Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BEE4DF89D4011F18AD2EFDFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BEE4DF89D4011F18AD2EFDFCE1D38B0.roa
File: 3BEE4DF89D4011F18AD2EFDFCE1D38B0.roa (raw, json)
Hash identifier: 6gdbXjXyYVVhsiGY5m+Ii6Z7bqa/wFJX+gJ7pDJPAxY=
Subject key identifier: D0:52:1E:B0:3D:B0:35:25:81:35:92:4D:9F:71:D0:45:AB:18:70:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E174
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BEE4DF89D4011F18AD2EFDFCE1D38B0.roa
Signing time: Fri 21 Aug 2026 09:11:04 +0000
ROA not before: Fri 21 Aug 2026 09:10:59 +0000
ROA not after: Thu 08 Oct 2026 09:10:59 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Sep 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123252 (0x1e174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 09:10:59 2026 GMT
Not After : Oct 8 09:10:59 2026 GMT
Subject: CN=6a881628-009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:dc:85:b2:8a:49:d1:42:1c:5e:87:a4:8a:
b4:a0:65:90:32:47:d2:0b:03:55:31:58:ed:02:7e:
54:cb:3c:19:fb:50:ef:5c:27:4f:2f:99:d1:8f:97:
f5:76:22:07:d4:0c:47:5f:49:09:1e:af:4b:91:6a:
cc:e8:8b:cb:b5:f9:17:d8:ce:18:0c:61:f5:3e:94:
c2:8c:9d:76:8f:3e:94:da:26:c2:60:4e:4c:63:e1:
09:b5:31:54:c9:c3:1c:f0:0d:38:1f:aa:25:03:63:
8a:51:15:f1:18:81:80:78:96:79:57:cb:de:84:2f:
c4:64:bf:b0:12:d5:ab:3d:44:65:49:c5:f9:e9:63:
6a:79:20:70:45:66:3b:da:cd:20:a1:f0:4a:ec:15:
5b:aa:42:ed:e4:8e:14:a3:48:1e:9f:cf:d8:9f:90:
a7:d6:0e:72:94:ce:7e:76:95:1e:d5:bd:33:da:1d:
d7:fa:61:d1:fd:40:e1:f9:b5:5d:d7:30:5e:9f:cd:
df:75:51:ca:36:12:5e:e4:36:21:7b:b5:98:e7:89:
9e:92:cf:e5:fc:7f:bc:29:b3:1e:ff:0c:ab:94:7d:
a8:8d:dc:90:3b:a7:11:ec:d5:9e:10:31:f7:be:b9:
8b:45:e1:01:65:25:f2:47:b1:94:79:33:8d:52:14:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:1E:B0:3D:B0:35:25:81:35:92:4D:9F:71:D0:45:AB:18:70:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BEE4DF89D4011F18AD2EFDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ef:83:ea:a3:18:6c:d7:44:11:d8:7c:e6:e4:d1:eb:96:2f:
5d:63:6f:0a:21:75:74:3e:fe:15:b0:11:a1:26:76:03:3e:52:
db:f6:c4:33:24:05:72:70:b7:12:ee:fb:37:5f:10:3b:dd:20:
8f:47:a0:eb:e6:98:6f:47:0a:12:bd:fa:17:4b:e0:89:0d:d1:
17:17:4c:5a:93:1e:80:d6:58:be:5f:fd:00:9c:34:4a:48:71:
07:0a:11:36:2b:58:83:ec:83:1e:ab:39:e0:f2:38:dd:d5:47:
47:5f:c1:94:b3:25:73:5c:b2:59:d2:73:b1:0e:de:d6:af:d4:
ff:63:16:24:2d:37:cf:ba:fc:00:a6:47:89:91:ed:f9:d7:c3:
c3:94:b7:34:b6:5a:0c:07:1e:99:cb:f9:3a:61:4b:c1:4b:11:
15:75:c6:60:4b:9f:18:f5:3f:1c:7c:c5:5e:31:1d:b5:94:a1:
2d:fb:05:a1:58:34:22:5f:61:4a:77:68:ec:a3:e1:ab:d4:3b:
e4:6d:11:77:45:39:37:93:5b:58:ab:50:c2:27:59:e2:22:2f:
72:86:31:6b:6e:5d:51:d2:65:6b:22:4c:a6:5c:a9:78:bd:10:
c4:59:05:b3:c6:68:fc:e9:4d:8e:79:a8:e0:30:9c:bf:38:c0:
1c:9d:4f:eb
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgIDAeF0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIxMDkxMDU5WhcNMjYxMDA4MDkxMDU5WjAYMRYw
FAYDVQQDEw02YTg4MTYyOC0wMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy2TchbKKSdFCHF6HpIq0oGWQMkfSCwNVMVjtAn5UyzwZ+1DvXCdPL5nR
j5f1diIH1AxHX0kJHq9LkWrM6IvLtfkX2M4YDGH1PpTCjJ12jz6U2ibCYE5MY+EJ
tTFUycMc8A04H6olA2OKURXxGIGAeJZ5V8vehC/EZL+wEtWrPURlScX56WNqeSBw
RWY72s0gofBK7BVbqkLt5I4Uo0gen8/Yn5Cn1g5ylM5+dpUe1b0z2h3X+mHR/UDh
+bVd1zBen83fdVHKNhJe5DYhe7WY54meks/l/H+8KbMe/wyrlH2ojdyQO6cR7NWe
EDH3vrmLReEBZSXyR7GUeTONUhTH9QIDAQABo4IDEDCCAwwwHQYDVR0OBBYEFNBS
HrA9sDUlgTWSTZ9x0EWrGHCfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQkVFNERGODlENDAxMUYxOEFEMkVGREZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAJrBAgMEAJrBIwMEAJrC
wwMEAJrEhgMEAJrEoDAMAwQAmsSzAwQAmsS0AwQAmscEAwQAmsgBAwQAmsgaAwQA
msglAwQAmsgrAwQAmsguAwQAmsgwMAwDBACayDMDBACayDYDBACayDwDBACayIEw
DQYJKoZIhvcNAQELBQADggEBAJTvg+qjGGzXRBHYfObk0euWL11jbwohdXQ+/hWw
EaEmdgM+Utv2xDMkBXJwtxLu+zdfEDvdII9HoOvmmG9HChK9+hdL4IkN0RcXTFqT
HoDWWL5f/QCcNEpIcQcKETYrWIPsgx6rOeDyON3VR0dfwZSzJXNcslnSc7EO3tav
1P9jFiQtN8+6/ACmR4mR7fnXw8OUtzS2WgwHHpnL+TphS8FLERV1xmBLnxj1Pxx8
xV4xHbWUoS37BaFYNCJfYUp3aOyj4avUO+RtEXdFOTeTW1irUMInWeIiL3KGMWtu
XVHSZWsiTKZcqXi9EMRZBbPGaPzpTY55qOAwnL84wBydT+s=
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:23:22 2026 by rpki-client