Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02FC4C74BB3C11F1BB762904CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02FC4C74BB3C11F1BB762904CF1D38B0.roa
File: 02FC4C74BB3C11F1BB762904CF1D38B0.roa (raw, json)
Hash identifier: 8/yEOfnh6LyVcz5Ft7QyTVysiW24TkQttxBhDV2Txf4=
Subject key identifier: B3:8C:96:53:56:24:AF:F2:E2:D6:E4:8F:72:99:D0:9C:DB:17:91:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02FC4C74BB3C11F1BB762904CF1D38B0.roa
Signing time: Mon 28 Sep 2026 12:56:25 +0000
ROA not before: Mon 28 Sep 2026 12:56:21 +0000
ROA not after: Sat 05 Jan 2030 12:56:21 +0000
asID: 18229
IP address blocks: 154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
154.210.135.0/24 maxlen: 24
154.210.136.0/24 maxlen: 24
154.210.137.0/24 maxlen: 24
154.210.138.0/24 maxlen: 24
154.210.139.0/24 maxlen: 24
154.210.140.0/24 maxlen: 24
154.210.141.0/24 maxlen: 24
154.210.142.0/24 maxlen: 24
154.210.143.0/24 maxlen: 24
154.210.144.0/24 maxlen: 24
154.210.145.0/24 maxlen: 24
154.210.146.0/24 maxlen: 24
154.210.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125724 (0x1eb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 12:56:21 2026 GMT
Not After : Jan 5 12:56:21 2030 GMT
Subject: CN=6aba63f9-6f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:5b:79:5b:87:07:61:34:fc:45:c6:b5:c1:
b7:dc:ac:10:d6:7b:9e:42:f3:e2:46:d4:a5:eb:8c:
a3:67:49:02:b6:5c:95:22:c8:c2:77:f8:54:a8:bc:
7e:05:9f:16:72:26:49:f4:99:6e:44:e2:44:8b:b8:
01:ac:92:ff:77:29:25:07:38:62:2a:1b:0f:47:7d:
a7:cc:d3:21:33:5d:f0:53:fe:63:ca:8b:f8:04:0a:
ea:43:90:c1:a3:6d:b4:12:ee:5b:5c:3a:88:a7:0d:
40:0c:ed:38:32:66:d4:cf:85:12:ca:85:63:32:75:
69:29:9c:cf:aa:5a:28:7d:c6:db:42:49:5e:03:32:
40:b2:f8:3a:ef:ac:7f:2b:62:94:1b:1b:81:34:1b:
63:18:3b:d7:ea:1e:e4:f1:de:77:dd:d6:21:61:3c:
1b:45:83:b3:e4:f1:7c:52:3c:27:9f:52:37:c5:a4:
d3:36:0d:14:e7:64:a0:fd:fe:17:7e:fe:4e:be:c1:
2b:c8:1d:f8:ba:b9:cc:9b:9a:00:cc:8c:62:a6:24:
d8:eb:63:b5:ab:95:f9:79:12:48:0e:4d:f6:5d:52:
2f:b1:53:6d:32:3b:6d:52:23:b0:3f:a8:56:d7:93:
14:84:e6:57:6b:d0:d0:51:c1:1e:e0:26:1e:5b:ea:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:96:53:56:24:AF:F2:E2:D6:E4:8F:72:99:D0:9C:DB:17:91:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02FC4C74BB3C11F1BB762904CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.128.0-154.210.146.255
154.210.219.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4e:e2:99:4c:9a:d7:b1:57:96:03:25:9e:2b:53:e4:7b:97:
0d:8c:cb:ca:b9:c1:77:33:fc:71:56:08:0f:a7:8d:2f:29:88:
a1:c6:85:90:a2:1a:3a:a1:7d:92:09:ea:20:bf:ad:b7:73:c7:
3f:80:cd:b3:f2:2f:f4:87:5f:84:4d:a3:a4:43:fa:6c:92:e5:
a6:97:c8:9f:c2:e4:be:e9:9d:26:4a:83:bf:b8:a2:3b:79:17:
ec:6d:46:6e:19:63:55:01:0b:6b:fa:74:9d:ff:98:3f:c9:86:
19:22:8d:28:be:dc:30:38:5e:aa:36:6d:57:eb:0b:5f:54:67:
99:f2:34:33:80:46:6c:79:85:26:2c:4b:61:16:cb:3c:14:88:
a0:be:f7:a0:76:44:fa:6a:81:8c:64:dc:d0:3a:76:72:28:fa:
a2:f0:e2:b9:56:81:c3:83:8d:9c:e3:46:1c:ad:42:8f:a5:27:
2e:6d:c6:99:d3:a3:85:58:5c:38:6a:43:5f:f8:0f:32:74:b5:
a4:f2:8a:ad:58:55:2a:9e:9f:3d:c4:4b:9b:df:b0:fe:14:5d:
57:8d:cb:70:0c:23:73:d2:70:1f:42:8d:e7:75:e3:07:ca:f6:
00:3a:45:a3:df:a8:95:66:7c:23:ab:a5:9d:22:07:6a:6b:a2:
9a:bb:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:08:02 2026 by rpki-client