Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B80B045A963B11F1B653DCC9CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B80B045A963B11F1B653DCC9CE1D38B0.roa
File: B80B045A963B11F1B653DCC9CE1D38B0.roa (raw, json)
Hash identifier: 54P1TYRnc0dYkkjaa2SanMANJOjuX4WnDNbixamo9wQ=
Subject key identifier: EC:9F:97:DB:67:14:01:E3:9F:2C:CB:56:D0:4B:06:A2:48:69:91:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DE79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B80B045A963B11F1B653DCC9CE1D38B0.roa
Signing time: Wed 12 Aug 2026 10:51:06 +0000
ROA not before: Wed 12 Aug 2026 10:51:02 +0000
ROA not after: Sun 12 Aug 2029 10:51:02 +0000
asID: 17561
IP address blocks: 154.212.60.0/24 maxlen: 24
154.212.61.0/24 maxlen: 24
154.212.62.0/24 maxlen: 24
154.212.63.0/24 maxlen: 24
154.212.129.0/24 maxlen: 24
154.212.140.0/24 maxlen: 24
154.212.141.0/24 maxlen: 24
154.212.142.0/24 maxlen: 24
154.212.143.0/24 maxlen: 24
154.212.148.0/24 maxlen: 24
154.212.149.0/24 maxlen: 24
154.212.150.0/24 maxlen: 24
154.212.151.0/24 maxlen: 24
154.212.152.0/24 maxlen: 24
154.212.153.0/24 maxlen: 24
154.212.154.0/24 maxlen: 24
154.212.155.0/24 maxlen: 24
154.212.156.0/24 maxlen: 24
154.212.157.0/24 maxlen: 24
154.212.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 08:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122489 (0x1de79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 12 10:51:02 2026 GMT
Not After : Aug 12 10:51:02 2029 GMT
Subject: CN=6a7c501a-3311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:eb:cd:ba:82:59:c6:5a:ae:13:76:0e:19:
a5:29:b2:6f:78:98:4f:ad:0b:ff:97:e9:a5:e2:c8:
21:e2:c3:38:df:1a:99:fc:84:e3:b5:29:ae:e5:3a:
f3:5c:7b:99:a4:7e:66:6b:64:91:d0:60:86:4a:bd:
cf:47:49:ff:5d:c3:99:3a:30:ab:72:ad:58:52:48:
b3:9c:fb:73:b5:43:37:4d:43:c4:15:8a:64:d5:4a:
7e:9a:ea:0c:1c:97:a4:da:94:e5:c9:eb:f4:30:53:
b6:37:ef:f7:12:e7:16:ae:5e:8d:94:e1:b8:f8:aa:
ff:af:14:a8:8c:40:c3:cd:a8:56:d1:c5:b0:b4:fb:
2e:22:5d:76:db:47:47:03:93:fd:a2:0a:86:ee:e9:
4e:c9:66:9e:ae:72:73:42:35:2b:7d:d2:9c:4c:c3:
b5:87:71:8c:78:da:cb:fc:df:87:4c:a9:48:d2:ca:
c6:64:3a:ef:bf:88:44:71:82:c9:de:0c:0d:0f:5e:
e0:89:a5:9f:ff:b0:74:c1:bd:76:e9:d2:2e:3e:0e:
1b:cc:8c:8c:21:2e:60:a8:2c:3c:96:2b:cd:bf:07:
53:03:cc:6f:29:af:d5:9c:ca:87:c6:4e:92:ea:1f:
bf:c0:2b:4e:31:32:f3:dd:be:79:89:44:ee:e4:d3:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:97:DB:67:14:01:E3:9F:2C:CB:56:D0:4B:06:A2:48:69:91:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B80B045A963B11F1B653DCC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.60.0/22
154.212.129.0/24
154.212.140.0/22
154.212.148.0-154.212.158.255
Signature Algorithm: sha256WithRSAEncryption
7c:5c:a6:e1:a8:a6:cb:15:47:93:d6:b7:0d:ac:dc:e4:7d:5f:
a4:f5:d2:4e:6c:2f:08:52:f2:c4:a4:ec:9a:3f:ad:ff:cf:07:
1c:5e:c9:6a:c1:96:66:53:f1:99:cc:9f:22:d0:fc:9c:ee:32:
b6:00:80:2b:b3:1d:e5:6b:aa:aa:11:95:33:4f:8b:9e:30:a3:
e1:dd:a5:b7:05:d5:48:cc:2c:fb:7e:b6:62:34:ca:51:90:cc:
ef:ba:e9:1a:7d:d2:67:05:3c:f5:70:15:d7:e5:d5:55:3b:66:
ea:a9:ef:d6:b0:fb:0e:df:13:cc:ba:80:d4:7f:12:cd:b1:bd:
fd:39:3c:2d:e0:70:29:45:8f:3e:39:9b:a8:aa:c3:41:ae:d4:
05:3b:b2:b4:fb:b6:da:23:ce:71:dd:1f:4c:9d:b8:79:89:14:
ef:18:36:72:76:4b:a0:5c:6f:76:55:a1:f3:ee:f6:75:f8:3e:
9b:7e:a5:b1:23:07:28:79:ac:4d:85:7f:86:b3:d4:23:10:12:
e1:76:b3:d1:a8:a7:42:f0:0d:10:88:84:b2:1c:ee:63:2e:d8:
ba:18:a6:e5:35:94:44:11:d4:53:d4:88:bf:5f:7e:c7:49:52:
8c:1c:31:27:c6:39:49:a0:44:a6:04:67:cf:75:47:59:ef:2b:
f0:61:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:01:12 2026 by rpki-client