Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C00794F49F8A11F192DA19FCCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C00794F49F8A11F192DA19FCCE1D38B0.roa
File: C00794F49F8A11F192DA19FCCE1D38B0.roa (raw, json)
Hash identifier: GH6EEB2P25llgZz+MRAqRN3+a54X4CJYSKSz82l5WdQ=
Subject key identifier: BA:C3:30:C2:53:A8:F7:30:EB:6C:3A:1B:22:7B:BE:D2:01:8A:D0:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E1F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C00794F49F8A11F192DA19FCCE1D38B0.roa
Signing time: Mon 24 Aug 2026 07:09:30 +0000
ROA not before: Mon 24 Aug 2026 07:09:26 +0000
ROA not after: Sun 06 Sep 2026 07:09:26 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 07:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123382 (0x1e1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 24 07:09:26 2026 GMT
Not After : Sep 6 07:09:26 2026 GMT
Subject: CN=6a8bee2a-ffab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:53:01:3e:49:31:34:b9:00:e3:0e:8a:dc:
fb:f0:b6:45:af:cf:41:4f:f5:85:1e:25:06:a8:a9:
22:a9:be:36:9d:2a:e7:53:71:28:28:6c:bc:d0:2f:
80:6d:56:2e:4d:0a:1f:3d:de:95:fe:33:d1:64:71:
5e:f1:06:db:0b:0d:10:7b:81:85:f3:a8:52:66:90:
5f:95:38:90:64:10:df:fa:02:e9:a8:4b:2c:50:24:
47:78:98:27:7d:11:c3:eb:95:87:d8:1c:d6:c6:84:
6b:e0:2f:7f:3f:7a:cf:c7:7e:58:99:f0:5c:82:bc:
71:4e:e3:3f:3b:cb:65:03:73:1e:75:e0:4e:f7:81:
11:0d:03:f7:b8:cc:0f:14:6e:b3:ef:a5:2b:b5:ab:
dc:35:7f:5c:43:2d:3d:7d:9c:37:da:f5:10:d2:74:
e1:8a:b9:d8:69:f6:49:ee:f4:86:9b:86:23:4b:79:
f9:c6:f5:f6:57:a7:9f:78:1d:7f:f6:7c:a1:a7:f4:
24:96:7a:55:c9:e5:f0:ee:27:4c:41:be:e3:e1:c9:
d4:40:59:6c:a7:ca:13:8e:d3:62:20:5f:d4:f3:2e:
8d:b1:c1:23:a8:d9:4e:5a:ce:62:79:30:3c:2b:14:
0e:ec:f7:00:24:4c:d0:c5:b6:1a:b2:0b:9f:28:a6:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:30:C2:53:A8:F7:30:EB:6C:3A:1B:22:7B:BE:D2:01:8A:D0:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C00794F49F8A11F192DA19FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0-154.218.24.255
Signature Algorithm: sha256WithRSAEncryption
c1:48:5a:cc:5e:5a:b6:79:1f:95:54:74:34:bb:59:92:c4:cc:
46:8f:75:b3:fb:37:33:fc:ed:0f:dc:61:f0:9f:47:7a:49:98:
23:c0:bc:10:83:24:8d:4c:ae:cd:c8:0c:20:48:11:4b:e9:4f:
de:c9:9a:e8:dd:eb:11:be:65:97:66:44:d7:ab:9c:40:3f:70:
4f:50:64:39:f6:73:5d:4b:0d:30:2a:64:df:97:27:c0:1f:2c:
6e:dc:26:9a:46:e5:33:42:54:a6:9b:cd:80:c1:c9:3a:59:50:
b2:95:9a:d3:e2:c2:f9:50:d0:be:e4:03:d2:88:6b:06:8f:de:
bd:e7:6f:05:01:c8:1d:95:d2:bf:6c:52:af:9e:ab:c0:04:c6:
d2:e2:46:dc:42:ce:02:d0:21:28:64:22:57:82:53:c1:de:0b:
05:a6:5f:ef:79:82:90:8d:9d:bc:fd:81:b7:0f:8e:5a:f8:76:
df:80:56:66:9b:ce:3c:f1:f2:ec:e5:77:2e:db:5a:7c:95:f3:
aa:94:f9:58:7c:6f:36:a4:e0:bc:0d:d6:77:58:23:51:c6:54:
42:34:5a:d9:1e:fb:ef:f6:d8:e3:7d:a1:87:c7:57:80:14:cf:
51:ea:f7:ec:b0:ac:ef:94:47:97:27:6d:64:6c:4b:23:6c:ad:
65:e2:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:10 2026 by rpki-client