Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/101B2132BC9F11F18F188617CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/101B2132BC9F11F18F188617CF1D38B0.roa
File: 101B2132BC9F11F18F188617CF1D38B0.roa (raw, json)
Hash identifier: KKm4V6lNQ89AMMh/ZsO165Ar3N5g6nhPC2W3wiRscBU=
Subject key identifier: BF:C8:88:A1:60:78:8C:04:A2:57:29:C7:86:0A:0A:BB:DD:13:6D:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/101B2132BC9F11F18F188617CF1D38B0.roa
Signing time: Wed 30 Sep 2026 07:17:58 +0000
ROA not before: Wed 30 Sep 2026 07:17:54 +0000
ROA not after: Fri 06 Nov 2026 07:17:54 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.213.0/24 maxlen: 24
154.222.214.0/24 maxlen: 24
154.222.223.0/24 maxlen: 24
154.222.240.0/24 maxlen: 24
154.222.241.0/24 maxlen: 24
154.222.243.0/24 maxlen: 24
154.222.244.0/24 maxlen: 24
154.222.245.0/24 maxlen: 24
154.222.246.0/24 maxlen: 24
154.222.247.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125828 (0x1eb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 07:17:54 2026 GMT
Not After : Nov 6 07:17:54 2026 GMT
Subject: CN=6abcb7a6-78c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:7d:06:d8:fc:f3:8d:93:48:3a:12:a7:9a:
67:33:93:45:50:6e:eb:92:c2:ee:5d:39:13:84:2d:
5b:65:31:2c:cc:b6:15:43:c0:59:ee:8b:10:a6:66:
66:8c:2f:bf:8c:4b:7b:b8:fa:f7:11:ff:7d:18:85:
7f:53:e3:04:5c:77:a3:84:dd:3d:06:c8:98:c8:67:
8d:83:a2:15:5d:1b:c7:df:b3:93:98:b1:15:6f:55:
35:8f:93:19:0c:8c:aa:a0:4d:68:c5:9b:a8:e8:33:
f8:00:2c:0e:dc:13:c4:f3:33:0d:67:d3:99:bf:e3:
02:22:38:56:64:30:0f:3c:21:e5:b6:b0:69:fb:06:
00:43:73:ac:67:ef:63:83:08:e4:be:52:51:bc:3e:
77:ad:33:6e:b4:61:3b:5f:b6:50:9c:64:1e:17:7c:
d3:35:f7:36:cf:15:c2:90:0d:83:5d:39:cd:ca:c9:
60:c4:3f:4f:a9:5e:68:4b:a5:a2:53:23:bb:a2:23:
9f:fe:84:29:fd:b9:ce:dc:7c:f7:38:88:a9:52:ad:
15:5d:51:65:92:86:27:12:36:bd:51:83:e6:46:f3:
64:99:69:74:79:2f:5f:ec:ef:01:bd:ab:04:be:4a:
6c:72:f5:a6:b8:df:c9:30:1b:2e:cb:2f:d5:e3:27:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C8:88:A1:60:78:8C:04:A2:57:29:C7:86:0A:0A:BB:DD:13:6D:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/101B2132BC9F11F18F188617CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.213.0-154.222.214.255
154.222.223.0/24
154.222.240.0/23
154.222.243.0-154.222.251.255
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:23:2d:fb:9e:06:b9:96:68:cf:0e:d1:30:9a:4c:24:4d:f8:
ed:ca:d6:6c:dc:4d:14:b2:2a:52:7a:1b:1e:bb:c1:f2:ca:e6:
a1:09:81:ee:07:9e:8a:fe:6a:9e:b9:44:67:11:51:34:1e:90:
d3:9b:4b:8c:c2:13:39:dd:de:0d:45:23:67:4e:4a:14:f1:37:
b7:48:cb:a4:6b:99:9d:3b:17:f1:14:66:7b:be:05:4e:71:d5:
79:94:f5:b5:94:20:42:55:07:5b:f7:19:81:78:8f:78:24:a3:
6c:32:af:99:1f:8f:38:d0:f3:21:87:78:a3:7c:6d:07:58:88:
99:4b:4f:ee:8a:bb:09:d0:1c:96:b1:e7:e8:0d:db:4c:d5:e0:
61:4a:51:32:12:d1:db:57:4d:8a:1f:1b:27:e4:db:32:db:0a:
fe:bb:9d:d5:06:f6:f4:6e:9b:36:6a:c9:00:cc:eb:a5:e1:27:
7d:5d:6d:b7:63:67:09:a3:2f:12:64:fd:ae:9a:4c:67:eb:3a:
9b:56:52:fa:00:ba:10:53:8a:8e:2d:f1:12:8f:d2:f4:2e:a8:
7d:47:22:a0:58:95:6e:ad:05:ec:96:11:07:e0:d3:56:96:64:
d1:40:33:9a:46:a4:ee:48:53:99:fb:50:ac:0d:63:69:4a:0f:
e7:72:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:48:11 2026 by rpki-client