8b:88:ad:ea:a6:26:b2:c4:9e:f7:26:03:97:5f:
c2:45:f7:27:2d:10:ca:9e:82:ae:de:60:47:ac:38:
0e:78:0c:f8:74:01:6d:34:da:86:62:84:de:fd:56:
71:d0:d1:fb:f7:f0:49:c0:20:3f:59:50:e9:38:d8:
d6:d4:50:d7:0b:bc:2f:a2:3a:d7:7a:5f:b9:77:fd:
0d:65:b7:ef:b7:aa:30:37:cf:25:4c:d7:06:a9:80:
f2:39:0c:5b:bf:04:78:5f:2e:8f:40:f8:07:69:34:
c5:42:f9:5e:df:45:9e:07:b0:0a:ad:f6:05:a9:eb:
dd:60:dc:6d:de:30:a9:12:ef:22:1f:db:61:b3:c4:
cb:c6:f6:39:b6:fa:ca:1d:04:2f:8f:ad:23:f1:23:
5c:af:de:63:d4:27:d4:87:d6:0d:f5:f1:70:91:f0:
00:4b:82:f7:4e:11:79:fe:3e:32:48:22:d5:14:f8:
be:f4:b7:a8:77:55:5a:d9:bd:12:c0:91:6b:cf:69:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:67:60:18:D8:90:FE:1B:57:0F:32:33:EE:0D:BC:D5:81:7F:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEF436CA34711F09B7D9B7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.225.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8f:66:21:8b:e9:c0:52:02:37:97:86:4c:b2:9f:f4:e5:21:
b1:2a:38:99:2f:fd:27:8c:1d:ed:62:06:7a:f6:48:45:e6:31:
eb:43:96:aa:c1:4f:8e:41:e0:f9:b4:11:7d:fe:fb:11:28:94:
42:5a:58:43:6a:0d:27:cb:08:b2:e0:93:7e:cb:b5:48:2c:ea:
15:44:67:b4:7a:8e:44:a4:4d:2d:58:9d:1c:7b:4f:d8:b4:52:
5b:62:1d:00:1e:52:1d:f3:bb:b4:a9:ef:fe:bc:25:c3:51:ef:
a3:b6:2a:aa:a4:aa:46:07:93:c8:5d:b7:35:e0:80:5a:bf:73:
d3:c4:1a:75:e8:97:42:50:9b:dd:d2:30:80:85:ea:5e:66:a3:
1a:44:67:b2:68:ac:f8:ae:80:05:4c:d7:1a:8b:da:61:ca:fd:
72:eb:7a:f6:dd:e9:3d:9b:d4:2b:c7:2a:a5:d9:4b:e9:f4:b0:
aa:27:c5:c2:25:6d:63:3c:23:d5:dd:87:03:b9:57:1d:be:73:
a4:3e:dc:e8:58:60:38:4c:8d:31:e4:3b:3d:ff:b3:aa:85:4c:
e6:ea:74:96:a4:cd:5e:90:46:a6:fa:b4:20:84:42:f4:fc:79:
72:46:d2:09:61:3f:80:5b:2a:98:0d:6b:22:53:10:f3:2f:13:
5c:aa:4b:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAX8VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDA3MDYzNDUzWhcNMjUxMTA5MDYzNDUzWjAYMRYw
FAYDVQQDEw02OGU0YjQ5NS00ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwQCvMLmtNmndrv5eHkOdqeiEUq5kLpaXlnTO7h63Xnzr5gZ69JYaNC7m
oiGXUWW3mSbYp7DIEGcVlrkmi4it6qYmssSe9yYDl1/CRfcnLRDKnoKu3mBHrDgO
eAz4dAFtNNqGYoTe/VZx0NH79/BJwCA/WVDpONjW1FDXC7wvojrXel+5d/0NZbfv
t6owN88lTNcGqYDyOQxbvwR4Xy6PQPgHaTTFQvle30WeB7AKrfYFqevdYNxt3jCp
Eu8iH9ths8TLxvY5tvrKHQQvj60j8SNcr95j1CfUh9YN9fFwkfAAS4L3ThF5/j4y
SCLVFPi+9Leod1Va2b0SwJFrz2mBNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLg3
Z2AY2JD+G1cPMjPuDbzVgX+EMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRkVGNDM2Q0EzNDcxMUYwOUI3RDlCN0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPPhMA0GCSqGSIb3DQEBCwUA
A4IBAQC4j2Yhi+nAUgI3l4ZMsp/05SGxKjiZL/0njB3tYgZ69khF5jHrQ5aqwU+O
QeD5tBF9/vsRKJRCWlhDag0nywiy4JN+y7VILOoVRGe0eo5EpE0tWJ0ce0/YtFJb
Yh0AHlId87u0qe/+vCXDUe+jtiqqpKpGB5PIXbc14IBav3PTxBp16JdCUJvd0jCA
hepeZqMaRGeyaKz4roAFTNcai9phyv1y63r23ek9m9Qrxyql2Uvp9LCqJ8XCJW1j
PCPV3YcDuVcdvnOkPtzoWGA4TI0x5Ds9/7OqhUzm6nSWpM1ekEam+rQghEL0/Hly
RtIJYT+AWyqYDWsiUxDzLxNcqksn
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:05 2025 by rpki-client