Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD8DF429D4111F19B64E4E5CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD8DF429D4111F19B64E4E5CE1D38B0.roa
File: 4CD8DF429D4111F19B64E4E5CE1D38B0.roa (raw, json)
Hash identifier: XMKI3r/AfI9LYE7XEYASA1+5pim/Skm22zb4QophklQ=
Subject key identifier: F5:17:13:45:8F:28:22:02:AA:AD:F3:97:AD:D9:BD:C9:AD:E9:1A:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E17A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD8DF429D4111F19B64E4E5CE1D38B0.roa
Signing time: Fri 21 Aug 2026 09:18:42 +0000
ROA not before: Fri 21 Aug 2026 09:18:37 +0000
ROA not after: Thu 08 Oct 2026 09:18:37 +0000
asID: 401783
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
154.223.240.0/24 maxlen: 24
154.223.241.0/24 maxlen: 24
154.223.242.0/24 maxlen: 24
154.223.243.0/24 maxlen: 24
154.223.244.0/24 maxlen: 24
154.223.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Sep 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123258 (0x1e17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 09:18:37 2026 GMT
Not After : Oct 8 09:18:37 2026 GMT
Subject: CN=6a8817f1-795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:59:05:45:94:61:74:0b:3f:14:89:15:eb:
35:e1:d6:94:d0:c9:54:d8:60:d4:68:96:16:bd:6f:
5c:c0:77:a5:35:d5:83:72:71:08:4b:15:33:60:24:
7c:85:47:f6:ca:73:63:a4:cd:b9:0c:a5:7c:97:b0:
90:ec:a7:ec:11:6d:38:93:4f:93:0e:60:57:42:19:
a3:37:16:5f:6f:e2:c9:1d:b0:c6:0a:41:d2:3d:e3:
bc:71:c3:61:ff:50:a2:ac:0a:94:0a:66:bb:5c:29:
1c:f5:e6:ee:cd:5c:34:56:5a:1d:b1:f3:89:9d:f8:
a8:38:cd:38:83:fd:6f:97:3a:ee:f6:87:64:17:0a:
2e:46:91:ef:79:58:5b:fc:b5:0f:3b:a3:88:91:04:
38:9b:c2:e8:44:0a:6a:ad:d2:a4:ed:4c:05:18:f1:
59:d2:50:06:b3:50:6b:37:9d:b7:63:42:6f:f1:2c:
f3:4e:da:dd:10:48:ed:6a:5a:40:34:bb:1e:c5:df:
27:c3:4a:f6:3c:5d:ed:55:c3:0e:e6:d4:67:e0:fa:
d4:98:9f:fd:43:bf:1e:f2:47:21:20:37:ae:13:c5:
65:4e:70:21:32:40:41:d1:0d:97:2b:25:b9:63:b5:
b6:34:20:58:6e:02:e6:d2:82:77:3c:fb:fb:84:22:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:17:13:45:8F:28:22:02:AA:AD:F3:97:AD:D9:BD:C9:AD:E9:1A:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD8DF429D4111F19B64E4E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
154.223.240.0-154.223.245.255
Signature Algorithm: sha256WithRSAEncryption
84:02:4a:6f:5b:e6:87:bc:88:ce:69:db:85:73:1e:73:db:c9:
20:ce:a8:fb:bd:de:39:50:6d:79:aa:88:29:b0:14:d2:08:26:
0a:d5:ba:5c:90:da:f5:d7:c3:ae:e9:89:4e:5d:12:de:e0:70:
56:52:6a:f2:ac:40:5e:91:d2:fb:30:30:4b:ca:62:d0:ff:bc:
85:29:8c:72:5d:97:42:88:87:69:ff:a9:18:39:0a:a5:73:2b:
84:7a:ae:83:60:30:d8:81:a7:8f:ba:95:a8:9d:30:4d:3e:14:
df:e3:bf:91:a4:6d:7b:f1:df:41:c8:55:0b:ac:c0:08:99:a3:
43:01:66:16:19:34:f5:e0:c4:a8:9d:33:71:f7:c0:3c:4b:aa:
4d:fb:f0:9b:f1:53:72:6b:0c:56:90:4d:b7:d7:af:4a:e8:8c:
f2:73:b0:36:76:d4:2f:17:be:e2:7c:4e:be:af:92:32:34:5f:
77:51:8e:e8:cd:f4:10:cc:e0:30:c3:7d:24:95:5d:e3:c4:52:
bf:bf:23:aa:de:fa:c1:58:5e:07:e1:0e:a3:32:9b:eb:c0:4d:
ff:03:71:a7:f4:4b:7d:c8:4a:c0:22:7a:78:ae:88:70:87:d8:
1c:f7:bc:02:11:0d:8f:64:dd:03:e7:82:9f:6d:79:e7:b3:67:
8f:cc:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:57 2026 by rpki-client