Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A1152EA9D3B11F1A58014C2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A1152EA9D3B11F1A58014C2CE1D38B0.roa
File: 4A1152EA9D3B11F1A58014C2CE1D38B0.roa (raw, json)
Hash identifier: Sy88zYyvodoBNm7106zdmMBxwh859vhS0HdtmY922lw=
Subject key identifier: 98:78:D6:3B:5C:5D:A8:3A:C9:25:67:08:1E:89:CF:F2:4B:4E:3D:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E167
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A1152EA9D3B11F1A58014C2CE1D38B0.roa
Signing time: Fri 21 Aug 2026 08:35:40 +0000
ROA not before: Fri 21 Aug 2026 08:35:36 +0000
ROA not after: Thu 08 Oct 2026 08:35:36 +0000
asID: 9304
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 08:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123239 (0x1e167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 08:35:36 2026 GMT
Not After : Oct 8 08:35:36 2026 GMT
Subject: CN=6a880ddc-5129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:e3:72:ce:26:2e:4d:a3:76:df:c9:a6:0c:
80:ad:6b:3b:f2:5f:73:85:18:0d:b5:66:29:11:2d:
4a:ed:0c:19:db:fc:36:5e:ba:7c:83:07:72:b6:5e:
94:c8:a0:e1:4e:d4:10:b2:bf:ff:91:fe:09:9e:c0:
b0:ab:97:ba:ff:3f:68:3e:47:cb:36:5f:dd:24:f7:
6e:22:f3:90:f7:62:50:e9:c0:78:5b:c5:e8:f8:05:
ee:38:c0:4f:fc:c3:57:c3:a5:69:9a:30:84:45:5d:
13:24:d3:e0:22:72:84:be:e4:61:a8:86:2b:46:60:
52:28:4a:a6:72:75:25:a3:4a:23:b6:61:06:93:a8:
c1:fd:01:fb:13:97:6d:9e:e3:ba:7e:2f:d5:58:cd:
d0:24:87:96:5f:13:b2:b7:c9:ec:04:e3:d7:8d:7a:
ba:aa:f6:29:0e:c4:fb:50:da:43:47:ad:b7:da:ea:
69:b3:c9:fd:e5:ee:f2:fd:24:91:72:3b:49:71:55:
16:d9:1b:3b:b9:a0:4a:b0:c7:99:2f:93:3e:e6:92:
0a:4f:ef:e2:06:a7:ab:dd:b7:6d:03:36:17:92:9e:
71:34:ec:77:2b:bb:79:e1:61:a4:ef:6e:ae:81:7b:
cc:e9:90:85:b3:8b:5c:20:6d:2b:4e:b6:c3:e4:08:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:D6:3B:5C:5D:A8:3A:C9:25:67:08:1E:89:CF:F2:4B:4E:3D:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A1152EA9D3B11F1A58014C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
03:86:cc:d4:20:1a:a8:ca:a2:31:7f:84:68:3a:2a:70:b9:1c:
6c:2d:c2:6f:e2:a2:58:8a:c1:a2:d2:f7:c9:1c:08:ad:aa:55:
d1:66:a4:d2:20:7f:7b:ba:08:b2:71:a4:a2:09:e0:f9:2c:68:
06:78:76:49:50:08:d4:7a:5c:4b:94:58:10:f6:8d:70:6f:ee:
c8:f9:4f:b9:75:7c:31:fc:6c:23:c1:49:fd:c2:dd:fd:6f:6a:
fb:29:4c:96:f0:f2:50:58:06:97:a0:65:f5:32:cc:53:3e:4d:
05:2c:76:ac:af:1b:cb:d1:fb:62:1f:61:88:b1:7b:ea:56:b1:
af:e0:5b:b5:c2:8d:5f:c1:34:b4:a5:84:b9:64:a8:0d:d8:ee:
8b:14:b6:e0:94:a9:7d:41:1e:a4:0e:9a:3f:71:b4:af:43:e1:
60:e6:84:53:d7:d2:19:20:7d:8e:d5:21:56:92:ae:27:24:8a:
19:40:48:68:e6:e6:48:9d:e5:eb:c4:ee:d9:5b:8f:6c:87:8e:
fa:be:47:9d:d4:9b:df:6d:f3:56:26:3a:03:3b:4d:b7:d0:0d:
5e:87:27:5e:92:b0:92:2e:94:50:dc:76:ac:86:b2:1e:e3:2d:
aa:d8:2f:64:49:9a:51:5b:b7:6d:75:29:6f:15:cd:e5:ac:61:
3a:25:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:52 2026 by rpki-client