Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CC9D12A06311F1B1B415A2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CC9D12A06311F1B1B415A2CE1D38B0.roa
File: F0CC9D12A06311F1B1B415A2CE1D38B0.roa (raw, json)
Hash identifier: H5YwXLK1M9/iSCW+MtqJjqp1njNj2hj4c7ZqHWsVFoA=
Subject key identifier: E3:C8:97:98:F7:55:05:8D:52:CE:3F:F4:0C:85:3B:1E:6D:10:FA:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E2C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CC9D12A06311F1B1B415A2CE1D38B0.roa
Signing time: Tue 25 Aug 2026 09:04:13 +0000
ROA not before: Tue 25 Aug 2026 09:04:09 +0000
ROA not after: Fri 02 Oct 2026 09:04:09 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 14:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123584 (0x1e2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 25 09:04:09 2026 GMT
Not After : Oct 2 09:04:09 2026 GMT
Subject: CN=6a8d5a8d-8755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:a0:27:8c:00:e0:f1:8b:96:58:22:6e:53:
42:b1:e0:0e:36:bc:e8:48:43:9c:26:a9:33:49:cf:
0c:80:0c:6c:fe:e6:97:d5:aa:ae:61:22:7e:34:5b:
8f:da:56:e2:d1:43:74:fd:98:71:54:f3:70:34:90:
f6:8e:53:fa:94:e9:53:bf:ba:12:8a:57:7d:d9:b3:
a4:c1:a2:4f:49:5d:99:87:ca:d9:60:f2:bc:27:4c:
e1:ff:59:4a:f9:b3:52:d9:9a:ce:ec:5a:fc:4c:24:
65:cb:d5:f9:5f:98:ce:d8:38:4d:3c:a5:f1:a5:b3:
4b:46:88:d6:fd:b4:08:83:a9:bc:b1:e6:73:d5:13:
ba:d7:e4:1d:e2:d0:4a:dd:ba:96:b9:37:0f:c4:90:
53:d6:8f:97:86:36:98:79:49:cc:34:fe:cc:7f:73:
9c:6a:01:f4:97:c6:c5:3e:64:96:88:65:93:63:ca:
eb:e7:13:4b:78:37:49:bf:42:c4:69:7f:3d:bd:89:
79:da:a5:90:06:5e:5f:23:88:8a:a4:9a:42:14:a4:
0d:80:75:d2:87:7f:a4:47:21:ee:e3:5d:a0:d9:0e:
d0:06:0a:da:28:51:b0:0a:fd:a8:19:50:b5:95:68:
f4:3d:42:c7:28:10:10:53:9e:0e:04:81:2d:24:66:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C8:97:98:F7:55:05:8D:52:CE:3F:F4:0C:85:3B:1E:6D:10:FA:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CC9D12A06311F1B1B415A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
154.205.225.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
92:b6:e2:b0:ba:4b:ad:b9:e1:4d:b9:e5:bf:ee:ea:0b:e7:f6:
92:4f:f9:e4:09:9f:96:b7:0f:e3:ca:af:a3:3f:94:29:61:5f:
aa:2e:6c:94:3c:1d:5c:f6:96:60:6f:a4:81:fe:ca:fa:8f:61:
2d:df:81:28:15:10:85:31:f8:ac:4a:f6:ce:c6:b9:46:6e:fc:
f6:50:64:04:96:7b:08:7d:ca:bf:b8:08:c0:5c:16:68:4f:dc:
cb:8c:34:8e:e6:16:e3:d9:76:d3:cb:a0:3d:dc:ed:b0:6f:b0:
ac:d4:29:35:3c:64:cc:ab:b5:ed:ee:68:9c:db:8c:d5:b0:64:
53:20:83:a7:3e:ce:41:37:a3:b2:d5:f4:2c:aa:5e:52:5d:31:
45:6c:bb:e0:fd:76:27:d9:17:d9:7f:f8:5e:56:19:16:98:3c:
5a:d0:44:5e:4b:81:94:bd:9d:57:8c:9c:93:24:d4:19:8d:0a:
4f:78:8c:84:57:e3:df:fe:cf:0f:11:33:63:91:65:cf:0b:c9:
68:1f:61:5c:17:13:ae:74:81:7f:c0:1d:5a:44:df:2b:ec:3e:
a3:eb:36:e9:7a:49:b5:8c:11:b0:75:2a:96:bc:93:3c:fc:3b:
b3:a8:48:89:61:ec:8f:24:7a:ba:03:a0:a1:5b:2c:0c:89:d3:
bd:57:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:28 2026 by rpki-client