Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2DA59A9D3F11F1A4C098D8CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2DA59A9D3F11F1A4C098D8CE1D38B0.roa
File: 2C2DA59A9D3F11F1A4C098D8CE1D38B0.roa (raw, json)
Hash identifier: rmBoAtgwpES5ruYagA/gI3CJQR2cmAZZ7RjIqSBsdRs=
Subject key identifier: E9:AE:69:A7:57:EE:87:96:A6:FB:B5:4D:10:BF:B7:09:58:4D:57:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E171
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2DA59A9D3F11F1A4C098D8CE1D38B0.roa
Signing time: Fri 21 Aug 2026 09:03:28 +0000
ROA not before: Fri 21 Aug 2026 09:03:24 +0000
ROA not after: Thu 08 Oct 2026 09:03:24 +0000
asID: 9304
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.24.0/21 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 08:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123249 (0x1e171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 09:03:24 2026 GMT
Not After : Oct 8 09:03:24 2026 GMT
Subject: CN=6a881460-a578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:e1:3f:f9:49:0f:29:7c:07:d6:29:43:af:
eb:ca:ec:7c:06:40:32:52:53:94:b8:27:b8:ac:f2:
1b:b0:bf:08:33:eb:3e:6f:4d:b2:b3:ec:99:5a:26:
1a:e0:2a:64:8c:d8:19:4a:e3:fa:97:df:ad:e6:80:
87:58:6d:57:fd:0b:23:8a:94:3b:f2:f4:3d:19:f3:
4f:8b:ed:6c:f0:22:b0:8a:69:2f:84:93:96:f0:5c:
50:2b:a2:60:47:a5:3e:4f:4f:9f:d6:70:79:59:34:
5c:6e:b8:8a:d5:99:43:2f:77:20:9a:a2:43:8f:ec:
78:bf:57:86:07:cd:01:e3:1b:cf:26:c9:0d:6d:8f:
aa:54:a5:ce:fb:86:e7:26:c8:ce:37:42:f5:f5:bd:
42:cd:ef:85:fd:53:fd:d9:26:73:13:fb:4b:d1:a9:
ba:7f:b4:0a:83:93:3b:e4:5c:9a:0a:aa:d3:38:c0:
3f:3b:63:fc:d7:04:26:f8:b9:89:86:58:2d:3b:97:
87:cb:ff:aa:8e:78:3f:55:2a:d8:e4:5a:dc:70:67:
07:0f:6e:04:9b:0b:ea:ff:1d:80:00:eb:20:d3:6b:
6c:35:13:3b:de:20:88:a0:60:a2:c2:69:88:28:cc:
03:43:db:46:6c:2d:5c:d2:52:1b:a5:55:1e:13:7b:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:69:A7:57:EE:87:96:A6:FB:B5:4D:10:BF:B7:09:58:4D:57:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2DA59A9D3F11F1A4C098D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.24.0/21
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
91:64:79:8b:4d:2b:08:36:af:e5:95:22:62:2f:0f:08:9e:de:
d7:43:2d:12:c1:6b:75:bc:3c:06:1e:b2:29:9f:5f:84:10:66:
e3:7b:c1:d9:60:de:33:81:de:ad:d4:c3:6c:ba:80:33:0d:0c:
db:ba:f4:b2:58:49:16:a6:94:f6:39:7a:b6:5d:de:f2:54:75:
69:63:63:ce:08:34:3c:bb:62:41:18:f2:03:2d:9d:f2:80:1e:
d8:80:7f:c7:7b:e1:4b:e3:f4:7d:08:a5:28:64:7c:b9:e9:92:
eb:c1:01:73:3a:42:a5:98:ba:65:c8:25:7e:3e:1c:03:4a:a4:
ff:ca:8b:78:9a:8f:42:e0:07:05:17:bb:1a:39:46:d5:2e:3a:
74:b3:b0:65:a5:d6:74:3d:20:bf:00:79:ba:47:46:53:4a:e3:
17:74:6e:3e:65:63:29:91:9a:e3:9d:53:10:4c:ad:f3:8c:d2:
b4:5f:f0:73:0b:7e:30:c8:1b:34:fd:e8:3c:c7:7a:35:23:01:
a8:9a:94:d4:f7:4e:5f:39:94:cf:76:74:a9:1d:2f:bb:15:33:
78:98:be:53:3a:40:2f:c3:91:8c:06:d0:a5:5c:a5:9e:f2:ca:
35:44:64:c4:87:c3:9c:22:a3:f7:ba:a5:a2:19:28:36:0e:98:
ac:43:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:25 2026 by rpki-client