Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFC64BEAA06511F18E3E9BAECE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFC64BEAA06511F18E3E9BAECE1D38B0.roa
File: FFC64BEAA06511F18E3E9BAECE1D38B0.roa (raw, json)
Hash identifier: YhXb2xLu/1wfLuUoDeFsf5xIGHbJIU+T2/W9d2SLzvs=
Subject key identifier: B4:63:03:B9:C5:D0:1A:53:97:DC:88:F5:6D:C1:23:A9:7A:B0:B1:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E2CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFC64BEAA06511F18E3E9BAECE1D38B0.roa
Signing time: Tue 25 Aug 2026 09:18:57 +0000
ROA not before: Tue 25 Aug 2026 09:18:53 +0000
ROA not after: Fri 02 Oct 2026 09:18:53 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
154.81.41.0/24 maxlen: 24
154.81.42.0/24 maxlen: 24
154.81.43.0/24 maxlen: 24
154.81.44.0/24 maxlen: 24
154.81.45.0/24 maxlen: 24
154.81.46.0/24 maxlen: 24
154.81.47.0/24 maxlen: 24
154.81.52.0/24 maxlen: 24
154.81.53.0/24 maxlen: 24
154.81.54.0/24 maxlen: 24
154.81.55.0/24 maxlen: 24
154.81.192.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 12:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123594 (0x1e2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 25 09:18:53 2026 GMT
Not After : Oct 2 09:18:53 2026 GMT
Subject: CN=6a8d5e01-43c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:b1:cc:92:65:dc:fb:f8:15:5b:5e:73:ed:
5e:e0:66:23:90:11:78:65:bf:10:ae:19:60:98:c9:
6e:5d:73:05:fa:c2:9f:6f:a9:03:99:c8:a4:2f:ea:
f8:e6:b7:86:0e:c4:e4:d9:f5:69:6a:e4:b5:ec:06:
40:32:fd:12:88:8f:5c:da:f6:58:52:d6:b7:85:28:
13:58:42:30:9e:07:0f:ab:05:e6:47:fa:f7:e9:c9:
14:6a:45:eb:95:9f:07:8c:b7:d3:84:74:38:e2:10:
89:68:39:b9:aa:0b:44:e0:c0:4b:d4:a1:b1:d2:b5:
d8:01:a3:ff:d4:77:e4:3f:76:9b:2a:ee:f4:16:29:
db:91:58:24:a5:8e:e7:9b:47:fc:f3:1c:95:a5:65:
e1:b8:45:15:cc:69:bb:29:8a:3a:c7:13:32:53:7b:
75:f9:9d:2a:8c:88:fa:05:db:42:7b:95:45:01:35:
19:a2:08:b8:84:a4:87:d3:0b:11:8c:e1:db:83:2c:
2f:2c:0a:fa:e4:4d:b7:ac:fc:1a:11:5f:68:07:08:
55:ed:20:33:09:2e:b5:94:6b:da:a3:87:93:e3:45:
08:a7:1f:d3:48:68:13:31:d7:66:57:8e:cf:3c:de:
16:09:40:3f:53:4f:ef:86:79:31:3b:8e:b1:00:a2:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:63:03:B9:C5:D0:1A:53:97:DC:88:F5:6D:C1:23:A9:7A:B0:B1:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFC64BEAA06511F18E3E9BAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/21
154.81.52.0/22
154.81.192.0/24
154.81.194.0-154.81.199.255
Signature Algorithm: sha256WithRSAEncryption
27:85:2e:d2:f8:e0:81:b6:d0:ab:ed:8d:08:51:dc:5a:e0:8c:
36:13:10:58:5e:9d:88:0a:5c:79:af:0e:62:1a:fb:b2:52:fd:
4e:11:cb:79:95:6c:dd:c3:43:76:79:c2:4c:ef:b5:5b:d2:e5:
31:53:1b:ed:f0:88:40:69:94:1b:ba:49:7f:6c:19:06:92:f8:
60:64:d0:0a:c4:d6:ba:e1:2c:e8:fc:5e:58:76:8b:b6:a5:b4:
31:d3:45:48:a8:7b:7f:59:f5:9f:74:63:65:1b:05:97:23:7d:
fe:97:86:8a:ca:02:96:58:bf:63:20:b2:d7:b8:b5:3a:d5:01:
ee:37:6c:60:4c:14:bf:63:af:5c:5e:02:c5:82:e9:3f:75:cc:
89:07:5e:e9:14:70:2a:c4:97:bb:df:a8:59:45:03:79:22:89:
ae:c3:64:00:93:c5:73:a9:dd:da:6d:bd:20:56:90:1a:d5:23:
a8:ae:7f:79:82:b0:9d:b6:04:af:58:b7:69:b7:ce:c6:cc:08:
be:ce:c0:09:6c:d8:61:5b:e0:44:94:c0:15:34:d3:9e:4d:a8:
6e:7f:f1:68:20:db:34:63:86:ea:fe:ff:f4:9c:ee:79:b0:81:
a6:c3:79:4f:2f:ae:b6:dc:28:e1:71:49:65:f5:3e:2a:16:aa:
26:d9:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:52 2026 by rpki-client