Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F683ACBB3E11F189060013CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F683ACBB3E11F189060013CF1D38B0.roa
File: 28F683ACBB3E11F189060013CF1D38B0.roa (raw, json)
Hash identifier: PBgwjBIObYk5A9ItY4Kmov9PvNrPENTTJanJhjqj1Eg=
Subject key identifier: 8B:97:A8:7A:3A:45:AA:B8:D3:49:5B:DE:A0:BE:91:65:6E:93:56:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F683ACBB3E11F189060013CF1D38B0.roa
Signing time: Mon 28 Sep 2026 13:11:48 +0000
ROA not before: Mon 28 Sep 2026 13:11:44 +0000
ROA not after: Sat 05 Jan 2030 13:11:44 +0000
asID: 18229
IP address blocks: 154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
154.210.165.0/24 maxlen: 24
154.210.166.0/24 maxlen: 24
154.210.167.0/24 maxlen: 24
154.210.168.0/24 maxlen: 24
154.210.169.0/24 maxlen: 24
154.210.170.0/24 maxlen: 24
154.210.171.0/24 maxlen: 24
154.210.172.0/24 maxlen: 24
154.210.173.0/24 maxlen: 24
154.210.174.0/24 maxlen: 24
154.210.175.0/24 maxlen: 24
154.210.176.0/24 maxlen: 24
154.210.178.0/24 maxlen: 24
154.210.179.0/24 maxlen: 24
154.210.180.0/24 maxlen: 24
154.210.181.0/24 maxlen: 24
154.210.182.0/24 maxlen: 24
154.210.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125728 (0x1eb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 13:11:44 2026 GMT
Not After : Jan 5 13:11:44 2030 GMT
Subject: CN=6aba6794-c319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:87:97:a0:0f:4e:d3:2a:01:3e:52:9d:f3:5a:
a3:42:6b:d7:df:e1:07:00:f5:fa:ba:ab:46:c2:4c:
c3:d0:07:28:9c:23:1c:ba:7d:9d:7e:32:81:99:b0:
6e:75:ac:e5:f4:79:c2:f0:16:33:85:9e:f4:90:1e:
89:f1:ae:6a:23:00:20:66:f1:e9:f0:f0:c6:1c:27:
d1:c7:44:a1:8a:54:16:0c:bd:9c:c4:b3:0a:d3:99:
69:6a:d3:01:ea:6e:a2:14:ab:3c:10:d0:a9:c0:84:
1c:7a:81:cb:76:a8:a2:57:48:8e:81:b8:b9:35:00:
e3:c4:4a:d1:76:f7:3b:2f:4a:3a:35:7a:53:99:5c:
ec:04:d3:44:ca:72:14:5b:34:bd:28:2a:43:b4:5a:
68:b7:ae:e9:bd:15:0a:fc:ed:cd:85:98:ec:9a:05:
30:c9:25:bf:f7:ef:5b:6b:05:77:31:95:d0:a9:c6:
59:ff:4c:c4:f4:f7:b6:e4:1a:18:a2:eb:37:21:f3:
47:d1:0f:5b:c8:5e:eb:db:1f:da:c7:89:d0:1c:92:
d0:b3:0a:2d:e0:2a:b3:ac:1f:7d:5b:8e:e4:a0:1a:
9a:4b:f8:6f:48:c1:b3:3a:45:d1:50:26:db:35:dc:
b4:27:0d:27:e3:f9:6e:b6:2f:c2:e2:09:04:87:95:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:A8:7A:3A:45:AA:B8:D3:49:5B:DE:A0:BE:91:65:6E:93:56:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F683ACBB3E11F189060013CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.163.0-154.210.176.255
154.210.178.0-154.210.183.255
Signature Algorithm: sha256WithRSAEncryption
2b:1c:24:15:0b:a3:61:12:ea:a9:0d:75:9d:f1:09:9b:69:49:
ff:c1:c7:98:3d:ad:e6:29:a9:b2:ee:9d:bf:62:cc:4d:55:aa:
08:dd:4d:75:66:f1:ff:96:d2:c0:0a:ee:f4:d6:c6:a9:ef:f7:
e9:cc:58:6c:81:d7:51:14:81:74:01:14:0e:46:09:96:7e:95:
8c:d8:fd:1a:cc:2d:c6:cd:21:d7:f6:5d:de:d4:4e:69:a7:1e:
38:cf:0f:48:1a:27:25:65:de:59:01:ce:d2:c3:bf:e7:98:6b:
9e:f7:00:b8:d0:6b:24:67:80:55:bd:6b:df:82:f9:05:e2:69:
1b:8f:d2:ed:11:da:98:8b:e0:a1:9a:6e:ed:b3:ba:04:37:f9:
c9:f6:13:7c:1a:ae:83:5a:e3:b8:0a:a8:15:d3:ae:fb:e1:74:
34:6a:3b:b5:7d:72:40:8a:c5:2b:b3:88:7d:8b:f9:ff:4b:63:
60:49:73:11:1e:28:75:4c:18:88:a4:47:5b:7a:43:99:f2:f5:
fa:57:ea:f0:fe:56:61:3a:c2:7e:d3:01:43:cf:b0:f1:33:13:
f1:9c:02:be:76:be:35:52:04:25:a4:ba:02:cf:68:5f:e5:81:
f7:58:c2:15:73:4b:d8:31:7b:65:e3:97:a9:8f:cb:88:7c:1e:
1e:82:83:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:13:29 2026 by rpki-client