Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC635DCCA6AE11F1846319BBCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC635DCCA6AE11F1846319BBCE1D38B0.roa
File: AC635DCCA6AE11F1846319BBCE1D38B0.roa (raw, json)
Hash identifier: 2DVF6vZQTXTWxYg8SbCvC0B8VEFjt15FxECQXbFYNJg=
Subject key identifier: F5:5F:95:91:05:98:13:FC:E3:88:C2:75:2F:8C:89:7A:64:07:D9:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E4A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC635DCCA6AE11F1846319BBCE1D38B0.roa
Signing time: Wed 02 Sep 2026 09:14:17 +0000
ROA not before: Wed 02 Sep 2026 09:14:13 +0000
ROA not after: Fri 09 Oct 2026 09:14:13 +0000
asID: 44559
IP address blocks: 154.210.238.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
154.219.92.0/24 maxlen: 24
154.219.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 12:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124069 (0x1e4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 09:14:13 2026 GMT
Not After : Oct 9 09:14:13 2026 GMT
Subject: CN=6a97e8e9-ba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:04:30:ff:70:9c:07:9f:d8:ec:32:09:c5:
e2:2e:c4:60:84:08:a5:07:90:26:d2:63:bc:21:eb:
11:c3:b6:6f:63:a1:ff:98:fc:52:9d:e8:0c:d4:0d:
9f:78:38:2b:6e:8c:53:0e:e9:d8:08:78:c6:da:67:
7e:9e:5a:3f:5f:1c:99:e3:a8:f2:61:ab:bb:a8:18:
22:a1:75:e6:e0:1a:9a:ce:c5:2f:8b:4d:93:cc:e5:
27:d3:60:7d:8d:2e:08:2d:c8:a8:25:23:ab:d7:5c:
13:05:e3:98:f4:98:3d:19:8b:75:62:c5:c3:8c:9b:
b9:de:ca:50:10:0b:6f:8b:cb:4f:0b:13:d5:82:d2:
35:77:e5:b6:20:3e:29:8c:c9:7c:ec:9b:8c:64:80:
a0:39:95:62:6c:0e:ca:cb:25:d8:43:93:1c:c9:e2:
5c:e5:0e:5d:fb:61:47:c0:38:dd:b9:1d:3b:0a:1d:
90:68:1e:08:2a:7a:af:c8:60:c8:58:9b:b0:45:5c:
19:47:1d:43:d5:4c:a6:d6:e4:3f:22:8c:9a:69:16:
3b:e8:7f:1c:6b:3e:95:46:38:95:79:28:f0:4b:25:
f9:19:6d:30:4f:e3:e5:83:87:3e:bf:8c:a4:51:e5:
32:03:03:aa:25:cd:db:87:c7:4f:29:81:08:d9:99:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5F:95:91:05:98:13:FC:E3:88:C2:75:2F:8C:89:7A:64:07:D9:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC635DCCA6AE11F1846319BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.238.0/24
154.219.71.0-154.219.75.255
154.219.83.0-154.219.93.255
Signature Algorithm: sha256WithRSAEncryption
07:80:32:61:1a:55:0c:13:9b:9b:00:57:f3:dd:dc:b8:03:ef:
c2:c6:3a:c1:00:90:d4:a5:d5:af:f2:51:23:b9:60:31:55:90:
67:ee:a4:84:9c:43:9f:9a:b1:3a:9b:24:4e:2a:8e:ed:14:20:
4b:75:96:96:0b:44:61:11:5e:b4:71:52:38:dc:1e:99:b4:1e:
20:3d:86:80:be:e5:6e:50:51:20:a6:df:45:9b:28:25:f6:85:
1f:b6:52:ca:4d:11:e4:bf:a5:4c:a4:e8:f3:78:91:6f:4b:23:
fc:a2:e3:b5:c7:af:f2:ef:13:dd:a7:64:da:2c:38:b2:11:6f:
96:d2:45:c1:ad:38:ba:33:cd:c8:ff:58:9d:7e:4f:6a:0d:82:
7d:f4:fc:84:a2:ca:96:cf:d9:77:5b:97:e2:07:f7:1c:6e:a1:
3e:c0:9d:f5:1d:d5:72:32:71:99:e8:b1:64:b5:94:4f:b6:69:
9c:ef:cf:04:a7:1a:a7:5e:71:5e:0d:04:81:f8:57:69:ff:2b:
bc:82:3f:28:c9:fc:ce:0c:07:da:39:c4:93:02:60:09:4e:42:
74:ba:6e:fb:5d:74:7b:80:0a:80:a1:ae:bf:92:29:26:1e:33:
9f:74:a6:ff:14:c3:68:2b:b3:ef:1e:26:98:5b:2b:14:2f:01:
46:ee:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:04 2026 by rpki-client