Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/743D5400C14F11F195AF4BB4CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/743D5400C14F11F195AF4BB4CE1D38B0.roa
File: 743D5400C14F11F195AF4BB4CE1D38B0.roa (raw, json)
Hash identifier: NZoNf08cl6o4g3ErUdFtOrOghShtKiP0IyKQ4gCxbKc=
Subject key identifier: C3:84:45:74:07:32:FA:12:EE:B7:C3:E3:05:10:33:89:24:FF:DF:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EC57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/743D5400C14F11F195AF4BB4CE1D38B0.roa
Signing time: Tue 06 Oct 2026 06:30:43 +0000
ROA not before: Tue 06 Oct 2026 06:30:38 +0000
ROA not after: Tue 13 Oct 2026 06:30:38 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126039 (0x1ec57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 06:30:38 2026 GMT
Not After : Oct 13 06:30:38 2026 GMT
Subject: CN=6ac49592-8e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:e7:48:1c:57:e6:0a:ef:cf:c3:9c:b6:59:
1f:2d:f4:ad:0d:e6:33:63:01:c6:35:7e:d3:8e:ff:
56:cd:19:ad:b6:cf:60:19:50:1c:94:b8:75:e5:51:
60:ee:6e:d0:0c:e6:12:6e:c7:f6:9a:79:69:84:21:
fb:a4:25:2b:31:14:8f:6d:45:6a:f6:f4:6a:dd:6f:
29:78:a9:86:7c:81:86:66:24:7b:02:58:be:87:1d:
1c:48:76:9b:33:f8:93:3d:78:5e:f6:33:33:38:25:
3a:eb:ca:47:2b:5e:fe:08:86:52:f0:42:3a:cd:bf:
18:1f:da:1a:4a:be:90:11:70:bf:48:5f:07:c7:b6:
1b:32:74:27:ba:94:24:81:be:4a:c9:ca:a8:de:b9:
0a:d8:a6:d2:73:7e:f6:f4:5a:b7:63:9e:c2:44:30:
e1:8c:8a:c6:bf:ed:8f:a9:b9:5f:5c:75:76:51:b5:
9f:08:0a:7f:b6:e8:f5:b3:7c:1f:b7:e1:56:62:27:
6b:26:71:48:01:89:11:f3:64:c9:9b:b1:16:98:b6:
12:a5:8a:3b:81:bc:a3:cf:a9:df:c3:fc:74:fc:3e:
54:0a:f1:d8:de:08:7e:4b:bf:bd:d5:70:1d:68:34:
8d:1b:58:1e:ac:03:5f:74:d9:ee:ff:7d:23:f2:32:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:45:74:07:32:FA:12:EE:B7:C3:E3:05:10:33:89:24:FF:DF:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/743D5400C14F11F195AF4BB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
78:fc:0f:03:9d:c6:a4:e2:34:85:87:20:16:df:60:35:70:8a:
5a:a3:00:b3:59:3d:26:6a:05:0f:d5:b9:23:72:2c:9b:1a:15:
5e:6b:6b:fe:f7:68:3a:b1:7a:64:7e:47:e9:64:02:5f:c0:1f:
c6:48:e2:2c:e7:4b:89:91:df:e3:8f:fc:e6:97:13:c6:c5:36:
7b:c6:54:c5:c5:ea:7f:98:db:73:21:03:1d:22:23:34:0e:83:
ca:42:b6:7d:4f:dc:d9:8d:34:2c:6e:6e:78:52:58:d1:f8:3b:
4c:12:30:89:50:ea:f3:ff:3f:a8:80:ca:2a:46:0a:ed:c7:17:
00:a9:a5:5e:fe:39:da:87:4e:df:db:1c:30:15:56:9e:cb:5d:
e0:68:5c:e5:53:38:79:a0:c1:70:3f:a5:f2:5d:2e:cf:76:cc:
26:51:41:64:00:65:af:9d:d6:57:4e:02:e8:cc:4c:d0:aa:a5:
75:23:23:07:8a:ff:54:94:fd:64:dc:8d:ca:41:1a:cc:b3:f6:
67:34:90:d7:71:2d:6f:3c:31:cc:ef:b2:d0:13:f2:cc:9b:00:
2e:89:2c:32:56:0f:e9:2f:e8:23:e3:7e:c2:80:7d:57:e7:cf:
ac:18:4f:ed:42:02:e3:c1:e0:e9:f1:5a:9f:8b:d7:05:aa:df:
03:7f:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:13:47 2026 by rpki-client