Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018AA4B69D3811F1A920A2AFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018AA4B69D3811F1A920A2AFCE1D38B0.roa
File: 018AA4B69D3811F1A920A2AFCE1D38B0.roa (raw, json)
Hash identifier: rojztmD7/s47FgPJ4uVVWGJHeYHmI9opd8JkD8lCYeU=
Subject key identifier: 58:BB:55:0B:E3:69:B7:9D:E1:A6:27:8D:60:72:E2:6F:10:1A:15:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CF73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018AA4B69D3811F1A920A2AFCE1D38B0.roa
Signing time: Fri 21 Aug 2026 08:12:10 +0000
ROA not before: Fri 21 Aug 2026 08:12:05 +0000
ROA not after: Thu 08 Oct 2026 08:12:05 +0000
asID: 9304
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.245.136.0/23 maxlen: 24
156.245.152.0/22 maxlen: 24
156.245.156.0/22 maxlen: 24
156.245.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118643 (0x1cf73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:12:05 2026 GMT
Not After : Oct 8 08:12:05 2026 GMT
Subject: CN=6a88085a-42ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:4f:15:e3:29:10:0f:c6:7f:96:51:64:48:
00:00:22:54:85:cc:d5:61:d1:e6:f5:af:a5:2a:ce:
e7:f6:d5:c5:aa:0a:3a:18:71:3c:79:c0:ff:e6:7d:
7e:b3:ff:65:54:47:22:93:06:a2:71:7c:dd:b7:24:
ed:57:9a:80:a4:44:e0:60:86:ee:ca:22:22:8b:13:
1f:48:1d:51:df:7c:32:05:51:66:5a:a3:dd:0a:16:
e7:b7:eb:55:01:68:71:98:59:51:bf:5b:ed:ec:6a:
92:eb:f7:31:f7:12:9c:c0:ed:09:3b:39:82:63:87:
28:7b:9e:87:dc:1d:f7:ec:20:0c:c7:79:53:c8:b1:
43:bc:e5:29:58:16:da:0a:aa:38:3f:f4:c8:f4:90:
05:35:2a:1f:1b:72:63:83:51:bf:69:9c:e2:b6:a3:
27:e6:8b:58:d7:ee:81:dc:25:00:44:73:89:d7:c2:
72:2d:be:4e:16:2e:95:48:e1:b0:42:21:79:62:70:
e9:f7:56:cd:34:be:fb:af:a1:3e:e0:2c:49:1a:20:
34:b4:a9:63:35:7d:0a:b8:da:32:b9:82:09:f1:09:
14:b9:ba:3e:a9:6d:63:5b:36:24:66:42:7f:d0:e4:
ce:22:eb:55:2c:9c:73:20:20:15:86:1d:02:f3:e6:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:55:0B:E3:69:B7:9D:E1:A6:27:8D:60:72:E2:6F:10:1A:15:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018AA4B69D3811F1A920A2AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0-156.231.6.255
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.233.66.0/24
156.245.136.0/23
156.245.152.0-156.245.160.255
Signature Algorithm: sha256WithRSAEncryption
79:9e:ba:e7:f8:b2:e8:13:e6:1b:ec:f0:b5:e3:1e:e3:83:9a:
fd:cc:43:ad:07:86:e4:2e:0e:68:be:f2:29:5c:7e:ae:a0:61:
ba:1f:c5:81:81:44:ad:a5:d7:31:ea:d9:bc:ef:46:22:f0:e6:
26:a8:bd:f1:aa:a6:69:85:bb:87:24:ec:c5:5d:31:7c:96:da:
42:da:b0:14:1e:98:d4:aa:fd:7a:7a:d5:60:b1:54:53:43:34:
1b:2a:08:2e:a1:fa:31:4f:ac:ed:5d:80:34:58:ea:4a:c9:a7:
f1:2f:3e:5b:79:c7:44:64:71:e0:38:d2:1a:ff:4c:25:b4:dd:
e3:15:80:eb:0d:c8:57:9b:a3:80:c5:9d:25:27:4d:f4:cd:d2:
03:4f:5d:31:25:c1:8f:d6:b4:af:e6:1e:1e:1f:7b:b6:36:dd:
e4:69:7e:bf:0c:8d:b6:5d:dd:96:9f:e4:f2:42:ce:d7:fb:f5:
84:19:c8:1b:5a:81:d4:61:e5:9d:57:8c:f1:53:5f:1b:f0:f4:
8a:0c:4f:9f:ca:db:ec:60:1f:1c:88:a4:c8:ad:4e:9c:26:ea:
d6:dc:27:9f:06:34:1d:fa:c7:68:25:a6:aa:35:75:62:82:75:
eb:41:e9:8f:9a:b2:63:ca:99:3f:2f:3b:d4:c4:0c:7e:7d:c3:
6e:e1:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:56 2026 by rpki-client