Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF13B3F2A44511F19170D7ACCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF13B3F2A44511F19170D7ACCE1D38B0.roa
File: AF13B3F2A44511F19170D7ACCE1D38B0.roa (raw, json)
Hash identifier: 11AxJ638PRMPgFyahY6I2bFyUOZHlifDOI1Rn5kYqps=
Subject key identifier: 10:D7:53:5C:52:43:A4:DF:A7:11:F4:93:A4:95:EA:AD:B6:F1:B5:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E418
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF13B3F2A44511F19170D7ACCE1D38B0.roa
Signing time: Sun 30 Aug 2026 07:37:43 +0000
ROA not before: Sun 30 Aug 2026 07:37:38 +0000
ROA not after: Wed 07 Oct 2026 07:37:38 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.221.56.0/24 maxlen: 24
154.221.57.0/24 maxlen: 24
154.221.58.0/24 maxlen: 24
154.221.59.0/24 maxlen: 24
154.221.61.0/24 maxlen: 24
154.222.1.0/24 maxlen: 24
154.222.12.0/24 maxlen: 24
154.222.13.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.198.0/24 maxlen: 24
154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Sep 2026 00:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123928 (0x1e418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 07:37:38 2026 GMT
Not After : Oct 7 07:37:38 2026 GMT
Subject: CN=6a93ddc6-e416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:6d:b3:3f:b5:47:11:fd:6f:2f:0e:30:3f:
92:ee:b7:2e:81:2c:a7:05:c4:2c:ee:c8:66:e9:82:
2f:62:d0:c8:e2:f1:02:d5:b9:d5:93:03:c8:db:66:
4f:fa:d4:f4:7d:16:b0:f0:b0:4e:8c:c7:61:30:1f:
06:f1:e0:8c:34:e2:38:72:f8:39:e4:0a:50:b4:1e:
e2:62:37:39:42:1f:1a:dc:44:e7:ce:94:1e:3f:ce:
10:90:00:b2:1b:2f:b3:a5:40:0f:d5:c3:8c:5b:fe:
44:6f:a1:8f:f0:1b:86:12:39:98:42:d1:14:d8:7b:
32:d0:b8:86:13:15:7a:7e:05:20:eb:0a:4b:97:32:
f3:11:c4:92:21:24:cf:86:4a:56:90:1b:90:3c:6a:
25:e8:b4:1f:b5:dc:5b:16:18:3e:60:71:6d:4c:b7:
7c:10:a6:69:8f:53:d6:8e:09:84:e8:2a:35:da:f0:
52:b5:9c:3a:e1:51:c9:8d:f5:a2:03:7a:a5:07:3c:
3b:10:f7:d4:cd:85:22:cb:5b:c7:97:97:8e:2f:e2:
f1:be:ac:44:9a:f3:8d:c8:d2:5b:8a:1b:2c:6f:8d:
d7:a4:ab:f0:75:88:89:4c:d8:bf:92:7a:78:34:11:
a7:50:5c:d9:67:04:c3:3c:17:ca:7e:80:60:62:4f:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:53:5C:52:43:A4:DF:A7:11:F4:93:A4:95:EA:AD:B6:F1:B5:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF13B3F2A44511F19170D7ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0-154.219.196.255
154.219.198.0/23
154.221.56.0/22
154.221.61.0/24
154.222.1.0/24
154.222.12.0/22
154.222.43.0-154.222.45.255
154.222.198.0/24
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9e:43:79:da:26:95:07:3c:b9:33:c4:26:56:7e:4b:4c:da:
22:95:d4:a5:fd:23:3f:c2:4e:26:f2:24:b8:34:83:f3:d0:ef:
c2:f8:c6:e9:a5:d6:ee:3a:f9:e0:35:3d:25:99:c8:4d:f0:6b:
03:66:61:2d:5c:2e:bb:c4:90:b8:7b:fb:55:eb:19:60:03:ae:
d7:5e:24:61:e7:fb:d3:86:25:a4:e6:b1:42:14:8e:df:0a:30:
4a:6d:18:62:e4:74:5a:35:44:f9:90:58:7e:c7:01:80:ed:a2:
19:01:d6:38:af:8a:8c:e7:22:ab:fb:fe:da:e8:9e:3e:c4:da:
7c:da:9f:83:cd:9c:f9:63:77:84:a5:0f:e9:3c:5a:8c:86:34:
17:fd:ff:ac:44:4e:5f:f3:82:4d:d5:ab:1b:7f:a8:bc:2b:4b:
f4:56:51:3d:97:cb:93:f0:61:26:30:60:1e:80:ef:9a:fe:03:
6b:d0:28:36:26:dd:b6:28:0c:2b:ad:0e:a7:8f:dc:e4:bb:21:
da:7c:91:b7:f5:8e:fe:56:b7:9b:8a:88:c8:70:1e:a7:a4:60:
f8:cf:69:ff:d0:7d:e6:ca:18:af:5d:99:59:3b:37:f2:f2:6c:
ff:e1:a8:32:99:20:fd:87:8f:34:6a:a1:ee:d9:62:e5:aa:ca:
f4:46:1f:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:15 2026 by rpki-client