Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98A106FEA44211F1A26B5F17CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98A106FEA44211F1A26B5F17CF1D38B0.roa
File: 98A106FEA44211F1A26B5F17CF1D38B0.roa (raw, json)
Hash identifier: ns4e9U+vexmZdvZvA1suFB27pWLqEV/q2M8De70rYG4=
Subject key identifier: 0E:9D:0F:49:02:47:32:4A:32:43:5D:64:F0:4C:F9:5E:65:D5:89:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E412
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98A106FEA44211F1A26B5F17CF1D38B0.roa
Signing time: Sun 30 Aug 2026 07:15:36 +0000
ROA not before: Sun 30 Aug 2026 07:15:32 +0000
ROA not after: Wed 07 Oct 2026 07:15:32 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
154.218.29.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
154.219.29.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.40.0/24 maxlen: 24
154.222.41.0/24 maxlen: 24
154.222.42.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
154.222.193.0/24 maxlen: 24
154.222.194.0/24 maxlen: 24
154.222.195.0/24 maxlen: 24
154.222.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Sep 2026 00:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123922 (0x1e412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 07:15:32 2026 GMT
Not After : Oct 7 07:15:32 2026 GMT
Subject: CN=6a93d898-9f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:60:4d:4f:6c:86:96:ac:33:95:1f:b0:08:
1e:74:ae:40:93:18:a4:a3:78:c9:f9:b9:f9:bc:ba:
d6:cc:4c:c8:75:5d:b9:27:02:e1:a4:4b:ee:a1:6b:
8b:0d:5f:69:40:93:57:39:9e:21:87:fc:e0:c2:85:
87:c6:36:88:66:33:1c:1f:32:d2:a5:7a:58:74:d8:
e0:44:51:43:b0:c1:66:ed:de:fc:c7:e3:83:35:cc:
fe:82:0a:00:b9:be:76:5b:03:73:be:db:45:53:ef:
1d:33:30:dd:ca:3c:2a:f3:7f:aa:98:1e:a3:d1:92:
a4:1d:ad:b6:96:f0:aa:6f:da:3a:ed:b3:2f:97:e6:
be:de:36:86:3b:b7:16:83:1e:58:39:0c:a8:06:10:
c5:44:0c:60:19:75:54:0b:d5:64:a2:4a:15:af:00:
c5:a4:49:a7:90:48:34:f2:7b:87:a6:28:9b:cb:0d:
6a:51:b6:59:87:61:80:d8:d6:db:5e:03:87:3d:75:
35:66:75:6d:03:18:34:93:82:89:f4:d4:1a:9e:d4:
4a:ac:10:80:29:79:8f:3d:1d:4b:1e:69:bf:d3:86:
f4:cb:4f:03:2b:e2:c3:fe:f9:ea:74:09:0b:93:47:
b0:82:57:e1:ca:36:ec:65:c7:e3:a8:1c:3b:23:17:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:0F:49:02:47:32:4A:32:43:5D:64:F0:4C:F9:5E:65:D5:89:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98A106FEA44211F1A26B5F17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/23
154.219.17.0-154.219.22.255
154.219.26.0/23
154.219.29.0/24
154.221.60.0/24
154.222.40.0-154.222.42.255
154.222.192.0-154.222.196.255
Signature Algorithm: sha256WithRSAEncryption
ab:f8:20:7a:d9:4a:33:ab:66:ef:64:71:39:7e:59:35:7a:e6:
de:dc:af:a7:b1:c9:24:8c:76:3e:94:98:b9:1d:22:6c:1c:78:
19:af:09:9d:79:b6:cf:ac:4e:77:2d:b7:86:42:58:e6:db:5a:
e0:0d:00:d7:45:45:34:f1:71:5a:97:5c:9a:dd:72:9a:f5:2c:
56:44:ce:a2:7a:86:80:d3:fc:67:8a:71:f5:04:0b:20:05:d7:
86:94:05:cd:d4:49:1c:81:82:2b:b7:a7:97:4e:d1:75:39:30:
0e:21:d6:6c:4c:24:f1:25:68:25:08:55:86:e1:23:25:3c:29:
4b:e2:61:0c:1f:ec:96:f4:92:1c:e2:a6:52:2d:74:80:80:6e:
56:fc:e6:0c:01:63:6d:62:9b:49:64:f6:b4:e5:22:f5:41:5d:
ae:a3:b3:3b:cc:2b:6d:68:ed:31:25:f3:16:42:7b:b2:ce:83:
cd:3d:48:9a:3c:20:9d:ac:61:8b:3e:06:65:e3:b8:2f:4c:6a:
f2:a0:2f:ba:c5:01:08:f4:e3:5c:c1:73:18:96:78:ca:a0:4e:
64:73:10:f8:05:d1:cd:b1:8c:05:52:8f:d3:7c:bd:24:14:3a:
0b:51:51:cb:e0:c5:00:b4:88:8e:82:11:4e:08:b8:d4:0e:94:
92:8d:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:21 2026 by rpki-client