Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23CC98CC962111F19FE1EEAACE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23CC98CC962111F19FE1EEAACE1D38B0.roa
File: 23CC98CC962111F19FE1EEAACE1D38B0.roa (raw, json)
Hash identifier: xWRxoqPb02hV0Q0BxQcvEUzoprVoNOSEZkpe54vtlqY=
Subject key identifier: A6:39:37:89:C0:B9:91:11:01:18:EB:9A:BB:AB:78:C9:04:4F:10:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DE3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23CC98CC962111F19FE1EEAACE1D38B0.roa
Signing time: Wed 12 Aug 2026 07:40:51 +0000
ROA not before: Wed 12 Aug 2026 07:40:47 +0000
ROA not after: Sat 19 Sep 2026 07:40:47 +0000
asID: 11404
IP address blocks: 154.193.112.0/20 maxlen: 24
154.196.192.0/20 maxlen: 24
154.199.80.0/20 maxlen: 24
154.199.96.0/19 maxlen: 24
154.199.128.0/19 maxlen: 24
154.200.112.0/20 maxlen: 24
154.205.48.0/20 maxlen: 24
154.206.32.0/20 maxlen: 24
154.207.144.0/20 maxlen: 24
154.207.160.0/20 maxlen: 24
154.208.96.0/20 maxlen: 24
154.211.192.0/20 maxlen: 24
154.211.224.0/19 maxlen: 24
154.214.16.0/20 maxlen: 24
154.215.16.0/20 maxlen: 24
154.215.32.0/19 maxlen: 24
154.216.16.0/20 maxlen: 24
154.222.96.0/20 maxlen: 24
154.222.160.0/19 maxlen: 24
154.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 15 Sep 2026 00:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122426 (0x1de3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 12 07:40:47 2026 GMT
Not After : Sep 19 07:40:47 2026 GMT
Subject: CN=6a7c2383-0c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:60:5a:c8:4f:f4:4c:b0:3c:2d:4e:dc:f2:
a9:88:d4:0b:cf:6b:49:b2:b9:7d:ca:af:33:cb:99:
f7:ff:9f:53:44:35:56:fe:36:c5:c3:0e:3d:56:31:
fc:b2:64:7c:e6:fc:9d:ce:8d:60:ea:5e:53:ae:ac:
02:26:9a:56:8c:51:ac:8a:af:b9:8c:eb:71:02:88:
41:35:7d:7a:3d:21:00:ff:68:89:3a:b7:63:d4:86:
7c:e9:bb:51:9e:f9:1e:a2:79:6b:d9:18:53:85:4a:
5f:63:3f:71:76:41:0b:e4:ee:ad:f3:03:ca:8d:4f:
a4:05:19:af:38:fd:fd:c7:3b:b7:a2:e4:ca:15:6f:
7f:44:cc:e1:51:56:80:eb:2a:1a:7f:fa:21:ee:43:
c7:40:39:a3:16:d8:63:96:f2:dd:b8:4a:a6:36:85:
cb:bb:97:96:8b:52:89:67:f2:b1:96:f1:69:2d:4f:
53:5e:c7:6b:ce:0a:a0:a4:82:dc:f5:8a:ce:b1:e3:
65:a9:11:f4:7b:72:e2:4f:84:16:21:34:c4:38:d2:
1a:14:95:a6:8f:d4:4c:2f:14:db:50:29:b8:47:b4:
9f:3a:13:f0:0e:a0:1c:06:b2:f1:47:cf:90:c6:c2:
ea:a3:48:a8:f3:e0:77:15:6b:80:58:7b:69:6b:3e:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:37:89:C0:B9:91:11:01:18:EB:9A:BB:AB:78:C9:04:4F:10:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23CC98CC962111F19FE1EEAACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
