Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/876603F4A44111F1BE9DE812CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/876603F4A44111F1BE9DE812CF1D38B0.roa
File: 876603F4A44111F1BE9DE812CF1D38B0.roa (raw, json)
Hash identifier: yGvS7iwNz1kb/ZpsozJmivGFYrbOo5VX2Sy751YmTac=
Subject key identifier: 6A:D7:C0:33:EF:E2:58:E5:5C:38:D0:9C:18:DE:F9:6D:76:89:E0:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E410
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/876603F4A44111F1BE9DE812CF1D38B0.roa
Signing time: Sun 30 Aug 2026 07:07:58 +0000
ROA not before: Sun 30 Aug 2026 07:07:52 +0000
ROA not after: Wed 07 Oct 2026 07:07:52 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.16.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
154.219.246.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Sep 2026 00:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123920 (0x1e410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 07:07:52 2026 GMT
Not After : Oct 7 07:07:52 2026 GMT
Subject: CN=6a93d6ce-087b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:3d:ec:95:52:b0:13:7d:55:9b:d5:2e:88:
59:a7:91:38:46:76:40:42:0f:cd:56:34:f8:a6:c2:
a4:03:d4:5a:ba:ed:fa:29:34:80:f4:1f:56:b3:28:
9b:05:41:6e:af:64:48:97:8f:9a:95:7f:ef:ae:04:
20:27:46:ce:a3:c8:ce:c7:1a:d4:f8:e6:66:f9:3a:
69:79:aa:d5:d2:bc:61:ae:7d:db:f2:71:d1:2e:90:
69:4c:4f:0c:16:0c:e7:4a:2d:f4:dc:59:b4:36:c0:
4a:28:63:33:eb:cd:3e:c5:73:36:90:55:1e:ad:b7:
32:0d:85:69:a1:dc:4e:cc:89:60:c6:b9:de:31:7e:
fd:b9:72:ec:5e:f2:3b:06:f1:ae:3b:94:eb:9d:11:
fa:cb:ba:f4:2b:6f:b1:91:71:02:10:40:cd:22:ac:
41:fe:59:80:21:4a:39:12:28:09:86:a4:f7:63:f3:
43:ab:2a:7d:fc:ce:77:aa:6f:d7:91:0e:83:cc:e5:
eb:f9:55:8e:21:37:62:33:fe:54:ce:f0:1e:ed:a8:
29:b0:1f:90:4c:44:67:ee:a8:0c:10:1e:f6:e0:eb:
6b:c5:01:17:0b:b3:f8:87:3a:80:7f:35:f4:de:24:
74:f5:94:b2:29:f9:7b:45:0d:ee:fe:95:6a:32:58:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:C0:33:EF:E2:58:E5:5C:38:D0:9C:18:DE:F9:6D:76:89:E0:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/876603F4A44111F1BE9DE812CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
154.219.1.0/24
154.219.4.0/24
154.219.16.0/24
154.219.24.0/24
154.219.28.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0-154.219.247.255
154.219.250.0-154.219.255.255
Signature Algorithm: sha256WithRSAEncryption
7a:83:ce:49:cc:11:c4:4d:40:bd:92:41:7a:22:e2:3e:28:f4:
29:b1:7b:2d:4b:a9:c0:dd:4a:be:ef:4a:81:5b:6d:d8:ed:3a:
87:4e:ee:79:8a:e4:0f:ce:d9:45:e2:14:73:c2:5b:86:34:0e:
c4:30:e7:54:a3:a1:d1:b9:d3:53:7f:93:db:e7:32:a8:49:08:
de:ae:68:af:3b:b7:f7:d7:2b:8b:de:9a:ac:dd:39:65:40:d0:
4c:39:bb:2b:d1:cc:87:e9:07:ca:28:2f:c4:77:15:cf:60:03:
6f:2d:49:19:21:52:89:13:e3:05:5d:89:17:0d:6e:bd:72:0e:
74:0e:83:7a:60:2a:25:4f:1b:43:64:e1:70:00:32:67:0b:54:
1e:17:cc:a3:97:c8:a7:37:ac:63:3a:98:bc:30:d7:6a:27:d7:
52:79:75:25:5a:41:ec:28:9c:26:59:b6:4d:c7:c3:e6:11:c1:
97:88:92:20:a3:54:cb:ba:0b:98:2a:4d:24:4d:bf:c5:48:de:
aa:f1:76:24:c3:16:e5:a0:6a:ad:e2:ed:2e:2d:e3:36:32:44:
59:94:17:db:ec:58:e1:c6:67:b3:a1:16:bc:43:bd:11:67:62:
ad:88:2a:0c:4a:db:a5:0b:9d:e7:a1:91:32:42:22:02:7d:88:
00:4c:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:19 2026 by rpki-client