Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1DFB0E2BB5011F1B7A66C09CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1DFB0E2BB5011F1B7A66C09CF1D38B0.roa
File: F1DFB0E2BB5011F1B7A66C09CF1D38B0.roa (raw, json)
Hash identifier: WsFxrLRe33XY8fYoE3wAp0ZE58eIhBb95akQJoANvu4=
Subject key identifier: 64:D9:C3:79:57:FA:46:05:63:9E:86:89:8C:9B:1F:33:6E:A3:17:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EB22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1DFB0E2BB5011F1B7A66C09CF1D38B0.roa
Signing time: Mon 28 Sep 2026 15:26:16 +0000
ROA not before: Mon 28 Sep 2026 15:26:12 +0000
ROA not after: Sat 05 Jan 2030 15:26:12 +0000
asID: 18229
IP address blocks: 154.210.186.0/24 maxlen: 24
154.210.187.0/24 maxlen: 24
154.210.188.0/24 maxlen: 24
154.210.189.0/24 maxlen: 24
154.210.190.0/24 maxlen: 24
154.210.191.0/24 maxlen: 24
154.210.192.0/24 maxlen: 24
154.210.193.0/24 maxlen: 24
154.210.194.0/24 maxlen: 24
154.210.195.0/24 maxlen: 24
154.210.196.0/24 maxlen: 24
154.210.198.0/24 maxlen: 24
154.210.199.0/24 maxlen: 24
154.210.200.0/24 maxlen: 24
154.210.201.0/24 maxlen: 24
154.210.214.0/24 maxlen: 24
154.210.215.0/24 maxlen: 24
154.210.216.0/24 maxlen: 24
154.210.217.0/24 maxlen: 24
154.210.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125730 (0x1eb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 15:26:12 2026 GMT
Not After : Jan 5 15:26:12 2030 GMT
Subject: CN=6aba8718-16b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:bc:d6:c7:49:ff:16:ed:5d:87:3c:3b:01:
68:20:d7:50:dd:0e:01:99:40:0e:c2:2e:1c:52:2a:
90:92:0c:09:a3:5d:39:c0:2d:c6:f1:ce:53:60:78:
2f:a1:af:58:1b:57:c6:48:2a:3c:bf:06:df:e1:c6:
e2:51:0b:bc:b7:db:b8:cd:1f:0a:bd:3c:3e:41:4f:
84:1d:eb:6e:36:46:21:05:38:13:27:11:8f:25:54:
75:bd:4a:37:ed:2e:f6:8b:8f:f0:7d:77:eb:4a:99:
2a:dc:d9:f1:44:39:9a:75:66:db:91:91:3a:82:a9:
64:cc:9d:40:d3:ea:1c:6e:45:ff:71:ad:17:a9:09:
c6:44:d1:31:97:00:ca:4a:12:02:35:1e:cf:07:bb:
c6:ef:e4:a3:9a:e3:92:6d:1f:d3:51:c7:16:86:99:
01:3d:be:50:6f:e1:cf:36:64:99:64:21:a2:cb:26:
56:6f:ae:4c:c4:ed:48:21:95:18:93:4e:d5:1d:e0:
24:8f:03:93:c3:de:e3:61:71:30:97:f9:19:e3:45:
07:06:a7:29:4e:bf:05:8e:5e:04:8f:e8:0c:c3:79:
34:a6:05:56:6a:23:d4:c1:c0:84:eb:0d:c2:1c:61:
b3:dd:a3:51:c7:a8:e7:b0:0b:f8:05:70:56:68:90:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:C3:79:57:FA:46:05:63:9E:86:89:8C:9B:1F:33:6E:A3:17:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1DFB0E2BB5011F1B7A66C09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.186.0-154.210.196.255
154.210.198.0-154.210.201.255
154.210.214.0-154.210.218.255
Signature Algorithm: sha256WithRSAEncryption
d3:08:eb:5b:f5:da:14:69:af:82:f0:67:38:62:35:2c:b4:7e:
9d:cc:10:5b:c1:47:40:58:a4:eb:57:a7:a6:18:96:80:0f:21:
79:98:a4:35:fb:04:a3:e8:34:c8:66:41:a7:03:c1:c2:24:43:
7a:3f:e4:7e:32:49:b5:78:01:6d:a8:47:55:6c:38:0d:47:36:
37:5b:81:0b:76:73:6a:b0:e9:fa:21:ef:70:9f:2b:bf:eb:8b:
ad:b0:60:67:f2:8e:35:ac:29:a5:b4:d4:1a:09:67:47:c5:f8:
9c:21:15:e6:53:b9:a4:e5:fe:ed:e7:e6:58:a9:99:bd:41:70:
cc:a2:6a:61:14:21:23:0c:f2:f3:db:ed:36:0f:e3:54:5e:36:
76:c5:f1:1b:c5:11:11:e0:2f:de:58:76:ee:f5:8d:ce:78:2d:
5c:f0:be:63:03:34:89:f8:2e:73:14:43:d0:eb:14:1d:b1:60:
ad:78:b8:ff:a5:f7:56:ee:93:0b:2b:f8:84:c5:64:d2:a3:20:
82:25:2f:fe:0a:3b:4b:75:d0:d6:05:db:8e:a5:f2:bc:27:00:
83:68:66:7a:e9:68:12:a1:79:f4:bf:c3:31:48:d3:5a:30:81:
bb:60:e5:e6:31:e4:6d:bb:e2:56:c6:8c:a4:42:06:32:b5:e2:
c2:f2:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:51:46 2026 by rpki-client