154.196.192.0/20
154.199.80.0-154.199.159.255
154.200.112.0/20
154.205.48.0/20
154.206.32.0/20
154.207.144.0-154.207.175.255
154.208.96.0/20
154.211.192.0/20
154.211.224.0/19
154.214.16.0/20
154.215.16.0-154.215.63.255
154.216.16.0/20
154.222.96.0/20
154.222.160.0/19
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
70:f8:8c:fb:a3:1b:31:6f:b4:b6:5e:2a:c9:ea:49:65:2f:af:
73:5c:2b:9e:b1:e2:59:e4:c0:4d:22:cd:c0:e1:3f:74:57:4b:
ca:8a:d5:ae:5a:d0:52:9e:44:f9:51:d1:b9:04:09:e1:b2:fa:
27:ee:f6:0d:3d:c9:9b:62:33:f1:ad:69:1f:47:ed:da:fd:1b:
ab:4e:5e:f9:94:70:1d:dd:dd:07:b6:a2:d7:b6:0e:e3:7a:fc:
a9:18:5e:eb:1d:55:6a:bd:ba:dc:16:c4:19:c6:b0:d1:1f:39:
80:c6:15:47:51:e6:77:5e:8a:df:b4:d3:5d:70:02:f5:b7:49:
52:e3:ae:a4:4f:52:2d:cd:83:db:6c:a8:ae:ba:4d:ef:ea:22:
a5:4d:20:ae:f8:6d:ca:7d:86:41:17:4e:cb:0b:3b:bd:9e:ee:
0c:e4:e1:b9:75:08:49:4b:1c:66:6c:c0:ff:a8:38:3a:5a:33:
30:ab:bc:78:49:ad:53:25:e2:0d:9f:f8:c7:87:10:18:b1:a7:
52:ce:cd:bb:cb:5d:91:51:9a:f6:b4:74:90:ab:b4:51:0f:d8:
05:51:7e:30:c9:55:9f:8d:17:d5:b3:65:b8:ae:ac:e2:11:e5:
48:85:de:79:eb:a6:0f:00:bf:b8:93:67:41:1f:3f:e8:b9:02:
24:a7:1a:2b
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAd46MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODEyMDc0MDQ3WhcNMjYwOTE5MDc0MDQ3WjAYMRYw
FAYDVQQDEw02YTdjMjM4My0wYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6QJgWshP9EywPC1O3PKpiNQLz2tJsrl9yq8zy5n3/59TRDVW/jbFww49
VjH8smR85vydzo1g6l5TrqwCJppWjFGsiq+5jOtxAohBNX16PSEA/2iJOrdj1IZ8
6btRnvkeonlr2RhThUpfYz9xdkEL5O6t8wPKjU+kBRmvOP39xzu3ouTKFW9/RMzh
UVaA6yoaf/oh7kPHQDmjFthjlvLduEqmNoXLu5eWi1KJZ/KxlvFpLU9TXsdrzgqg
pILc9YrOseNlqRH0e3LiT4QWITTEONIaFJWmj9RMLxTbUCm4R7SfOhPwDqAcBrLx
R8+QxsLqo0io8+B3FWuAWHtpaz7jywIDAQABo4IDGjCCAxYwHQYDVR0OBBYEFKY5
N4nAuZERARjrmrureMkETxA1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yM0NDOThDQzk2MjExMUYxOUZFMUVFQUFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQEmsFwAwQEmsTAMAwD
BASax1ADBAWax4ADBASayHADBASazTADBASaziAwDAMEBJrPkAMEBJrPoAMEBJrQ
YAMEBJrTwAMEBZrT4AMEBJrWEDAMAwQEmtcQAwQGmtcAAwQEmtgQAwQEmt5gAwQF
mt6gAwQFmt9gMA0GCSqGSIb3DQEBCwUAA4IBAQBw+Iz7oxsxb7S2XirJ6kllL69z
XCueseJZ5MBNIs3A4T90V0vKitWuWtBSnkT5UdG5BAnhsvon7vYNPcmbYjPxrWkf
R+3a/RurTl75lHAd3d0HtqLXtg7jevypGF7rHVVqvbrcFsQZxrDRHzmAxhVHUeZ3
XorftNNdcAL1t0lS466kT1ItzYPbbKiuuk3v6iKlTSCu+G3KfYZBF07LCzu9nu4M
5OG5dQhJSxxmbMD/qDg6WjMwq7x4Sa1TJeINn/jHhxAYsadSzs27y12RUZr2tHSQ
q7RRD9gFUX4wyVWfjRfVs2W4rqziEeVIhd5566YPAL+4k2dBHz/ouQIkpxor
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:48:27 2026 by rpki-client