Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD163A74C07011F19B433AFCCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD163A74C07011F19B433AFCCE1D38B0.roa
File: AD163A74C07011F19B433AFCCE1D38B0.roa (raw, json)
Hash identifier: pTAntjQCw7IDuaG/kg38cFdQxYptD+8Q5DHKb4q1szM=
Subject key identifier: BC:8C:E5:16:8B:2F:5F:D3:B9:E9:B5:13:01:AD:64:E2:01:55:50:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EC2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD163A74C07011F19B433AFCCE1D38B0.roa
Signing time: Mon 05 Oct 2026 03:56:00 +0000
ROA not before: Mon 05 Oct 2026 03:55:56 +0000
ROA not after: Mon 12 Oct 2026 03:55:56 +0000
asID: 211392
IP address blocks: 154.84.14.0/23 maxlen: 24
154.84.14.0/24 maxlen: 24
154.84.15.0/24 maxlen: 24
154.84.16.0/21 maxlen: 24
154.84.16.0/23 maxlen: 24
154.84.16.0/24 maxlen: 24
154.84.17.0/24 maxlen: 24
154.84.18.0/23 maxlen: 24
154.84.18.0/24 maxlen: 24
154.84.19.0/24 maxlen: 24
154.84.20.0/23 maxlen: 24
154.84.20.0/24 maxlen: 24
154.84.21.0/24 maxlen: 24
154.84.22.0/23 maxlen: 24
154.84.22.0/24 maxlen: 24
154.84.23.0/24 maxlen: 24
154.84.24.0/22 maxlen: 24
154.84.24.0/23 maxlen: 24
154.84.24.0/24 maxlen: 24
154.84.25.0/24 maxlen: 24
154.84.26.0/23 maxlen: 24
154.84.26.0/24 maxlen: 24
154.84.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 03:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125998 (0x1ec2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 5 03:55:56 2026 GMT
Not After : Oct 12 03:55:56 2026 GMT
Subject: CN=6ac31fd0-d941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:1f:9f:cd:c6:80:d3:99:ba:b2:c2:09:43:
fe:6f:bf:4f:76:07:d3:27:73:1f:f6:91:3a:f4:ac:
ec:35:03:8f:d5:ab:ed:17:dd:c3:e4:7e:1e:18:82:
e7:03:10:f4:f1:84:ad:ca:cd:b7:7d:2f:9f:24:fb:
5f:28:ad:2e:8c:17:a6:bc:34:e2:38:f7:34:ac:ab:
c5:34:3a:06:6b:6f:ea:b6:63:21:08:ff:2b:6a:6b:
09:b5:e9:35:bd:8a:79:ca:95:95:fa:c8:e5:aa:26:
9f:fc:c9:65:87:d3:df:59:6f:3a:13:5e:db:67:49:
89:f9:82:56:ea:e0:2a:9a:ce:4a:e7:44:7a:71:60:
b7:a0:a9:ed:62:bc:d3:29:62:83:e1:78:34:a2:ee:
3a:05:2c:86:cf:11:2e:7f:63:2b:a4:5b:5e:85:94:
af:07:ca:23:12:3d:b3:96:01:82:c5:ef:72:7e:48:
5f:33:7f:64:aa:35:66:a5:70:2d:0e:a8:cd:1f:6f:
8a:74:a8:84:6c:c0:e0:1d:02:17:44:b6:d7:c6:f2:
f8:47:49:f3:52:df:67:b3:ea:2d:f5:7a:88:71:c8:
cc:7b:e6:d4:2a:2f:10:23:79:b7:18:ba:c2:95:40:
