Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC47DBE2C07111F1A34FC905CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC47DBE2C07111F1A34FC905CF1D38B0.roa
File: FC47DBE2C07111F1A34FC905CF1D38B0.roa (raw, json)
Hash identifier: ZqNnpsHaDjPo8281LkTpcYELutwWq89NEOJYPHV1g+w=
Subject key identifier: 09:88:42:96:6F:0D:5B:48:13:D1:BB:88:87:C7:43:F3:1D:F5:17:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EC30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC47DBE2C07111F1A34FC905CF1D38B0.roa
Signing time: Mon 05 Oct 2026 04:05:23 +0000
ROA not before: Mon 05 Oct 2026 04:05:18 +0000
ROA not after: Mon 12 Oct 2026 04:05:18 +0000
asID: 13335
IP address blocks: 154.84.14.0/23 maxlen: 24
154.84.14.0/24 maxlen: 24
154.84.15.0/24 maxlen: 24
154.84.16.0/21 maxlen: 24
154.84.16.0/23 maxlen: 24
154.84.16.0/24 maxlen: 24
154.84.17.0/24 maxlen: 24
154.84.18.0/23 maxlen: 24
154.84.18.0/24 maxlen: 24
154.84.19.0/24 maxlen: 24
154.84.20.0/23 maxlen: 24
154.84.20.0/24 maxlen: 24
154.84.21.0/24 maxlen: 24
154.84.22.0/23 maxlen: 24
154.84.22.0/24 maxlen: 24
154.84.23.0/24 maxlen: 24
154.84.24.0/22 maxlen: 24
154.84.24.0/23 maxlen: 24
154.84.24.0/24 maxlen: 24
154.84.25.0/24 maxlen: 24
154.84.26.0/23 maxlen: 24
154.84.26.0/24 maxlen: 24
154.84.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 04:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126000 (0x1ec30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 5 04:05:18 2026 GMT
Not After : Oct 12 04:05:18 2026 GMT
Subject: CN=6ac32202-4a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:a9:ae:88:a8:60:eb:fc:96:aa:f3:7b:3c:
c9:22:45:4f:be:86:d8:5b:9b:9f:84:b2:e9:c6:d1:
be:e2:4a:ae:d1:ce:fc:66:93:fa:76:04:47:3b:d8:
cc:25:14:64:a7:01:d1:6f:b2:68:02:7a:4f:b2:fa:
e8:da:85:72:0d:e9:c1:ee:08:c2:1e:b7:bc:5d:bc:
c9:b7:e5:8e:ae:96:e0:31:a4:cb:28:da:ac:f6:52:
a6:ec:5f:66:10:b3:5a:7f:91:9e:d3:de:3a:58:7e:
f8:06:55:b5:c2:18:a6:28:c2:f0:e7:df:31:8a:cf:
3e:ee:20:89:08:25:55:4f:6c:07:d4:47:70:fc:b4:
3f:47:2b:00:6f:fd:5f:54:4e:43:ad:4c:a9:21:36:
49:76:60:ab:1e:73:72:77:d9:aa:30:77:2a:fa:ab:
8f:cc:71:13:75:27:15:8d:d3:f6:65:ec:c9:11:59:
07:78:7c:55:11:74:b6:d9:c7:dd:30:1a:59:c0:85:
e5:cc:04:b7:3c:3f:6e:26:cc:ec:33:a1:20:e4:c7:
82:f9:17:d5:0e:d3:4f:10:31:53:d6:59:63:c6:c2:
23:65:f0:0d:44:1a:91:90:58:92:9d:60:7e:53:f5:
02:72:88:aa:a5:38:ad:ba:4b:33:4f:9c:be:c5:e3:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:42:96:6F:0D:5B:48:13:D1:BB:88:87:C7:43:F3:1D:F5:17:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC47DBE2C07111F1A34FC905CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.14.0-154.84.27.255
Signature Algorithm: sha256WithRSAEncryption
31:84:bf:35:04:f3:85:07:8e:13:fe:fd:1e:ab:fc:f2:b5:bd:
43:22:43:4a:63:50:2a:81:9c:b9:7f:e8:f4:03:5e:8d:9f:50:
0a:64:91:90:fa:0e:28:6a:41:1d:45:a6:e7:3d:ef:52:87:57:
6e:81:ee:ec:02:f7:5a:9b:56:cc:06:8a:8c:ee:d8:2f:d1:03:
99:6d:99:35:41:1e:ee:ae:a9:b8:7c:3a:57:d6:f2:6e:06:e8:
cc:10:a0:36:59:be:89:66:91:5b:1a:39:90:f9:75:26:10:ad:
df:9f:97:9b:4f:91:56:aa:75:db:90:de:c9:3c:88:e5:d7:6a:
27:8f:7b:d3:a3:5d:69:92:be:2e:a7:7c:8d:d2:50:d5:80:32:
29:9d:ac:af:99:a4:18:8a:27:3d:bf:ea:6a:ce:ab:26:5d:3d:
ba:a2:0f:c1:78:59:6c:fa:d3:0f:41:6c:df:d0:b0:d6:61:17:
18:b0:40:bc:10:ff:8d:19:5f:4b:79:f4:7e:22:13:a7:60:7e:
02:7f:73:ff:91:4e:a4:ec:10:c4:32:ed:99:0e:de:fc:ad:3a:
5b:e0:d0:73:cf:dc:0d:2f:5c:fa:eb:3e:e5:52:84:11:a7:f5:
19:3d:a4:a7:55:75:ed:41:66:2a:d1:7f:c5:0e:91:b2:ff:70:
df:e6:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:10:25 2026 by rpki-client