Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69888132A44A11F1B6C359C8CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69888132A44A11F1B6C359C8CE1D38B0.roa
File: 69888132A44A11F1B6C359C8CE1D38B0.roa (raw, json)
Hash identifier: BNG4V+ZkRW4xhPgFkPVFiH1U2XvdKx5fUHIZPMuOdOI=
Subject key identifier: 53:BC:7E:33:18:5C:B8:69:F3:FB:DA:77:F3:7D:CF:6E:2B:A2:C7:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E422
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69888132A44A11F1B6C359C8CE1D38B0.roa
Signing time: Sun 30 Aug 2026 08:11:33 +0000
ROA not before: Sun 30 Aug 2026 08:11:29 +0000
ROA not after: Wed 07 Oct 2026 08:11:29 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.213.0/24 maxlen: 24
154.222.214.0/24 maxlen: 24
154.222.223.0/24 maxlen: 24
154.222.240.0/24 maxlen: 24
154.222.241.0/24 maxlen: 24
154.222.243.0/24 maxlen: 24
154.222.244.0/24 maxlen: 24
154.222.245.0/24 maxlen: 24
154.222.246.0/24 maxlen: 24
154.222.247.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 12:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123938 (0x1e422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 08:11:29 2026 GMT
Not After : Oct 7 08:11:29 2026 GMT
Subject: CN=6a93e5b5-67f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:52:da:d1:fa:8b:d8:5e:0e:ef:80:de:2d:
2f:2f:e6:a0:f5:61:a4:8d:c3:39:ca:0a:e9:ff:99:
28:44:67:b1:86:65:f3:3a:04:07:87:86:f7:c5:ca:
3d:05:ea:fa:3a:3b:3c:3a:01:06:ee:f3:1c:6d:59:
22:5c:77:2c:3f:89:92:7c:b9:b6:08:db:3a:39:60:
e7:fe:d1:6c:5d:83:86:cd:0c:f7:64:87:62:a4:23:
7c:7f:d5:38:5a:7f:90:1c:a2:05:1c:c7:4d:36:75:
9e:f4:a6:35:95:fb:e1:03:b4:6e:81:a1:a0:0b:2b:
6d:c3:43:91:93:26:c7:0a:80:8c:2c:5f:4b:f2:71:
d2:12:ac:d5:41:b9:ec:66:38:48:16:ef:2c:98:74:
4c:73:94:d7:e8:8a:c8:21:b7:9f:4d:25:b3:05:3e:
08:ee:a9:5f:f5:42:fe:2d:d7:e4:ff:27:74:c2:87:
14:3d:0c:e9:c9:69:13:77:5f:ba:f0:00:6a:19:0c:
d1:a5:3c:9e:c7:a0:b5:48:88:d4:b7:09:7f:4d:03:
e9:81:b2:3d:47:df:9b:46:69:a8:72:b4:c8:b7:b0:
5a:c8:34:90:02:5f:5b:05:bf:1a:69:4e:32:71:62:
f0:65:03:f3:bc:5e:24:c5:ac:5a:79:92:01:3a:62:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:7E:33:18:5C:B8:69:F3:FB:DA:77:F3:7D:CF:6E:2B:A2:C7:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69888132A44A11F1B6C359C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.213.0-154.222.214.255
154.222.223.0/24
154.222.240.0/23
154.222.243.0-154.222.251.255
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
75:32:de:b9:c7:c4:0c:40:2d:d1:82:99:f2:56:2f:70:85:63:
5f:a0:79:a7:5e:d2:a2:a2:56:c0:65:d7:90:b4:3a:10:00:8e:
52:78:b5:cb:d1:d7:0b:d3:1d:12:b7:ee:38:8e:53:4f:ef:54:
f1:32:3c:7c:bc:e2:ab:3a:a9:d6:87:8b:4f:9c:d8:0f:d9:db:
2f:29:f6:da:89:24:73:57:e4:5a:08:7f:52:ea:ce:d5:0a:3d:
74:5a:d5:18:49:f9:69:39:58:dd:59:e0:3f:0a:36:ca:1b:15:
e6:20:ef:2a:db:94:a4:fe:f5:6f:c4:7f:f6:ec:57:83:7b:6e:
44:93:72:7c:65:5b:ea:04:a6:85:a5:00:9e:62:6c:7a:f7:a8:
92:0a:82:be:1d:d6:44:53:fb:bd:77:70:33:70:60:ef:26:de:
1c:3a:be:d9:ea:0b:3c:e3:8a:3a:73:f3:4e:f9:01:b9:60:ea:
a5:1a:5a:43:e5:09:af:30:ee:fd:7b:90:a4:70:38:de:4d:f4:
25:18:99:19:8f:ed:6a:3b:f4:e3:87:db:84:62:a9:85:46:e8:
c7:a1:c3:0b:ee:ec:e6:58:a3:db:c3:3c:f1:ae:e9:76:84:2e:
98:aa:96:47:d1:ac:bc:2b:95:83:e9:3f:a5:35:41:86:df:2a:
95:be:58:f5
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIDAeQiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODMwMDgxMTI5WhcNMjYxMDA3MDgxMTI5WjAYMRYw
FAYDVQQDEw02YTkzZTViNS02N2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZtS2tH6i9heDu+A3i0vL+ag9WGkjcM5ygrp/5koRGexhmXzOgQHh4b3
xco9Ber6Ojs8OgEG7vMcbVkiXHcsP4mSfLm2CNs6OWDn/tFsXYOGzQz3ZIdipCN8
f9U4Wn+QHKIFHMdNNnWe9KY1lfvhA7RugaGgCyttw0ORkybHCoCMLF9L8nHSEqzV
QbnsZjhIFu8smHRMc5TX6IrIIbefTSWzBT4I7qlf9UL+Ldfk/yd0wocUPQzpyWkT
d1+68ABqGQzRpTyex6C1SIjUtwl/TQPpgbI9R9+bRmmocrTIt7BayDSQAl9bBb8a
aU4ycWLwZQPzvF4kxaxaeZIBOmLEGwIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFFO8
fjMYXLhp8/vad/N9z24rosfgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OTg4ODEzMkE0NEExMUYxQjZDMzU5QzhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFoGCCsGAQUFBwEHAQH/BEswSTBHBAIAATBBAwQBmtUGMAwDBACa3tUDBACa
3tYDBACa3t8DBAGa3vAwDAMEAJre8wMEApre+DALAwQAmt79AwMAmt4DBACa31Aw
DQYJKoZIhvcNAQELBQADggEBAHUy3rnHxAxALdGCmfJWL3CFY1+geade0qKiVsBl
15C0OhAAjlJ4tcvR1wvTHRK37jiOU0/vVPEyPHy84qs6qdaHi0+c2A/Z2y8p9tqJ
JHNX5FoIf1LqztUKPXRa1RhJ+Wk5WN1Z4D8KNsobFeYg7yrblKT+9W/Ef/bsV4N7
bkSTcnxlW+oEpoWlAJ5ibHr3qJIKgr4d1kRT+713cDNwYO8m3hw6vtnqCzzjijpz
8075Ablg6qUaWkPlCa8w7v17kKRwON5N9CUYmRmP7Wo79OOH24RiqYVG6Mehwwvu
7OZYo9vDPPGu6XaELpiqlkfRrLwrlYPpP6U1QYbfKpW+WPU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:39 2026 by rpki-client