Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FAB6A10BB7011F1BBB598D3CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FAB6A10BB7011F1BBB598D3CE1D38B0.roa
File: 6FAB6A10BB7011F1BBB598D3CE1D38B0.roa (raw, json)
Hash identifier: nAiMhljSs8nDZQzciUHjnKeW9oUAZbJiskQf1Q/DH9Y=
Subject key identifier: 40:78:A4:E2:8B:CC:28:75:1C:4F:D9:BF:2E:42:19:C1:57:A0:C8:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FAB6A10BB7011F1BBB598D3CE1D38B0.roa
Signing time: Mon 28 Sep 2026 19:11:41 +0000
ROA not before: Mon 28 Sep 2026 19:11:37 +0000
ROA not after: Sat 05 Jan 2030 19:11:37 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
154.206.18.0/24 maxlen: 24
154.206.21.0/24 maxlen: 24
154.206.24.0/24 maxlen: 24
154.206.25.0/24 maxlen: 24
154.206.26.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.206.30.0/24 maxlen: 24
154.206.31.0/24 maxlen: 24
154.210.224.0/24 maxlen: 24
154.210.225.0/24 maxlen: 24
154.210.228.0/24 maxlen: 24
154.210.229.0/24 maxlen: 24
154.210.230.0/24 maxlen: 24
154.210.231.0/24 maxlen: 24
154.210.232.0/24 maxlen: 24
154.210.233.0/24 maxlen: 24
154.210.234.0/24 maxlen: 24
154.210.235.0/24 maxlen: 24
154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125744 (0x1eb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 19:11:37 2026 GMT
Not After : Jan 5 19:11:37 2030 GMT
Subject: CN=6ababbed-b364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:e8:8f:21:18:1c:b9:82:0e:69:67:01:1b:
80:a8:6e:aa:0a:ae:e0:18:fc:c8:da:31:36:eb:e8:
93:59:91:e9:c5:15:fa:e9:2b:b8:3d:50:75:da:d4:
cb:55:13:b3:ef:ec:07:f4:6f:a7:43:0c:81:d2:59:
74:0b:6d:bb:68:ac:71:ed:c0:38:3f:fa:93:4f:f8:
f5:13:b5:f5:c5:cb:d5:5b:5a:61:6c:0f:b4:d2:32:
36:8e:b8:b1:2e:ee:6b:e0:ba:d4:36:ff:37:30:3d:
fe:d0:e8:30:45:d2:09:0d:dd:29:48:b7:84:06:9f:
34:20:bd:4a:29:a7:4a:6e:7f:7f:10:d5:32:88:81:
9c:c3:26:68:4b:4a:1b:d1:07:7e:69:cd:40:a7:e5:
71:41:66:8d:b7:e1:1b:90:3a:4c:61:45:40:10:6d:
12:71:56:f6:18:78:fb:b3:40:11:dd:3a:20:73:b2:
66:1e:4f:8f:fd:6c:c8:5a:7d:19:fb:5e:ee:9c:e9:
97:1c:db:b2:b2:63:bf:9e:ba:d3:32:f2:a0:52:a2:
bf:19:77:37:b2:18:74:7b:b6:53:3a:05:c4:1d:8a:
72:9e:6e:26:72:db:12:94:ec:9c:ac:14:d0:b9:7a:
f0:76:1f:34:83:27:ea:3e:6b:03:5b:e9:6c:f0:9b:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:A4:E2:8B:CC:28:75:1C:4F:D9:BF:2E:42:19:C1:57:A0:C8:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FAB6A10BB7011F1BBB598D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0-154.206.18.255
154.206.21.0/24
154.206.24.0-154.206.26.255
154.206.29.0-154.206.31.255
154.210.224.0/23
154.210.228.0-154.210.236.255
Signature Algorithm: sha256WithRSAEncryption
ac:cc:d1:69:f6:fd:12:c0:0d:a7:35:f7:53:34:ed:7e:85:f3:
61:b8:de:64:31:d7:c2:70:82:68:ad:cf:63:f8:c0:ab:21:65:
7b:48:7a:98:0c:cb:08:29:3f:3f:0c:8c:51:5d:e3:e2:19:1f:
d2:d8:b7:24:4f:b3:66:6a:25:80:68:51:1a:de:25:54:72:df:
4f:3f:9c:79:c1:3c:09:13:ef:ca:8d:7a:4c:7b:4b:e1:61:68:
23:56:13:0a:18:05:91:e1:e9:76:f6:0b:f8:f7:54:4b:6d:57:
bd:37:c0:e7:26:26:0a:3b:bd:a0:4c:46:23:77:1e:cc:63:f2:
26:04:7f:ae:76:06:d9:9c:3e:a0:86:d1:98:d1:c0:84:8f:2f:
cf:a3:15:20:ef:76:3e:92:47:3f:2c:6f:a7:a1:25:33:88:c6:
7f:2a:07:5e:c4:3e:ac:f1:9d:13:9f:dd:0b:cc:18:11:ed:37:
58:b8:99:e9:71:23:40:44:fb:71:4e:24:75:d3:b0:d2:80:3b:
bd:c1:a9:3a:a0:76:13:64:bd:58:22:a1:e5:f8:a1:fe:d2:c6:
5e:62:c3:77:fa:2f:57:ec:2f:55:44:bf:51:bc:b3:d4:d0:4d:
dc:6b:d9:41:b2:98:3e:59:d8:30:e1:71:1e:3d:f8:e4:c1:1c:
e6:1a:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:30:29 2026 by rpki-client