Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3284F024BC9D11F1B1EA4E0CCF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3284F024BC9D11F1B1EA4E0CCF1D38B0.roa
File: 3284F024BC9D11F1B1EA4E0CCF1D38B0.roa (raw, json)
Hash identifier: PDfLrOuEBuEsUoS5ry6HvY1xgJzv98qHkV7Av727rq8=
Subject key identifier: 03:D9:27:D8:C8:C1:C0:9B:92:FB:13:2C:7F:A4:93:74:B3:69:67:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3284F024BC9D11F1B1EA4E0CCF1D38B0.roa
Signing time: Wed 30 Sep 2026 07:04:37 +0000
ROA not before: Wed 30 Sep 2026 07:04:33 +0000
ROA not after: Fri 06 Nov 2026 07:04:33 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125818 (0x1eb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 07:04:33 2026 GMT
Not After : Nov 6 07:04:33 2026 GMT
Subject: CN=6abcb485-8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:d3:d8:86:6d:e2:6a:af:6b:b1:ab:1d:50:
09:5b:eb:ef:af:ab:47:ef:2d:db:74:65:8b:d6:f8:
55:84:3d:2b:89:95:0a:b9:e7:20:9d:7c:9b:3c:14:
7c:23:d3:fc:08:16:c5:bc:c5:8d:9c:d5:63:90:d0:
ac:75:16:e0:80:c5:7e:ad:36:17:1f:51:ac:c0:61:
81:65:40:a4:37:a0:32:cf:e4:81:75:51:30:7d:d7:
3d:22:5c:87:b2:43:6e:e7:76:f0:4f:f7:74:5e:4a:
b2:38:af:27:51:25:c9:27:85:b8:3f:1d:9c:58:a2:
a3:bd:06:e4:05:cc:91:3a:7d:45:9e:d9:d4:c1:c2:
91:d7:ac:23:9a:e4:1a:0c:89:87:33:2b:fc:ba:d4:
c7:7e:93:b0:8f:b7:a0:2f:5e:ff:6d:7b:16:06:79:
cc:3c:dd:54:e2:e5:53:ff:23:b7:64:a5:c8:ac:61:
99:55:db:8d:0d:90:1b:c0:37:9e:92:a1:0d:4c:91:
31:44:06:7e:43:f5:8d:05:c1:6f:c3:40:8c:a4:80:
bf:24:cb:82:d7:96:de:68:a2:23:05:7b:8f:59:0b:
60:a4:1f:29:a2:60:bf:b6:54:5a:c7:f9:e4:a0:cf:
a6:b2:2d:b9:27:16:4f:f3:c3:ba:68:c8:7c:f4:bc:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:27:D8:C8:C1:C0:9B:92:FB:13:2C:7F:A4:93:74:B3:69:67:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3284F024BC9D11F1B1EA4E0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0-154.209.220.255
154.211.17.0-154.211.18.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a7:81:76:11:bc:74:26:d3:59:1f:33:51:30:5c:63:28:e7:
e3:34:b2:6f:b7:f8:9d:eb:6f:de:a3:15:b2:2d:31:93:61:1b:
da:7e:61:07:25:0d:17:92:4d:7f:d8:3a:41:53:39:79:83:8c:
bb:ee:4e:5e:64:a2:35:00:1a:e3:b6:a3:57:d6:aa:2d:8a:6e:
6d:27:f3:03:d3:59:ce:bf:b8:78:39:42:b7:fb:f7:09:91:ae:
78:71:24:70:a6:05:e2:18:7a:f3:01:9d:c9:99:2c:4b:f2:93:
a4:08:25:9d:8c:a0:b8:84:22:50:91:34:44:39:29:c6:25:0e:
a1:5e:c1:f7:77:b8:d4:84:40:72:68:e5:1c:f4:50:ab:e9:dd:
c9:65:e1:36:86:bd:bc:e5:78:61:f2:04:ab:0f:24:4d:62:76:
27:1c:bd:0f:3c:e2:79:22:d6:da:92:c7:fc:ad:8a:6a:14:18:
11:d5:48:06:8a:df:b9:8b:4c:fa:ec:bd:3b:c0:f6:65:e1:4d:
b7:48:90:39:f6:93:80:db:74:7b:a3:32:ca:c1:e8:ee:5a:fc:
94:2f:f2:d5:07:08:ab:2d:88:28:3f:f3:af:cf:01:8f:5d:aa:
09:aa:9c:e3:de:70:00:24:c4:b0:4b:27:95:39:f3:85:57:6f:
80:e3:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:11:00 2026 by rpki-client