Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17574E70BB3D11F1BCEE7A0CCF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17574E70BB3D11F1BCEE7A0CCF1D38B0.roa
File: 17574E70BB3D11F1BCEE7A0CCF1D38B0.roa (raw, json)
Hash identifier: AFL8vA2Zai/qjmFGwJYR9BnyybJj1FnBg89B4u0fYHI=
Subject key identifier: 83:FB:6E:7D:83:95:E5:F9:C6:84:9D:EB:64:29:89:47:29:0D:1C:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17574E70BB3D11F1BCEE7A0CCF1D38B0.roa
Signing time: Mon 28 Sep 2026 13:04:09 +0000
ROA not before: Mon 28 Sep 2026 13:04:04 +0000
ROA not after: Sat 05 Jan 2030 13:04:04 +0000
asID: 18229
IP address blocks: 154.210.147.0/24 maxlen: 24
154.210.148.0/24 maxlen: 24
154.210.149.0/24 maxlen: 24
154.210.150.0/24 maxlen: 24
154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.185.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.221.0/24 maxlen: 24
154.210.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125726 (0x1eb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 13:04:04 2026 GMT
Not After : Jan 5 13:04:04 2030 GMT
Subject: CN=6aba65c9-e5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:a7:c3:9b:6e:ca:18:93:27:99:33:23:96:
32:e8:dc:41:dc:b7:fa:68:2b:ff:76:92:42:d9:85:
f2:fe:8d:31:c2:b5:f7:a7:87:7c:20:c2:d5:40:90:
dc:8f:de:75:e1:bf:7b:fe:2f:90:11:1e:be:e3:0e:
00:4c:94:c3:8e:44:d6:02:ef:b3:3c:64:39:a0:e2:
95:62:70:96:9f:16:bc:a4:9e:49:12:bc:56:9b:a3:
24:33:e2:c3:ea:10:c0:20:49:fe:04:03:79:90:47:
77:14:dd:c2:33:c4:d5:67:ef:7f:7b:6b:c0:cf:ff:
12:b8:a9:02:d3:ac:51:bc:dc:78:c4:25:aa:d5:56:
85:c0:da:64:a1:d7:92:22:8d:f2:ff:9b:87:1e:34:
61:ba:78:88:de:80:ba:52:cd:67:8a:ab:09:f1:9f:
86:cb:65:ac:37:9b:41:77:92:90:b8:92:3d:76:6c:
3c:05:aa:3d:ce:9b:42:b7:28:35:8f:e4:36:4c:f6:
ac:bf:ea:8e:f2:3e:46:f3:55:3c:c8:58:7b:e1:61:
02:32:fd:39:a9:d5:c9:0c:8a:8e:09:9e:52:55:49:
51:d4:90:31:a5:86:bc:82:e3:e9:17:b7:ce:6d:8d:
be:a7:1b:f0:a3:2e:76:e4:b8:cc:b4:ab:78:5d:47:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:6E:7D:83:95:E5:F9:C6:84:9D:EB:64:29:89:47:29:0D:1C:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17574E70BB3D11F1BCEE7A0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.147.0-154.210.162.255
154.210.185.0/24
154.210.204.0/24
154.210.221.0/24
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d1:7b:24:0c:41:af:6e:8c:50:d0:ea:cf:66:28:b7:51:38:
4e:ac:26:cb:2a:ba:c8:cc:aa:8d:4e:58:b4:fe:81:57:51:ca:
84:6d:c6:2a:82:cd:3f:a8:48:bc:6e:b1:72:70:bc:95:fd:25:
e1:d3:47:6d:0a:c6:88:9f:1d:80:3e:30:b6:dd:2f:ef:1e:6a:
b1:2d:0b:c7:1c:ea:63:4f:6d:47:1c:1b:26:94:85:1e:f4:5c:
c1:c2:8d:89:1a:7f:00:c2:23:c3:01:b4:4c:6a:98:e7:b9:23:
f7:c6:91:fd:05:da:14:09:d6:30:e5:89:5a:64:78:f6:48:bd:
39:e0:0f:95:10:0d:42:2c:be:7b:f8:65:16:1d:c8:59:3e:76:
6e:8f:b2:0c:92:55:cc:3f:b1:24:3e:dd:2c:8c:24:22:9a:85:
ed:56:a9:d5:81:25:20:61:cc:aa:ee:c6:f9:11:c6:0f:9f:b6:
a0:6b:4e:7c:42:0a:8c:c1:9c:bf:64:1c:d4:bc:d6:44:0b:0d:
f6:a5:2f:f5:a9:0c:ac:78:d8:4a:3b:93:75:81:dc:fe:fd:8b:
30:e8:0f:8f:e3:c0:da:98:40:a9:40:9f:db:46:46:98:1b:01:
4c:3e:bd:e3:b8:66:ca:84:f3:da:79:bd:1a:a9:43:54:15:73:
3c:bd:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:27:54 2026 by rpki-client