Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207C98DEBCA011F1AB9F161ECF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207C98DEBCA011F1AB9F161ECF1D38B0.roa
File: 207C98DEBCA011F1AB9F161ECF1D38B0.roa (raw, json)
Hash identifier: WwnC7jIxhYaiTyKwEzwzbiwAqOczjF11IugDXpTSKps=
Subject key identifier: 4C:7B:29:B3:C5:29:1D:AA:34:FF:F1:3B:0F:37:2B:EB:22:6B:EC:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207C98DEBCA011F1AB9F161ECF1D38B0.roa
Signing time: Wed 30 Sep 2026 07:25:35 +0000
ROA not before: Wed 30 Sep 2026 07:25:31 +0000
ROA not after: Fri 06 Nov 2026 07:25:31 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125832 (0x1eb88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 07:25:31 2026 GMT
Not After : Nov 6 07:25:31 2026 GMT
Subject: CN=6abcb96f-3461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:96:41:45:88:7f:cb:36:7f:47:09:0f:ac:
ff:5d:45:f2:92:c4:e6:0f:86:da:d4:91:fc:cf:b2:
b6:15:79:b3:bf:7e:d9:12:88:79:25:59:6b:48:3a:
a9:f7:3c:a4:5b:c8:44:c5:f1:7c:dc:6d:b1:2e:2d:
86:b6:fb:c8:9f:3c:69:fb:6d:0f:c3:71:81:88:98:
a9:1d:24:bc:df:7c:62:4f:3e:70:e8:71:15:bb:31:
3c:a3:cd:7d:2d:aa:aa:d2:b7:fe:bf:0b:19:28:a8:
d5:0e:bb:62:cc:ae:e6:fd:bf:27:e3:e4:6a:58:a6:
b0:14:fb:67:36:b8:a2:4f:1f:cf:9d:b2:66:2c:c3:
65:16:f6:a8:ff:72:56:97:88:95:00:1c:2e:16:5e:
e6:f0:14:a0:86:41:e7:9c:5e:0d:12:f5:8c:80:83:
51:10:fd:bc:21:e9:a2:74:a0:1f:f5:99:7e:2e:c7:
7f:a5:84:7a:51:eb:d2:89:dc:97:5d:4f:88:e3:2f:
66:b8:4b:29:3a:a3:38:26:cc:af:e2:60:2b:f3:e9:
fe:4f:d3:b2:16:ef:73:1e:28:e8:ff:82:7a:11:14:
08:0a:76:d7:eb:4d:43:dc:0d:10:0b:7b:b9:6e:c4:
a7:06:d1:ac:5f:2c:0f:4a:9b:65:a7:bf:70:88:19:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:29:B3:C5:29:1D:AA:34:FF:F1:3B:0F:37:2B:EB:22:6B:EC:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207C98DEBCA011F1AB9F161ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0-154.218.24.255
154.222.207.0-154.222.212.255
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f9:ae:10:c2:50:e3:6e:b2:89:0e:c4:2e:b8:30:b8:fb:68:
48:0f:69:94:b1:46:a8:ad:59:0c:e2:5c:8d:89:71:b3:03:af:
ae:df:0d:be:fd:b4:d7:7c:a6:40:4f:6d:67:9c:d9:c6:bf:76:
bd:0c:f2:9e:39:bb:9f:f8:b6:80:90:f7:80:e5:34:db:8c:f8:
00:cb:2b:a0:82:62:18:7e:7d:4a:68:3c:54:66:a3:2f:1f:a1:
c5:f5:cb:c6:f5:5a:9d:0b:f5:a9:a8:75:e1:9d:09:14:d5:3a:
73:57:d5:63:2f:90:0c:5c:f5:c7:bc:84:29:9a:4c:29:43:80:
ba:f6:0e:96:d1:89:bb:12:52:94:a9:46:04:8e:3e:b3:2a:23:
f7:b9:9f:d7:f3:eb:75:a0:69:83:cb:ae:1e:84:19:79:9b:ea:
b7:40:a2:17:1e:cb:12:fe:63:e5:d5:e8:ba:43:b3:d5:74:55:
12:b8:6e:32:cf:7f:ce:30:a0:6b:38:d8:4f:4b:2e:c9:6c:7c:
0b:e4:c3:ba:ba:e8:05:6f:5c:b1:ca:c8:28:e1:a2:ab:12:64:
b6:c1:83:0f:48:da:ef:9d:ab:44:e7:3e:f1:75:f3:41:55:b1:
1f:97:f8:8a:38:d3:8a:f9:28:72:93:f9:1d:62:af:89:ca:d5:
e5:4c:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:12:32 2026 by rpki-client