Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34381B5E9D3E11F1A2809FD2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34381B5E9D3E11F1A2809FD2CE1D38B0.roa
File: 34381B5E9D3E11F1A2809FD2CE1D38B0.roa (raw, json)
Hash identifier: +YZI22pwCJ3dm03JaJokAJahcK71PNs9G7fRoynVM4g=
Subject key identifier: 70:9F:F6:39:A2:3C:B6:21:DC:E0:8C:5F:E7:60:6C:BF:93:9B:78:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E16F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34381B5E9D3E11F1A2809FD2CE1D38B0.roa
Signing time: Fri 21 Aug 2026 08:56:32 +0000
ROA not before: Fri 21 Aug 2026 08:56:27 +0000
ROA not after: Thu 08 Oct 2026 08:56:27 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 08:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123247 (0x1e16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 08:56:27 2026 GMT
Not After : Oct 8 08:56:27 2026 GMT
Subject: CN=6a8812c0-5690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:5f:bb:09:1b:8a:ec:54:bd:53:24:c2:d7:
44:97:10:65:a1:4c:42:ca:9a:62:1b:eb:f2:9e:e3:
f6:34:a7:d7:62:2e:0d:9f:a7:1a:04:bb:11:b0:dd:
4d:bd:ae:bd:b6:bd:b2:96:f2:02:7e:f9:d4:b2:f3:
f9:b9:c5:c7:dc:51:4a:64:96:8a:34:2a:f1:6b:03:
37:b6:69:46:97:dc:65:3a:4a:13:c5:77:d2:96:76:
e0:02:8b:d8:59:29:ac:b1:63:84:85:79:bb:62:fb:
8b:0b:ec:a9:09:e0:07:c2:2a:6d:3c:e0:38:49:79:
ad:74:d1:e3:ad:a9:6e:93:41:92:ef:37:84:ac:63:
0b:7a:36:17:d4:9c:60:21:c9:2c:da:8b:3c:71:6a:
95:14:46:76:a1:34:55:8b:27:bd:7b:5e:a6:f6:4b:
57:ce:a9:7f:d7:73:2a:7e:d0:f1:52:63:79:49:4a:
0e:59:e4:14:0c:7f:cf:14:b6:bb:fb:24:26:3b:15:
46:88:c3:6d:52:62:b7:d9:2c:71:a5:90:81:ce:45:
1f:b9:25:33:1c:17:53:a4:99:33:90:e2:ca:67:fd:
03:5f:01:9c:61:bf:40:3f:58:de:d2:76:d8:50:ce:
56:42:ab:b4:30:c5:61:f0:16:ea:1b:8a:60:bd:81:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:F6:39:A2:3C:B6:21:DC:E0:8C:5F:E7:60:6C:BF:93:9B:78:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34381B5E9D3E11F1A2809FD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f3:1d:d0:08:9c:d3:21:9e:55:29:e2:15:14:d3:25:82:aa:
26:97:61:68:db:e3:1c:52:ca:f9:64:cb:72:6e:20:21:87:55:
2e:1d:d3:0d:96:ed:85:39:f1:63:95:67:94:02:d9:6a:a5:c2:
70:a6:ff:8f:ca:99:39:74:56:9c:10:b5:37:12:e5:d2:b8:ea:
78:51:9e:2e:85:cd:ab:39:0a:0f:9c:73:6c:1b:5d:c3:e5:e8:
87:c3:65:9b:cb:50:34:c1:76:15:60:dc:f1:61:b5:c0:79:98:
00:a5:d1:cb:3d:cc:cb:13:6f:f7:c6:54:00:fc:a0:1e:43:96:
75:ae:07:cd:c8:73:10:1b:92:fc:80:78:07:de:d8:4e:8f:d3:
8e:3b:6d:87:8b:8e:0d:a5:dd:88:0c:08:cd:12:a4:12:de:d5:
6c:b7:7f:6c:16:c0:f7:ae:7e:65:fe:e1:92:94:2e:80:4b:ce:
e2:ff:99:52:b8:63:8a:e7:8c:55:57:81:a8:82:56:94:1c:09:
45:68:26:0d:38:4a:a6:46:7d:11:6c:52:2b:33:78:03:1a:b3:
79:e7:a5:72:c5:ab:5b:43:85:50:8b:b7:db:04:3a:5c:d8:03:
51:a7:10:92:bb:a8:6b:aa:16:a3:74:86:21:5b:e0:ef:89:74:
4b:ac:d8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:37 2026 by rpki-client