Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AEA73029D3C11F1977F11C8CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AEA73029D3C11F1977F11C8CE1D38B0.roa
File: 5AEA73029D3C11F1977F11C8CE1D38B0.roa (raw, json)
Hash identifier: XN2LCPY8g6Mnsx01Tg6/qvMlcE+k1Jxf2whaNWfeWXY=
Subject key identifier: F1:3B:42:86:23:40:90:CD:DA:69:E0:DD:23:4A:54:16:6E:98:81:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E169
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AEA73029D3C11F1977F11C8CE1D38B0.roa
Signing time: Fri 21 Aug 2026 08:43:18 +0000
ROA not before: Fri 21 Aug 2026 08:43:13 +0000
ROA not after: Thu 08 Oct 2026 08:43:13 +0000
asID: 401783
IP address blocks: 154.81.160.0/24 maxlen: 24
154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Sep 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123241 (0x1e169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 08:43:13 2026 GMT
Not After : Oct 8 08:43:13 2026 GMT
Subject: CN=6a880fa6-9ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:e8:00:8c:94:a0:3b:d7:3c:27:ff:da:02:
df:73:79:ff:7b:fd:cc:e5:18:d9:d5:57:a8:82:af:
2d:ce:9e:c1:11:e7:60:7b:71:97:bd:5e:71:25:95:
ce:82:22:67:cb:db:81:db:54:2a:f0:09:58:9c:18:
dd:ac:55:08:8b:43:37:0f:a8:41:65:46:97:70:92:
cc:7e:66:84:e6:eb:55:e0:05:2b:39:68:fd:35:ae:
be:de:6c:01:a2:94:88:3e:71:83:6b:3e:cc:4c:39:
76:bc:b7:3e:14:bf:b6:73:01:b2:7a:2a:f7:ed:03:
86:68:59:1d:9d:3e:50:e3:af:f5:8b:7b:7e:bf:fe:
5a:cc:e8:14:4f:98:51:c2:1d:87:ce:79:67:07:f5:
20:f7:b6:7f:7c:e1:82:27:08:f1:4d:f4:4d:9a:52:
05:11:cb:1d:50:c0:16:67:b5:43:31:52:af:cf:43:
a5:22:0f:42:19:f9:5e:fa:ea:af:82:17:3f:24:a4:
52:bd:63:55:dc:66:e6:79:06:b1:cc:9a:54:a4:cf:
39:0f:cd:a4:73:d6:fe:a5:63:8f:55:f5:19:d1:11:
16:00:4e:55:eb:e1:39:ce:80:67:7c:62:8b:6e:41:
3e:e3:5a:93:01:d2:b6:ce:99:da:0e:da:e4:fe:04:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:42:86:23:40:90:CD:DA:69:E0:DD:23:4A:54:16:6E:98:81:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AEA73029D3C11F1977F11C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/24
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
27:46:46:bf:e9:91:4f:88:af:4a:17:bf:75:66:06:74:ad:43:
62:04:63:b4:e9:f3:54:54:b7:83:28:57:1e:ca:13:b5:1f:a3:
f4:e1:1a:b0:9a:4c:fb:94:5e:8f:c3:ff:48:cd:41:0b:56:fc:
12:92:b4:29:40:ed:9c:dd:c3:0a:e9:d1:9d:cd:ad:7f:cd:b6:
91:08:b2:54:17:08:75:35:4f:65:ed:ff:91:99:dd:4a:46:e9:
d4:ec:36:2e:d9:6b:5c:2d:36:13:45:ea:03:f6:e8:57:e8:d9:
eb:a5:be:3a:6e:ef:1c:2b:af:f1:33:ba:e4:fb:42:b1:2a:ca:
e5:31:bd:5a:06:a2:a2:35:0d:98:86:9e:de:6d:b3:49:fc:45:
75:0e:fa:4c:b8:a0:42:ce:00:5a:41:1b:17:89:c2:31:39:4c:
e7:ff:61:28:32:88:df:c5:b2:75:52:e9:88:97:93:e7:63:41:
e4:c7:b3:38:4f:20:f1:f9:f9:64:76:7d:79:5f:a7:54:a2:74:
23:0a:dd:f7:fa:dd:56:63:dc:b8:e8:f5:74:0d:6e:9a:5c:1d:
8e:cc:d8:48:db:45:74:0d:76:e4:ef:1a:67:e2:67:47:c9:7d:
83:8b:33:14:c1:7c:89:6a:17:4c:57:1e:91:24:c0:91:2e:f1:
ca:e0:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:12 2026 by rpki-client