Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C152F874A44611F1A85350B1CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C152F874A44611F1A85350B1CE1D38B0.roa
File: C152F874A44611F1A85350B1CE1D38B0.roa (raw, json)
Hash identifier: DazaJkJO/J3LAk/QWchAY7Z2C5ePUzpXdhcDyGmx9qI=
Subject key identifier: 0E:7D:D0:27:91:F9:70:50:F4:92:2A:A1:B3:36:8E:B7:19:9D:57:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E41A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C152F874A44611F1A85350B1CE1D38B0.roa
Signing time: Sun 30 Aug 2026 07:45:23 +0000
ROA not before: Sun 30 Aug 2026 07:45:18 +0000
ROA not after: Wed 07 Oct 2026 07:45:18 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Sep 2026 00:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123930 (0x1e41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 07:45:18 2026 GMT
Not After : Oct 7 07:45:18 2026 GMT
Subject: CN=6a93df92-ed4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:8d:07:2c:11:8f:f3:29:0c:7f:87:79:95:
1a:fb:9a:b0:2c:e9:f9:57:a2:30:93:b7:f2:5e:71:
1a:7d:9f:75:f9:e4:6d:4b:b1:ac:a9:a3:e4:e8:a9:
74:0c:17:f0:ef:2a:71:a0:4d:15:63:70:19:56:47:
15:ee:3d:b1:70:de:8b:05:85:a6:41:ef:37:d2:57:
64:a9:8a:e1:40:84:df:6c:68:53:0f:e2:05:29:d1:
c1:56:fb:9f:08:a4:b5:29:1d:3c:d2:5c:f9:f7:41:
fe:71:f0:e3:15:80:11:f2:b4:84:2a:fa:88:95:35:
19:b0:a1:20:b9:f5:6d:21:14:c4:6b:20:c2:25:c7:
fc:7b:c5:9b:8b:a3:44:63:3f:df:e3:5b:61:fc:42:
29:f4:1b:c4:ea:26:38:e4:5e:27:d4:db:18:72:17:
95:d7:df:4d:20:97:e6:4f:cf:00:a8:1e:49:b2:83:
66:b0:3a:4b:c7:3e:ea:52:1d:54:3c:96:b2:eb:60:
5a:32:dd:7c:5e:a2:74:85:0d:97:b0:69:e8:3b:98:
4b:e6:cd:99:12:9f:df:a7:9e:f1:10:bd:45:f8:8c:
ed:76:6c:22:76:52:f1:25:f1:20:d7:af:89:c2:32:
ca:e6:97:dd:f6:cc:75:6f:56:76:bf:c3:fc:0a:69:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:D0:27:91:F9:70:50:F4:92:2A:A1:B3:36:8E:B7:19:9D:57:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C152F874A44611F1A85350B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.222.46.0/24
154.222.199.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6e:7c:a2:3c:2c:6d:b9:07:0f:17:2e:93:98:1f:c9:63:59:
c2:24:20:7f:06:6e:5d:47:ce:71:51:cb:20:9c:da:9c:a4:d2:
5e:c5:71:50:cb:a9:14:c3:19:e1:c9:1f:8b:23:45:02:2d:93:
02:56:ee:48:48:07:92:2e:0d:8e:ab:3c:f7:f3:f0:2e:74:71:
9c:a2:2f:49:23:af:12:b6:cd:30:9e:e4:54:65:6e:0b:5c:96:
25:25:50:f4:b4:95:4e:58:3a:e6:34:db:a7:bb:3a:ad:cb:fa:
b3:db:4a:fb:0a:36:11:f5:0d:97:18:5c:de:f6:e7:33:f0:9f:
6d:24:bc:36:99:70:6b:e6:3a:9f:78:8e:a0:4d:ec:98:d9:71:
59:99:75:7a:e3:e2:32:63:1c:a0:2b:7f:3c:61:f5:95:ff:c6:
41:85:e5:e7:a6:0f:df:e8:aa:85:73:d1:02:41:7b:45:e0:5d:
7d:15:1b:31:ab:35:bb:c9:51:99:d9:f4:d1:d8:4e:5a:0d:91:
00:72:8f:ee:8c:41:5d:db:3c:6e:d1:67:12:92:f1:03:6f:a5:
53:16:08:05:91:cb:56:3c:eb:54:04:77:32:b0:df:17:c1:b3:
2d:9e:b1:dc:bf:c3:7e:5c:6f:9a:a2:7c:c0:c0:03:29:ca:e0:
19:99:bc:fb
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIDAeQaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODMwMDc0NTE4WhcNMjYxMDA3MDc0NTE4WjAYMRYw
FAYDVQQDEw02YTkzZGY5Mi1lZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw6qNBywRj/MpDH+HeZUa+5qwLOn5V6Iwk7fyXnEafZ91+eRtS7GsqaPk
6Kl0DBfw7ypxoE0VY3AZVkcV7j2xcN6LBYWmQe830ldkqYrhQITfbGhTD+IFKdHB
VvufCKS1KR080lz590H+cfDjFYAR8rSEKvqIlTUZsKEgufVtIRTEayDCJcf8e8Wb
i6NEYz/f41th/EIp9BvE6iY45F4n1NsYcheV199NIJfmT88AqB5JsoNmsDpLxz7q
Uh1UPJay62BaMt18XqJ0hQ2XsGnoO5hL5s2ZEp/fp57xEL1F+IztdmwidlLxJfEg
16+JwjLK5pfd9sx1b1Z2v8P8CmkhaQIDAQABo4IC/TCCAvkwHQYDVR0OBBYEFA59
0CeR+XBQ9JIqobM2jrcZnVfpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTUyRjg3NEE0NDYxMUYxQTg1MzUwQjFDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeMAwDBACa2hkDBACa2howDAME
AJrbyQMEAprbyDAMAwQEmtvQAwQAmtvSMAwDBAKa29QDBACa29gDBACa3AEDBACa
3QEwDAMEAJrdNQMEA5rdMAMEAJreLgMEAJrexzANBgkqhkiG9w0BAQsFAAOCAQEA
u258ojwsbbkHDxcuk5gfyWNZwiQgfwZuXUfOcVHLIJzanKTSXsVxUMupFMMZ4ckf
iyNFAi2TAlbuSEgHki4Njqs89/PwLnRxnKIvSSOvErbNMJ7kVGVuC1yWJSVQ9LSV
Tlg65jTbp7s6rcv6s9tK+wo2EfUNlxhc3vbnM/CfbSS8Nplwa+Y6n3iOoE3smNlx
WZl1euPiMmMcoCt/PGH1lf/GQYXl56YP3+iqhXPRAkF7ReBdfRUbMas1u8lRmdn0
0dhOWg2RAHKP7oxBXds8btFnEpLxA2+lUxYIBZHLVjzrVAR3MrDfF8GzLZ6x3L/D
flxvmqJ8wMADKcrgGZm8+w==
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:20 2026 by rpki-client