Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631377FACFDB11F1A12DDEDFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631377FACFDB11F1A12DDEDFCE1D38B0.roa
File: 631377FACFDB11F1A12DDEDFCE1D38B0.roa (raw, json)
Hash identifier: klpsfdJJzn1a4PgOlUo6aqTpA9SBYs9psrSE7DvR1hM=
Subject key identifier: D6:77:97:CA:58:4C:15:F2:7E:62:DC:D3:60:5B:9A:13:30:96:35:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EFEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631377FACFDB11F1A12DDEDFCE1D38B0.roa
Signing time: Sat 24 Oct 2026 18:47:40 +0000
ROA not before: Sat 24 Oct 2026 18:47:34 +0000
ROA not after: Tue 08 Dec 2026 18:47:34 +0000
asID: 63099
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Nov 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126956 (0x1efec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 18:47:34 2026 GMT
Not After : Dec 8 18:47:34 2026 GMT
Subject: CN=6adcfd4b-1c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:23:a8:f8:10:08:6d:76:b6:7d:b6:ce:8d:
e7:5f:6e:e4:e8:00:ae:c9:b5:a6:a2:77:b8:e4:79:
97:68:8d:d5:c6:8b:95:19:4b:65:2c:c5:c2:7f:45:
54:1a:a0:21:6e:63:cf:4b:ad:d3:30:0e:2e:b2:7b:
c6:76:75:15:93:17:91:d0:88:e5:8e:42:fa:71:7f:
e9:80:e6:67:ef:1b:90:5f:bb:7e:71:ba:7d:43:21:
7d:ea:3b:d3:d9:94:cb:ec:81:72:f7:7d:2a:e0:5f:
77:14:09:5b:39:09:96:5c:a0:f5:1b:0b:9b:77:ef:
36:66:fb:00:a9:51:da:86:d8:51:bc:37:cd:41:75:
e8:44:6f:0b:7d:f9:11:6d:ca:e3:2d:31:5c:ef:f8:
66:7a:9f:5a:dd:11:57:18:e5:45:c8:fd:26:e6:fc:
f7:c7:33:4d:b5:b0:bb:6c:28:33:59:01:09:55:56:
6f:8c:03:8e:50:1c:31:5a:6a:5f:fc:24:94:67:0d:
df:05:f6:6c:f4:62:c3:b7:1f:63:e3:03:99:ae:05:
a8:9a:a2:19:88:44:99:d1:63:d1:e2:fd:4f:ef:4d:
99:e5:4b:4e:eb:56:25:56:76:8c:26:7a:71:bc:0f:
5e:82:6b:4f:70:ba:75:a2:ba:ba:ed:f3:1f:0b:aa:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:97:CA:58:4C:15:F2:7E:62:DC:D3:60:5B:9A:13:30:96:35:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631377FACFDB11F1A12DDEDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
01:21:59:8f:38:e0:0e:85:05:8b:60:74:ae:51:85:77:02:f9:
db:10:4f:04:48:de:ef:f6:e0:c7:72:8f:65:b7:e4:6a:87:7e:
c0:a0:b9:9b:1f:ec:9c:17:38:2a:ca:7b:19:5d:c1:ae:3f:81:
a2:9d:12:37:b1:ae:a1:67:c6:82:25:0e:b6:86:22:16:e7:5e:
d9:7f:54:7e:67:5a:97:fc:d1:a7:69:e1:0d:18:c6:57:66:a8:
10:ca:e8:fc:9d:fe:8a:71:4e:66:9f:99:8a:40:4a:b4:d7:8d:
ca:7b:99:20:9e:08:c6:7f:86:cb:32:77:90:27:35:6b:93:c2:
50:ab:d9:c3:1c:85:7e:7c:2a:00:43:09:9d:f7:bc:00:e0:7e:
8c:f5:fe:34:9d:3c:2c:c7:5f:ac:7e:13:4d:63:d0:0c:4a:cb:
ca:f0:8b:a6:ae:1b:52:42:0f:2f:4e:e2:8a:1e:ef:bf:7f:bc:
82:2c:36:c5:b0:34:85:89:62:4b:9d:d7:0d:ab:4c:1d:c6:52:
74:50:eb:cd:d2:1a:03:8c:52:0c:5c:43:23:7a:8f:06:93:0a:
86:b0:4c:1b:aa:7c:b1:c0:dc:aa:61:69:a8:70:67:d9:a3:cb:
ca:c1:b0:66:ee:05:85:d1:51:49:33:2f:e2:ac:2f:27:05:ad:
25:ef:a4:47
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIDAe/sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDI0MTg0NzM0WhcNMjYxMjA4MTg0NzM0WjAYMRYw
FAYDVQQDEw02YWRjZmQ0Yi0xYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvMQjqPgQCG12tn22zo3nX27k6ACuybWmone45HmXaI3VxouVGUtlLMXC
f0VUGqAhbmPPS63TMA4usnvGdnUVkxeR0IjljkL6cX/pgOZn7xuQX7t+cbp9QyF9
6jvT2ZTL7IFy930q4F93FAlbOQmWXKD1Gwubd+82ZvsAqVHahthRvDfNQXXoRG8L
ffkRbcrjLTFc7/hmep9a3RFXGOVFyP0m5vz3xzNNtbC7bCgzWQEJVVZvjAOOUBwx
Wmpf/CSUZw3fBfZs9GLDtx9j4wOZrgWomqIZiESZ0WPR4v1P702Z5UtO61YlVnaM
JnpxvA9egmtPcLp1orq67fMfC6o+OwIDAQABo4IC/zCCAvswHQYDVR0OBBYEFNZ3
l8pYTBXyfmLc02BbmhMwljVvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MzEzNzdGQUNGREIxMUYxQTEyRERFREZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAmsECAwQAmsEjMAwDBACa
xLMDBACaxLQDBACayBoDBACayCswDAMEAJrIMwMEAJrINAMEAJrIgwMEAJrIjAME
AJrIjgMEAJrImjAMAwQCmsicAwQAmsiiAwQAmsi/MA0GCSqGSIb3DQEBCwUAA4IB
AQABIVmPOOAOhQWLYHSuUYV3AvnbEE8ESN7v9uDHco9lt+Rqh37AoLmbH+ycFzgq
ynsZXcGuP4GinRI3sa6hZ8aCJQ62hiIW517Zf1R+Z1qX/NGnaeENGMZXZqgQyuj8
nf6KcU5mn5mKQEq0143Ke5kgngjGf4bLMneQJzVrk8JQq9nDHIV+fCoAQwmd97wA
4H6M9f40nTwsx1+sfhNNY9AMSsvK8IumrhtSQg8vTuKKHu+/f7yCLDbFsDSFiWJL
ndcNq0wdxlJ0UOvN0hoDjFIMXEMjeo8GkwqGsEwbqnyxwNyqYWmocGfZo8vKwbBm
7gWF0VFJMy/irC8nBa0l76RH
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:10 2026 by rpki-client