Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8755CE92A44811F1A611F1BCCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8755CE92A44811F1A611F1BCCE1D38B0.roa
File: 8755CE92A44811F1A611F1BCCE1D38B0.roa (raw, json)
Hash identifier: S6MTy50XmASZRzT3+1IChLb1jgK1j58BOGAorZnG590=
Subject key identifier: 51:87:B3:CC:C2:80:91:22:47:6C:41:F3:CE:14:88:36:1E:0C:71:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E41E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8755CE92A44811F1A611F1BCCE1D38B0.roa
Signing time: Sun 30 Aug 2026 07:58:04 +0000
ROA not before: Sun 30 Aug 2026 07:58:00 +0000
ROA not after: Wed 07 Oct 2026 07:58:00 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 10:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123934 (0x1e41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 07:58:00 2026 GMT
Not After : Oct 7 07:58:00 2026 GMT
Subject: CN=6a93e28c-af9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:3b:4c:0f:da:47:b5:f5:09:21:b1:69:27:
00:da:10:4d:9b:56:1c:57:b7:bf:2e:ef:72:89:34:
a4:be:8e:0c:c1:8b:64:41:0f:a8:00:f1:a1:73:15:
39:fe:9a:71:62:ff:11:fa:c1:23:a8:77:01:08:9b:
63:27:a3:7b:8d:93:14:e6:06:81:e1:25:d1:73:46:
28:af:6c:18:97:42:8c:57:56:ed:87:d1:af:fd:dd:
a0:a5:bb:d4:32:62:64:76:bc:cf:93:d0:9b:47:dd:
45:54:ff:eb:bd:aa:a1:3f:c6:a1:56:b6:28:fc:8b:
76:fd:98:04:af:01:89:30:e1:65:d5:42:23:72:be:
5d:ff:19:f7:ba:10:7f:aa:c8:9e:be:d8:81:e1:40:
2a:b0:dc:de:a8:ee:c7:34:fd:51:20:51:15:95:72:
9a:fb:6f:77:f7:1a:b3:9e:8c:f8:22:4d:f7:59:e0:
be:ec:97:e1:19:b4:94:b3:75:81:82:11:d4:f1:b9:
b8:04:62:6a:3b:8f:2e:ec:2c:03:e0:58:4a:77:4f:
77:02:ba:e6:fa:9b:40:cf:3f:ed:e3:ea:df:4c:16:
45:73:78:8d:46:68:26:f7:30:3d:23:43:60:9e:93:
29:19:9b:a4:4a:d4:a7:b9:60:23:3f:5c:2c:d3:87:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:B3:CC:C2:80:91:22:47:6C:41:F3:CE:14:88:36:1E:0C:71:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8755CE92A44811F1A611F1BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0-154.209.220.255
154.211.17.0-154.211.18.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2e:fe:e8:9a:ff:5c:23:41:eb:39:c6:39:67:ed:45:e5:62:
58:c7:39:09:2d:5c:74:33:7b:c5:d4:6c:9f:ab:e5:5b:7c:da:
db:75:af:61:5b:15:88:85:ec:6e:cb:bd:ea:69:f0:0e:44:ca:
6f:db:fa:9d:aa:fc:f5:29:65:88:f5:92:a2:7c:f1:74:69:92:
68:c9:21:9e:f4:97:b7:14:89:d0:3a:31:25:42:ed:9c:25:5c:
1d:6d:c5:54:80:ca:1b:7f:6c:88:0b:a8:24:ee:dd:74:6c:86:
d9:61:0d:1f:bb:ee:3f:9e:cf:17:c1:28:7c:a0:c5:46:09:1d:
ca:bd:33:ee:1e:72:83:af:07:27:e4:c6:28:30:31:54:09:4f:
c0:be:80:a7:19:d3:ef:1b:7f:91:99:40:b2:22:75:cf:6f:0c:
46:23:6c:ff:66:dd:e9:a1:34:b1:8f:ad:2a:6f:3c:6e:6f:95:
b2:12:06:6c:d2:c5:5d:55:d1:1d:e9:df:db:03:ca:b0:e9:e4:
20:a8:8c:de:4e:c3:56:46:4f:99:4b:8d:39:d0:8d:f6:ca:a0:
e9:ec:9d:92:b5:77:2d:70:d8:f5:37:a4:80:e0:ac:b9:49:05:
98:d8:49:06:60:58:d2:05:a0:3c:09:be:e6:6c:6b:bf:eb:80:
35:0f:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:11:51 2026 by rpki-client