Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E0BD596AB4F11F1843A7BC1CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E0BD596AB4F11F1843A7BC1CE1D38B0.roa
File: 0E0BD596AB4F11F1843A7BC1CE1D38B0.roa (raw, json)
Hash identifier: BJ2mRzQMmWd2URFosFW8DwfobkS/HsOX5qbcP57of2M=
Subject key identifier: CD:F9:9E:EC:44:C9:6D:44:CD:56:5B:3E:EC:C6:8A:B9:D6:9D:42:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E636
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E0BD596AB4F11F1843A7BC1CE1D38B0.roa
Signing time: Tue 08 Sep 2026 06:32:25 +0000
ROA not before: Tue 08 Sep 2026 06:32:21 +0000
ROA not after: Wed 04 Nov 2026 06:32:21 +0000
asID: 32043
IP address blocks: 154.223.142.0/24 maxlen: 24
154.223.143.0/24 maxlen: 24
154.223.144.0/24 maxlen: 24
154.223.145.0/24 maxlen: 24
154.223.146.0/24 maxlen: 24
154.223.147.0/24 maxlen: 24
154.223.148.0/24 maxlen: 24
154.223.149.0/24 maxlen: 24
154.223.150.0/24 maxlen: 24
154.223.151.0/24 maxlen: 24
154.223.152.0/24 maxlen: 24
154.223.153.0/24 maxlen: 24
154.223.154.0/24 maxlen: 24
154.223.155.0/24 maxlen: 24
154.223.156.0/24 maxlen: 24
154.223.157.0/24 maxlen: 24
154.223.159.0/24 maxlen: 24
154.223.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Sep 2026 13:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124470 (0x1e636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 06:32:21 2026 GMT
Not After : Nov 4 06:32:21 2026 GMT
Subject: CN=6a9fabf9-d39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:e0:1f:ab:e2:b7:c2:e5:24:2d:ee:c1:ba:
2c:3e:2f:ab:1e:bd:6d:6f:f8:f3:3f:67:34:8b:ec:
24:1d:e4:25:ad:4e:33:1a:49:ba:5b:8d:91:12:0f:
13:ae:95:22:ee:9e:0e:7d:29:31:67:d9:ba:ef:1a:
3a:98:07:57:3f:14:76:73:e2:bb:2d:8a:b2:ff:ff:
38:86:a6:a2:b2:dc:22:6c:11:c5:0f:c9:cd:16:c5:
9c:a4:42:95:76:74:53:40:b3:77:5e:54:b0:55:b9:
3b:ef:27:e6:21:e8:6e:38:4a:22:95:51:f3:95:e3:
a6:db:bf:fd:c3:30:cb:27:30:69:df:ba:37:85:5e:
18:ed:9c:68:48:e1:f9:d6:78:03:a1:e5:90:47:0d:
a0:62:0d:ee:37:13:46:cd:1d:df:d8:aa:f4:54:17:
63:80:f3:69:c6:d7:94:2d:09:0c:59:e6:ef:39:4f:
10:35:a9:ab:50:a0:22:b9:96:a5:cc:72:35:e2:68:
02:38:1b:7d:b2:70:a8:6a:85:16:13:17:d9:50:af:
e1:40:14:6a:e0:a3:a7:70:ae:c0:cb:35:db:63:f8:
59:9e:b2:7e:af:61:35:49:3d:9c:c5:67:90:f7:be:
79:98:43:60:c8:71:c0:9e:52:3b:16:1a:c3:73:c2:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:9E:EC:44:C9:6D:44:CD:56:5B:3E:EC:C6:8A:B9:D6:9D:42:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E0BD596AB4F11F1843A7BC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.142.0-154.223.157.255
154.223.159.0-154.223.160.255
Signature Algorithm: sha256WithRSAEncryption
c0:2f:aa:4e:84:c0:35:3b:1e:6f:9b:5f:b5:1d:6e:18:1e:e7:
01:03:63:a6:5a:0a:35:e7:98:a9:73:ef:5c:7f:60:a0:67:62:
4c:53:bd:26:32:a0:b5:54:f0:f5:d5:26:5e:bf:d6:e6:9b:33:
04:01:92:30:2c:ac:56:12:38:16:17:fe:cd:8f:74:26:e2:0c:
a4:65:f6:6a:fb:44:c8:72:11:db:70:df:92:5f:c5:09:e4:df:
d4:eb:a1:a1:9c:98:6b:54:cc:f4:f9:22:9e:4d:60:55:2d:c5:
d1:52:c7:79:d5:81:e7:02:de:52:08:52:91:1e:51:ab:8a:78:
55:50:d7:fc:09:06:00:cd:2b:08:86:83:30:e4:03:ce:79:90:
d2:5f:75:4c:1d:ba:50:46:0a:6c:cf:62:b5:c2:23:fe:23:2e:
34:b1:6f:6e:45:95:b2:95:81:9e:85:cb:a2:8c:90:79:74:b6:
1c:2b:96:39:13:17:fd:80:48:47:b0:fe:1c:0e:41:b6:8c:68:
68:d7:af:61:b3:cb:f0:be:0a:2b:fd:92:9c:dc:9d:37:e7:03:
61:dd:81:a3:11:09:8d:7c:95:f8:42:45:4f:a3:75:ec:f6:65:
b2:bd:8f:c7:b0:1a:ce:62:5b:06:80:8f:a2:e7:67:18:9d:e4:
68:be:d1:15
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAeY2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA4MDYzMjIxWhcNMjYxMTA0MDYzMjIxWjAYMRYw
FAYDVQQDEw02YTlmYWJmOS1kMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvq/gH6vit8LlJC3uwbosPi+rHr1tb/jzP2c0i+wkHeQlrU4zGkm6W42R
Eg8TrpUi7p4OfSkxZ9m67xo6mAdXPxR2c+K7LYqy//84hqaistwibBHFD8nNFsWc
pEKVdnRTQLN3XlSwVbk77yfmIehuOEoilVHzleOm27/9wzDLJzBp37o3hV4Y7Zxo
SOH51ngDoeWQRw2gYg3uNxNGzR3f2Kr0VBdjgPNpxteULQkMWebvOU8QNamrUKAi
uZalzHI14mgCOBt9snCoaoUWExfZUK/hQBRq4KOncK7AyzXbY/hZnrJ+r2E1ST2c
xWeQ9755mENgyHHAnlI7FhrDc8IUhwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFM35
nuxEyW1EzVZbPuzGirnWnUKIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRTBCRDU5NkFCNEYxMUYxODQzQTdCQzFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGa344DBAGa35wwDAME
AJrfnwMEAJrfoDANBgkqhkiG9w0BAQsFAAOCAQEAwC+qToTANTseb5tftR1uGB7n
AQNjploKNeeYqXPvXH9goGdiTFO9JjKgtVTw9dUmXr/W5pszBAGSMCysVhI4Fhf+
zY90JuIMpGX2avtEyHIR23Dfkl/FCeTf1OuhoZyYa1TM9Pkink1gVS3F0VLHedWB
5wLeUghSkR5Rq4p4VVDX/AkGAM0rCIaDMOQDznmQ0l91TB26UEYKbM9itcIj/iMu
NLFvbkWVspWBnoXLooyQeXS2HCuWORMX/YBIR7D+HA5BtoxoaNevYbPL8L4KK/2S
nNydN+cDYd2BoxEJjXyV+EJFT6N17PZlsr2Px7AazmJbBoCPoudnGJ3kaL7RFQ==
-----END CERTIFICATE-----
Generated at Wed Sep 9 00:21:07 2026 by rpki-client