Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28799F6AAB7911F1AE8802BACE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28799F6AAB7911F1AE8802BACE1D38B0.roa
File: 28799F6AAB7911F1AE8802BACE1D38B0.roa (raw, json)
Hash identifier: qKP9kvrIesw6MWXYq1yy+UMJCBihEjL5U9f4JCwAp94=
Subject key identifier: EC:BF:63:D1:30:06:B2:F1:64:ED:45:84:7E:72:FC:3C:BD:32:26:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E662
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28799F6AAB7911F1AE8802BACE1D38B0.roa
Signing time: Tue 08 Sep 2026 11:33:49 +0000
ROA not before: Tue 08 Sep 2026 11:33:45 +0000
ROA not after: Thu 17 Sep 2026 11:33:45 +0000
asID: 17497
IP address blocks: 154.211.168.0/21 maxlen: 24
154.211.168.0/24 maxlen: 24
154.211.169.0/24 maxlen: 24
154.211.170.0/24 maxlen: 24
154.211.171.0/24 maxlen: 24
154.211.172.0/24 maxlen: 24
154.211.173.0/24 maxlen: 24
154.211.174.0/24 maxlen: 24
154.211.175.0/24 maxlen: 24
154.211.176.0/21 maxlen: 24
154.211.176.0/24 maxlen: 24
154.211.177.0/24 maxlen: 24
154.211.178.0/24 maxlen: 24
154.211.179.0/24 maxlen: 24
154.211.180.0/24 maxlen: 24
154.211.181.0/24 maxlen: 24
154.211.182.0/24 maxlen: 24
154.211.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Sep 2026 10:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124514 (0x1e662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:33:45 2026 GMT
Not After : Sep 17 11:33:45 2026 GMT
Subject: CN=6a9ff29d-06ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:82:2a:95:2b:87:ba:dd:4e:6c:0e:0c:48:
bf:36:e7:af:90:cf:22:a9:e9:0a:d6:af:11:e4:e7:
4f:4a:f9:71:ed:85:59:d4:9c:47:f0:4b:59:81:c9:
57:6f:f8:35:5e:83:1e:bc:29:a8:b5:3a:27:b7:4d:
c9:e8:63:29:1c:3a:17:79:28:5f:36:61:6e:f8:98:
fb:d7:2f:31:40:82:5a:21:53:fa:b8:59:32:8b:dd:
03:ff:0d:41:35:09:49:cb:22:05:b7:bd:b4:62:4b:
87:4a:06:9f:60:8a:ae:ae:cd:de:0a:ca:db:bf:ac:
a8:46:fb:fc:e2:af:fe:d8:ee:5c:c9:0d:a1:93:c9:
f7:1b:d0:92:23:47:cc:22:d7:15:b2:51:80:2d:50:
b2:28:23:ae:a1:01:a3:14:99:31:26:b6:11:2e:e4:
44:3f:a4:4a:cf:5b:45:c6:ba:a9:19:43:a9:91:86:
a8:ab:a4:b2:5d:26:cc:2f:99:08:12:c3:9a:dc:e3:
9c:76:58:52:6d:b3:76:6b:4b:93:6f:97:46:70:ec:
36:d6:fa:0a:d1:af:1e:a6:9c:6f:0f:a1:2f:29:fb:
87:a8:8d:07:d4:15:6c:dd:b8:56:6d:c3:93:2b:a8:
51:30:6d:ef:d8:98:a2:4a:3e:47:1e:c3:85:a4:a9:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BF:63:D1:30:06:B2:F1:64:ED:45:84:7E:72:FC:3C:BD:32:26:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28799F6AAB7911F1AE8802BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.168.0-154.211.183.255
Signature Algorithm: sha256WithRSAEncryption
02:53:69:7a:1d:8f:f3:71:4d:04:99:66:23:35:cf:66:59:b3:
ed:1a:f8:0c:99:0f:61:6d:13:e7:98:60:03:26:0a:5f:86:2a:
18:e1:5e:0e:fe:cf:19:2d:e2:e2:23:63:53:26:b2:42:27:c0:
11:19:50:6f:d0:a1:9c:15:f4:5b:53:c3:b3:da:8b:c6:14:1d:
03:2b:12:a9:77:90:4b:9e:a7:14:95:54:f1:22:b4:d5:1d:82:
b7:a3:50:b6:0b:c4:0b:31:9b:63:db:54:c6:9a:02:19:56:88:
39:2d:0b:52:53:9b:81:1d:8a:bb:ac:5a:3b:28:44:b2:0d:7e:
65:f9:21:34:e3:74:30:58:51:b0:a1:72:a4:64:a8:de:f5:73:
76:26:2c:49:63:4c:39:ab:f1:40:97:f4:1a:ae:13:0e:de:e2:
d3:08:7e:7a:58:9e:f2:4f:46:de:1b:44:8c:5c:57:db:72:b7:
00:37:93:f0:3d:dc:d2:1e:d7:58:b3:e5:6c:7b:3b:ac:1e:b6:
cc:8c:12:6c:ed:85:0f:bf:02:2c:a5:d4:be:a0:53:38:26:d4:
e5:1e:55:e3:97:e7:c3:6f:1d:8b:1e:5e:b2:50:d8:71:5e:2b:
f8:96:ae:0d:f7:a6:6f:17:5e:8e:34:2e:ab:d2:49:bf:c9:e1:
2a:58:6d:be
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeZiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA4MTEzMzQ1WhcNMjYwOTE3MTEzMzQ1WjAYMRYw
FAYDVQQDEw02YTlmZjI5ZC0wNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAviWCKpUrh7rdTmwODEi/NuevkM8iqekK1q8R5OdPSvlx7YVZ1JxH8EtZ
gclXb/g1XoMevCmotTont03J6GMpHDoXeShfNmFu+Jj71y8xQIJaIVP6uFkyi90D
/w1BNQlJyyIFt720YkuHSgafYIqurs3eCsrbv6yoRvv84q/+2O5cyQ2hk8n3G9CS
I0fMItcVslGALVCyKCOuoQGjFJkxJrYRLuREP6RKz1tFxrqpGUOpkYaoq6SyXSbM
L5kIEsOa3OOcdlhSbbN2a0uTb5dGcOw21voK0a8eppxvD6EvKfuHqI0H1BVs3bhW
bcOTK6hRMG3v2JiiSj5HHsOFpKlZlwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOy/
Y9EwBrLxZO1FhH5y/Dy9MibfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yODc5OUY2QUFCNzkxMUYxQUU4ODAyQkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOa06gDBAOa07AwDQYJ
KoZIhvcNAQELBQADggEBAAJTaXodj/NxTQSZZiM1z2ZZs+0a+AyZD2FtE+eYYAMm
Cl+GKhjhXg7+zxkt4uIjY1MmskInwBEZUG/QoZwV9FtTw7Pai8YUHQMrEql3kEue
pxSVVPEitNUdgrejULYLxAsxm2PbVMaaAhlWiDktC1JTm4EdirusWjsoRLINfmX5
ITTjdDBYUbChcqRkqN71c3YmLEljTDmr8UCX9BquEw7e4tMIfnpYnvJPRt4bRIxc
V9tytwA3k/A93NIe11iz5Wx7O6wetsyMEmzthQ+/Aiyl1L6gUzgm1OUeVeOX58Nv
HYseXrJQ2HFeK/iWrg33pm8XXo40LqvSSb/J4SpYbb4=
-----END CERTIFICATE-----
Generated at Wed Sep 9 21:26:41 2026 by rpki-client