Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F7B4DCA43C11F18BD6ABF6CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F7B4DCA43C11F18BD6ABF6CE1D38B0.roa
File: 84F7B4DCA43C11F18BD6ABF6CE1D38B0.roa (raw, json)
Hash identifier: hWbiRGD2fzEeOMDWGh8E6AYqcVP86UcSaMp+s5kqORg=
Subject key identifier: FF:6E:C5:E1:09:BA:54:E6:D5:E0:47:3D:15:EC:2F:B9:0C:25:75:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E406
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F7B4DCA43C11F18BD6ABF6CE1D38B0.roa
Signing time: Sun 30 Aug 2026 06:32:06 +0000
ROA not before: Sun 30 Aug 2026 06:32:02 +0000
ROA not after: Wed 07 Oct 2026 06:32:02 +0000
asID: 44559
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 12:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123910 (0x1e406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 06:32:02 2026 GMT
Not After : Oct 7 06:32:02 2026 GMT
Subject: CN=6a93ce66-bbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:4d:1c:f2:50:75:09:c0:6b:06:73:d9:a5:
94:88:06:23:6d:8f:df:12:42:d1:b5:7f:1d:88:39:
9a:fe:12:d2:28:4d:81:82:93:7d:d1:fa:8c:9b:2a:
93:f5:93:5e:c6:1d:be:73:bf:e6:55:ac:62:1a:4f:
d0:31:83:32:d9:fe:f7:50:ff:7a:2c:08:1b:be:35:
67:b7:ce:e9:80:bf:23:55:6d:0f:29:e6:f5:28:c4:
34:fc:36:25:81:ce:43:9e:89:96:dd:e0:b8:6b:f8:
a7:0c:69:92:45:1e:c8:e5:91:22:b0:e6:01:de:01:
54:b7:c3:ca:08:55:e5:12:21:e7:8e:f4:24:8c:46:
c6:cd:5f:f1:94:b5:6f:b7:59:de:fc:ca:5f:5b:5a:
10:e5:4b:69:33:67:82:3f:f4:13:49:bd:89:9c:10:
17:05:a3:08:95:fb:5e:4e:e7:77:6b:28:3f:5f:4a:
83:03:c8:71:46:16:b9:bf:7b:a9:1b:b9:9e:7e:2e:
de:db:1d:52:7a:99:6d:4a:71:24:04:45:03:4e:89:
eb:ce:c2:f6:24:ae:92:87:8c:7a:28:5d:6f:9f:21:
b2:67:e9:65:00:f1:ac:3d:ec:51:c6:d6:22:ee:9a:
aa:48:78:d4:d6:21:ad:68:eb:0c:0f:30:a4:5f:50:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:C5:E1:09:BA:54:E6:D5:E0:47:3D:15:EC:2F:B9:0C:25:75:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F7B4DCA43C11F18BD6ABF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0/20
154.211.9.0-154.211.11.255
154.211.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:70:6b:96:bc:bd:92:19:c0:b4:87:1c:04:c4:18:c9:05:40:
89:4c:e2:cd:e2:0e:06:33:0d:43:67:44:1d:42:9a:63:b5:ed:
b2:11:15:dd:47:42:2e:da:f6:9b:b8:64:1c:bf:2d:ee:6a:2b:
af:fd:89:aa:b8:83:b0:a9:89:e6:af:d7:4f:98:ec:7a:1c:78:
32:bd:80:7b:c2:5b:13:62:9c:c2:92:05:00:cf:ba:84:81:5f:
70:9b:9a:54:91:76:49:8e:ce:13:4b:16:5f:16:5f:8b:09:b9:
64:81:a2:b2:35:26:79:8c:ea:53:2a:e9:76:90:62:ec:c3:fd:
7c:80:fe:08:41:24:b1:bb:fe:e1:d6:f5:05:5f:bf:6a:2d:7b:
17:c0:c4:43:75:37:2a:13:2d:4f:41:e2:0e:b4:d4:4a:b1:0c:
46:6a:78:6f:9e:a8:e5:9a:d8:35:80:06:f6:d2:b9:4c:e8:ae:
c3:6c:9c:e5:06:d3:78:54:40:75:44:75:b2:45:a1:ef:fc:3b:
21:30:75:c5:d9:6f:b7:eb:12:1f:5b:92:94:74:2d:25:f5:21:
54:b3:8d:4b:de:1e:f2:36:c0:4b:a6:4c:6c:44:1f:e6:f5:0d:
68:d0:e4:24:7b:16:10:3b:55:1c:8b:a4:cc:7a:3a:89:25:8b:
5c:2f:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:04 2026 by rpki-client