Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/967F74F0A43D11F197A4CEFACE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/967F74F0A43D11F197A4CEFACE1D38B0.roa
File: 967F74F0A43D11F197A4CEFACE1D38B0.roa (raw, json)
Hash identifier: Ed7jM4zCABerhBXDM7uYZdvUUDDfV83qgLK3Z8ZOHJI=
Subject key identifier: D3:57:CC:79:C2:C7:64:9A:04:80:82:46:9D:24:1F:95:D0:DE:84:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E408
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/967F74F0A43D11F197A4CEFACE1D38B0.roa
Signing time: Sun 30 Aug 2026 06:39:45 +0000
ROA not before: Sun 30 Aug 2026 06:39:41 +0000
ROA not after: Wed 07 Oct 2026 06:39:41 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 12:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123912 (0x1e408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 06:39:41 2026 GMT
Not After : Oct 7 06:39:41 2026 GMT
Subject: CN=6a93d031-d45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:65:06:1c:76:e3:25:e8:10:df:61:be:7f:
07:25:85:b4:87:bc:fa:a2:4b:47:63:58:72:97:c6:
cb:0a:03:74:d8:e9:9a:e3:1c:31:68:15:b2:64:f6:
ad:41:e9:1d:8d:06:2d:4b:9f:37:e4:56:03:4a:f0:
51:9a:41:06:5f:61:a5:cb:e3:5d:e1:8d:a8:2f:5c:
67:32:f6:0f:59:43:92:3e:03:4c:f8:b8:e0:d9:2a:
b9:08:a3:fb:1e:8a:b1:84:00:40:de:34:77:52:e2:
1e:aa:03:0c:15:4b:6a:c5:56:73:9b:24:74:7b:30:
10:b3:5c:66:6e:ae:da:5c:5c:bd:60:0f:78:07:9b:
cb:1c:9a:8e:45:5a:56:01:a2:9f:a3:f5:19:a2:1b:
6a:52:b7:fd:83:fa:8a:c3:14:7f:3f:99:4b:d7:d3:
ff:be:12:c9:20:b8:d2:69:c6:36:27:4e:52:dd:f4:
72:f5:d9:99:16:e8:78:37:69:c8:55:70:a8:71:c0:
69:51:af:aa:a9:cd:32:c4:aa:c7:9d:ea:27:21:02:
b2:d2:c1:fa:18:74:54:11:30:60:59:59:24:6c:30:
b3:8b:1e:37:7e:f2:e1:57:22:37:33:58:f1:b2:5e:
19:4d:e4:64:d0:94:2f:c9:08:b4:f6:b2:a5:92:2b:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:CC:79:C2:C7:64:9A:04:80:82:46:9D:24:1F:95:D0:DE:84:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/967F74F0A43D11F197A4CEFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
154.209.205.0/24
154.211.17.0-154.211.19.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
af:73:27:fc:ea:90:f3:93:fc:d1:24:0d:5f:fe:8f:34:3e:a7:
25:de:a3:48:42:68:c5:4d:06:63:02:ec:12:8a:c4:ff:01:75:
8e:30:5e:24:d0:ff:64:9f:d5:f4:f4:90:52:50:7f:14:70:63:
c3:e9:f5:c7:41:65:09:7a:af:13:24:aa:47:34:1b:6a:1e:75:
05:ad:e1:32:6c:13:d7:46:e8:80:93:61:10:6e:08:12:f9:72:
95:0c:8c:7d:9f:75:78:91:e0:44:6d:07:15:45:9e:ca:10:41:
bc:3f:3e:e3:84:1b:a4:ee:6d:7b:2f:f3:3d:54:58:11:23:55:
fe:d5:b2:bf:c8:26:64:01:6a:a3:15:cc:e7:e8:15:67:fd:84:
1b:e5:90:68:ad:12:d4:3a:55:cc:27:be:84:06:65:4a:f6:fe:
9e:6a:86:b0:4d:9e:4f:dd:d9:79:d2:95:b5:8e:fc:7c:d2:0e:
12:cd:7a:a7:78:01:49:5c:2c:87:b3:0f:0a:aa:32:cb:de:8c:
88:34:86:3f:00:24:23:35:0c:45:be:24:0c:52:4e:92:f7:c8:
70:09:60:7d:2e:dd:10:67:dd:78:97:fd:5b:89:f9:b7:4d:53:
f2:20:ed:b4:d5:d7:2a:1b:29:e7:2c:92:d2:cf:0d:94:dd:5d:
e0:4a:a8:23
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIDAeQIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODMwMDYzOTQxWhcNMjYxMDA3MDYzOTQxWjAYMRYw
FAYDVQQDEw02YTkzZDAzMS1kNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAySllBhx24yXoEN9hvn8HJYW0h7z6oktHY1hyl8bLCgN02Oma4xwxaBWy
ZPatQekdjQYtS5835FYDSvBRmkEGX2Gly+Nd4Y2oL1xnMvYPWUOSPgNM+Ljg2Sq5
CKP7HoqxhABA3jR3UuIeqgMMFUtqxVZzmyR0ezAQs1xmbq7aXFy9YA94B5vLHJqO
RVpWAaKfo/UZohtqUrf9g/qKwxR/P5lL19P/vhLJILjSacY2J05S3fRy9dmZFuh4
N2nIVXCoccBpUa+qqc0yxKrHneonIQKy0sH6GHRUETBgWVkkbDCzix43fvLhVyI3
M1jxsl4ZTeRk0JQvyQi09rKlkivypQIDAQABo4IC7TCCAukwHQYDVR0OBBYEFNNX
zHnCx2SaBICCRp0kH5XQ3oQgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NjdGNzRGMEE0M0QxMUYxOTdBNENFRkFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAmtETAwQBmtGQAwQCmtGY
MAwDBACa0Z0DBACa0Z4wDAMEAJrRwwMEAJrRxAMEAJrRzTAMAwQAmtMRAwQCmtMQ
AwQCmtQcAwQAmtUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvcyf86pDzk/zRJA1f/o80
Pqcl3qNIQmjFTQZjAuwSisT/AXWOMF4k0P9kn9X09JBSUH8UcGPD6fXHQWUJeq8T
JKpHNBtqHnUFreEybBPXRuiAk2EQbggS+XKVDIx9n3V4keBEbQcVRZ7KEEG8Pz7j
hBuk7m17L/M9VFgRI1X+1bK/yCZkAWqjFczn6BVn/YQb5ZBorRLUOlXMJ76EBmVK
9v6eaoawTZ5P3dl50pW1jvx80g4SzXqneAFJXCyHsw8KqjLL3oyINIY/ACQjNQxF
viQMUk6S98hwCWB9Lt0QZ914l/1bifm3TVPyIO201dcqGynnLJLSzw2U3V3gSqgj
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:00 2026 by rpki-client