78:39:ad:9e:42:3b:4a:12:99:44:c2:73:da:93:ca:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:E5:16:8B:2F:5F:D3:B9:E9:B5:13:01:AD:64:E2:01:55:50:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD163A74C07011F19B433AFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.14.0-154.84.27.255
Signature Algorithm: sha256WithRSAEncryption
14:f3:46:3a:25:49:0e:b6:27:77:fa:60:a8:6f:23:60:a3:06:
9a:50:7f:66:c9:85:a2:5e:0c:32:02:8f:e8:d9:67:28:ba:2d:
99:27:a7:35:96:a1:34:3b:25:32:fc:72:42:b0:49:e9:f3:b6:
99:26:cc:67:b9:17:88:cf:4f:a1:a5:5d:dd:25:d1:de:a8:ed:
cd:cc:20:75:22:a1:94:78:69:58:22:25:4c:e4:bf:00:5a:a8:
ed:b7:06:da:b2:72:33:98:cc:32:81:90:39:de:ab:8b:7b:67:
d1:de:fd:ab:1e:28:27:34:42:66:f0:13:a3:b6:45:e4:40:76:
a8:d8:24:bc:ed:ec:ae:b1:81:4d:90:7a:21:eb:d9:c5:0e:e1:
eb:73:19:7f:9e:48:0f:0e:50:96:41:1c:ed:93:ce:52:8c:23:
b7:e5:99:de:a8:ac:05:ac:f4:6e:cd:4d:f4:26:a1:19:4d:b8:
c5:ae:63:3f:fc:b7:53:9b:94:dd:95:fb:e6:0b:5c:78:26:d2:
35:52:c4:4a:98:d8:c3:b1:d8:c6:a0:81:9c:e7:5e:35:f7:d4:
31:39:b8:c8:14:5c:bc:a4:c2:f6:18:17:71:ec:51:84:0f:8d:
f8:ff:96:68:9e:f4:ad:4e:d5:80:7d:bc:e2:ce:65:7f:5c:4d:
4c:49:f4:49
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAewuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA1MDM1NTU2WhcNMjYxMDEyMDM1NTU2WjAYMRYw
FAYDVQQDEw02YWMzMWZkMC1kOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAshkfn83GgNOZurLCCUP+b79PdgfTJ3Mf9pE69KzsNQOP1avtF93D5H4e
GILnAxD08YStys23fS+fJPtfKK0ujBemvDTiOPc0rKvFNDoGa2/qtmMhCP8ramsJ
tek1vYp5ypWV+sjlqiaf/Mllh9PfWW86E17bZ0mJ+YJW6uAqms5K50R6cWC3oKnt
YrzTKWKD4Xg0ou46BSyGzxEuf2MrpFtehZSvB8ojEj2zlgGCxe9yfkhfM39kqjVm
pXAtDqjNH2+KdKiEbMDgHQIXRLbXxvL4R0nzUt9ns+ot9XqIccjMe+bUKi8QI3m3
GLrClUB4Oa2eQjtKEplEwnPak8rdYQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLyM
5RaLL1/Tuem1EwGtZOIBVVBgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRDE2M0E3NEMwNzAxMUYxOUI0MzNBRkNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaVA4DBAKaVBgwDQYJ
KoZIhvcNAQELBQADggEBABTzRjolSQ62J3f6YKhvI2CjBppQf2bJhaJeDDICj+jZ
Zyi6LZknpzWWoTQ7JTL8ckKwSenztpkmzGe5F4jPT6GlXd0l0d6o7c3MIHUioZR4
aVgiJUzkvwBaqO23BtqycjOYzDKBkDneq4t7Z9He/aseKCc0QmbwE6O2ReRAdqjY
JLzt7K6xgU2QeiHr2cUO4etzGX+eSA8OUJZBHO2TzlKMI7flmd6orAWs9G7NTfQm
oRlNuMWuYz/8t1OblN2V++YLXHgm0jVSxEqY2MOx2MaggZznXjX31DE5uMgUXLyk
wvYYF3HsUYQPjfj/lmie9K1O1YB9vOLOZX9cTUxJ9Ek=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:07:14 2026 by rpki-client