Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60FEC424C0B311F18E042FB5CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60FEC424C0B311F18E042FB5CE1D38B0.roa
File: 60FEC424C0B311F18E042FB5CE1D38B0.roa (raw, json)
Hash identifier: jdbP+3wLTXZyLYtfF12OUNAd69yd4hnuhGRYP+fqJ1k=
Subject key identifier: 84:7B:EC:F5:A9:AF:CF:D9:47:7D:EF:DF:57:D6:0F:6C:C7:C1:7A:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EC48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60FEC424C0B311F18E042FB5CE1D38B0.roa
Signing time: Mon 05 Oct 2026 11:53:29 +0000
ROA not before: Mon 05 Oct 2026 11:53:25 +0000
ROA not after: Mon 12 Oct 2026 11:53:25 +0000
asID: 209242
IP address blocks: 154.84.14.0/23 maxlen: 24
154.84.14.0/24 maxlen: 24
154.84.15.0/24 maxlen: 24
154.84.16.0/21 maxlen: 24
154.84.16.0/23 maxlen: 24
154.84.16.0/24 maxlen: 24
154.84.17.0/24 maxlen: 24
154.84.18.0/23 maxlen: 24
154.84.18.0/24 maxlen: 24
154.84.19.0/24 maxlen: 24
154.84.20.0/23 maxlen: 24
154.84.20.0/24 maxlen: 24
154.84.21.0/24 maxlen: 24
154.84.22.0/23 maxlen: 24
154.84.22.0/24 maxlen: 24
154.84.23.0/24 maxlen: 24
154.84.24.0/22 maxlen: 24
154.84.24.0/23 maxlen: 24
154.84.24.0/24 maxlen: 24
154.84.25.0/24 maxlen: 24
154.84.26.0/23 maxlen: 24
154.84.26.0/24 maxlen: 24
154.84.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 11:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126024 (0x1ec48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 5 11:53:25 2026 GMT
Not After : Oct 12 11:53:25 2026 GMT
Subject: CN=6ac38fb9-a93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fa:4f:48:01:31:28:cd:2d:2d:be:cf:6c:a5:
9c:d7:c5:bf:f4:d1:4d:4c:d5:b6:5b:5c:d0:e7:3b:
c7:d3:de:66:82:c9:c9:0f:9a:01:e7:53:58:45:6d:
d5:61:46:14:3b:36:21:0e:8d:81:ca:b8:4e:f7:6f:
f7:65:28:51:16:57:53:e8:f5:ce:4f:32:98:f8:d0:
a3:fa:ce:a2:03:65:35:52:92:fb:cd:28:cc:07:00:
be:ba:ad:1c:45:24:f2:54:c6:e3:e2:82:44:1a:56:
7d:2e:3e:fb:7e:15:09:fd:42:e2:d3:a0:a1:ed:f3:
80:2d:38:2c:b4:9f:2b:36:8f:9f:ac:eb:4a:56:36:
44:e0:7e:91:4a:31:47:01:97:0f:fd:f3:aa:fc:12:
89:84:13:2d:46:d9:bd:af:d8:2e:46:45:ca:51:00:
4d:e4:6c:6e:a5:c8:bb:81:81:e8:17:52:68:17:63:
74:d0:f5:76:30:b5:89:fe:a6:d6:39:35:53:20:29:
72:ce:50:ef:47:76:40:ca:4c:e0:44:0d:05:d3:28:
6a:8c:27:f4:f2:bb:e8:57:83:fa:61:e0:12:7e:31:
b3:ce:fe:ac:f5:c7:24:76:57:39:b5:f6:e2:f5:e2:
c5:5e:e1:a3:02:c6:80:c8:16:0a:d2:e5:39:1c:da:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:EC:F5:A9:AF:CF:D9:47:7D:EF:DF:57:D6:0F:6C:C7:C1:7A:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60FEC424C0B311F18E042FB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.14.0-154.84.27.255
Signature Algorithm: sha256WithRSAEncryption
40:fb:de:bb:49:0a:0c:f8:6c:0a:19:97:de:13:a3:12:a7:39:
9c:04:dc:03:b9:d8:30:13:cd:0f:1c:04:52:4b:19:d3:c0:17:
c7:2f:0e:60:8b:b6:c0:32:4b:62:df:a7:15:7b:9c:86:33:fd:
72:85:93:6b:2d:e2:d2:3a:23:95:50:14:f8:7a:5a:1a:af:46:
8e:e1:e6:ae:99:15:91:c4:af:ef:bd:db:e8:97:ff:e8:84:26:
19:49:65:10:4f:a6:38:f9:34:11:ce:0e:e2:ff:d3:a8:a6:f9:
41:ca:c6:eb:da:d1:e1:c0:c1:d2:f4:0f:ea:fc:92:cf:c2:f5:
71:8f:51:b1:9e:99:a8:31:cf:ff:25:66:15:90:89:69:82:da:
44:83:09:b1:f1:4c:5a:50:9c:9c:f2:c1:4b:d0:57:28:4c:43:
a2:65:38:13:53:a3:73:9a:af:3c:15:cf:f8:3f:33:db:b3:90:
eb:94:d2:80:13:dc:4b:c6:fd:e1:4c:ba:13:ba:ad:b3:28:9a:
29:fd:5a:74:8c:9c:18:3c:fe:0a:b2:32:f4:17:74:2d:1b:91:
9b:22:66:04:35:24:de:9b:60:06:53:f5:39:83:45:fc:d3:8c:
f4:2b:b2:8f:83:89:2c:e7:48:b1:24:2d:3e:8c:84:82:21:0f:
37:a4:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:48:30 2026 by rpki-client