Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05101FF8961711F1B64C90EBCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05101FF8961711F1B64C90EBCE1D38B0.roa
File: 05101FF8961711F1B64C90EBCE1D38B0.roa (raw, json)
Hash identifier: DM2xMInzvh1jLNU75AZD8PL6IeBFes9df43UNAnU5Fc=
Subject key identifier: AB:D2:2A:CC:8C:E7:C6:81:EC:30:1D:C4:FC:6C:2A:75:DD:1B:8B:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CB9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05101FF8961711F1B64C90EBCE1D38B0.roa
Signing time: Wed 12 Aug 2026 06:28:24 +0000
ROA not before: Wed 12 Aug 2026 06:28:20 +0000
ROA not after: Tue 06 Jun 2028 06:28:20 +0000
asID: 17561
IP address blocks: 45.197.128.0/24 maxlen: 24
45.197.130.0/24 maxlen: 24
45.197.200.0/24 maxlen: 24
45.197.201.0/24 maxlen: 24
45.197.205.0/24 maxlen: 24
45.197.206.0/24 maxlen: 24
45.197.224.0/24 maxlen: 24
45.197.226.0/24 maxlen: 24
45.197.229.0/24 maxlen: 24
45.197.231.0/24 maxlen: 24
45.197.233.0/24 maxlen: 24
45.197.235.0/24 maxlen: 24
45.197.237.0/24 maxlen: 24
45.197.239.0/24 maxlen: 24
45.202.89.0/24 maxlen: 24
45.204.2.0/24 maxlen: 24
45.204.3.0/24 maxlen: 24
45.204.79.0/24 maxlen: 24
45.206.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117662 (0x1cb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 06:28:20 2026 GMT
Not After : Jun 6 06:28:20 2028 GMT
Subject: CN=6a7c1288-4c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:39:92:76:b0:87:22:e1:ee:87:e3:95:f3:
0f:cb:15:95:fc:04:37:4a:c1:6c:96:72:e1:ec:54:
09:88:54:31:dc:08:4f:d4:eb:39:28:7f:ee:9d:b7:
c6:da:70:c0:b4:ea:d3:ad:5a:44:ef:ba:1a:c9:2b:
f9:6b:f4:29:48:13:eb:6e:0a:b3:17:4c:67:23:9c:
1f:68:d0:48:5b:ae:18:ad:4b:be:0c:f2:d9:f7:5c:
e9:b9:58:b5:ed:51:a9:e0:50:43:6a:54:5b:86:31:
92:23:e8:00:da:2a:ca:e5:ff:df:b9:ae:82:ae:0d:
dd:4c:03:75:08:87:6e:d8:dc:a0:a1:eb:d0:56:c6:
c5:d9:41:1f:6a:7e:a0:77:19:25:65:91:0c:58:d2:
5e:64:c8:de:06:4b:15:aa:25:ee:f3:d6:ed:50:21:
14:e1:a1:71:ec:84:99:13:28:99:4c:9c:8a:e4:50:
4a:d1:bd:83:cd:7c:0e:04:78:59:a1:fd:e7:fe:e8:
f5:b7:cd:03:46:52:3e:59:82:96:f9:91:1a:48:e8:
f7:af:6c:d7:d8:11:7e:6e:9b:56:d2:d1:5b:07:60:
d3:71:82:6d:57:7f:c0:97:c2:95:fc:85:a2:e3:d8:
ae:e5:1e:7d:a7:d9:d9:28:11:c1:76:fc:3d:40:69:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:2A:CC:8C:E7:C6:81:EC:30:1D:C4:FC:6C:2A:75:DD:1B:8B:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05101FF8961711F1B64C90EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.128.0/24
45.197.130.0/24
45.197.200.0/23
45.197.205.0-45.197.206.255
45.197.224.0/24
45.197.226.0/24
45.197.229.0/24
45.197.231.0/24
45.197.233.0/24
45.197.235.0/24
45.197.237.0/24
45.197.239.0/24
45.202.89.0/24
45.204.2.0/23
45.204.79.0/24
45.206.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7a:7f:d8:13:9a:bd:2d:a7:af:0f:66:91:e4:9d:10:79:01:
cc:8e:a4:30:bd:ed:95:3d:5a:ec:98:d4:95:c5:51:c9:54:62:
4b:56:61:17:56:37:4e:e1:4a:c8:b4:06:1e:f2:9d:cc:f1:42:
4b:00:0b:42:95:e7:39:a2:4c:04:48:b3:34:86:79:d5:f4:92:
28:bf:11:32:6f:96:23:30:5c:7e:cf:4d:55:0d:1e:39:95:8f:
f4:cb:cd:55:10:c9:10:ef:41:1f:a1:0b:87:99:4d:33:d5:16:
ad:db:a9:bb:53:35:ed:c4:85:45:9b:1b:72:22:3a:0a:42:cb:
48:f4:e5:51:43:ed:6e:1f:49:d1:e0:ea:b5:ee:5c:ec:19:d3:
f8:6f:70:85:b3:d8:ae:1f:1b:2a:97:18:26:e1:26:13:76:90:
25:d1:e8:bb:b4:4c:98:77:f7:de:b2:52:0f:08:ae:5e:b0:f7:
5e:a0:9b:a9:4e:8b:d5:f3:ac:42:52:5c:17:76:4d:cf:f9:89:
4a:f8:45:95:50:6b:77:f5:c2:9d:74:84:73:2c:88:51:06:73:
57:c9:f6:95:eb:54:d4:17:08:7a:d0:72:d3:3e:f9:57:f7:89:
dc:b1:c1:d7:94:43:44:7f:08:30:f0:65:d1:5a:2b:0a:2d:93:
7d:31:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:49:06 2026 by rpki-client