Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA16F048F0C11F1AA28C1C2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA16F048F0C11F1AA28C1C2CE1D38B0.roa
File: 0CA16F048F0C11F1AA28C1C2CE1D38B0.roa (raw, json)
Hash identifier: wc0JKqT4OcM3dhGNvotU+2bX0Bqlld1eNM/UqAnXBU8=
Subject key identifier: 22:7F:8F:0B:DE:42:36:F4:DB:B7:BA:A6:63:EF:80:D6:5A:BC:DD:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C954
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA16F048F0C11F1AA28C1C2CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:22:14 +0000
ROA not before: Mon 03 Aug 2026 07:22:09 +0000
ROA not after: Thu 10 Sep 2026 07:22:09 +0000
asID: 138915
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.2.0/24 maxlen: 24
156.244.3.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.8.0/24 maxlen: 24
156.244.23.0/24 maxlen: 24
156.244.24.0/24 maxlen: 24
156.244.36.0/24 maxlen: 24
156.244.42.0/24 maxlen: 24
156.244.43.0/24 maxlen: 24
156.244.44.0/24 maxlen: 24
156.244.45.0/24 maxlen: 24
156.244.46.0/24 maxlen: 24
156.244.47.0/24 maxlen: 24
156.244.48.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117076 (0x1c954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 07:22:09 2026 GMT
Not After : Sep 10 07:22:09 2026 GMT
Subject: CN=6a7041a6-bcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:a7:c3:5b:41:e6:28:ef:ca:e4:26:32:37:
8e:85:59:d9:3e:77:4c:8f:5c:ab:43:48:52:e8:15:
52:b5:48:99:5b:a7:9d:8c:01:5e:d7:e9:af:f4:e0:
09:e3:f3:79:60:a2:03:35:16:f8:2f:be:44:53:15:
c6:18:a6:fc:cb:90:65:4f:47:a7:99:09:0e:4a:04:
c2:4a:7c:46:fb:12:6c:1c:b8:98:18:f2:e7:99:bc:
a6:61:28:fe:b9:ac:ba:4f:87:84:a6:f8:54:6e:40:
63:87:01:87:8f:0a:5e:a0:dd:59:b5:3d:d8:1e:7b:
ad:2b:83:81:bc:c6:fd:23:f4:9e:9a:4e:b3:a1:ae:
7d:db:47:f9:95:b4:a2:94:c7:78:15:3a:cf:db:f2:
69:99:db:c6:b0:97:79:65:98:56:fd:e9:fd:0c:ab:
fd:42:11:77:b7:60:e3:4f:ee:f4:dc:a2:53:fd:c6:
9b:d7:7f:54:eb:03:76:cc:3d:4a:7f:02:f2:78:0f:
ee:93:d6:ee:87:97:1e:10:3b:bb:d5:06:99:d9:dc:
9e:91:ef:60:56:e7:54:35:86:4b:80:d9:c3:2e:46:
4b:22:e7:12:b1:e6:44:e5:55:de:86:89:80:c8:f8:
7f:34:b8:7d:d3:df:a1:a4:77:79:e0:f3:a8:b7:48:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:8F:0B:DE:42:36:F4:DB:B7:BA:A6:63:EF:80:D6:5A:BC:DD:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA16F048F0C11F1AA28C1C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0-156.244.8.255
156.244.23.0-156.244.24.255
156.244.36.0/24
156.244.42.0-156.244.48.255
156.244.62.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:6e:3a:e9:29:ca:c0:3a:30:3e:8a:7c:02:24:1f:ba:30:98:
e1:48:ae:d0:16:2b:aa:77:e2:c0:7f:c5:ae:12:76:f9:4b:27:
d8:18:0d:6e:33:09:dc:61:70:ec:46:cb:12:38:69:01:91:6b:
f2:af:e5:98:b8:dd:0f:12:7a:29:b3:0a:c5:fa:65:39:8f:b0:
e0:b1:37:1d:c0:97:8e:94:eb:18:ab:ab:0e:2f:cf:79:04:02:
8e:18:b1:b3:66:15:75:7e:e3:12:f8:f2:f0:7f:e2:22:8a:19:
f4:67:11:87:74:48:b3:d6:02:0e:69:3f:f6:75:2e:de:ee:11:
5d:19:f4:ae:22:cf:e2:4e:5b:71:16:1d:ee:0c:6e:7f:e7:28:
d6:3a:59:33:c6:c5:aa:d5:25:76:d7:3a:02:68:3d:18:1c:d7:
a3:32:e9:c1:d3:b3:c9:a4:8f:68:a7:94:6c:7f:c6:46:b7:6b:
78:6f:a2:1b:66:a2:6b:c9:a1:d2:c1:83:db:da:5c:4e:6e:91:
bf:5d:78:2b:24:d4:6f:0d:ad:3b:93:72:54:78:86:e5:bc:7a:
78:ae:52:da:e0:a4:df:ae:d4:51:5d:e2:55:96:6c:ca:3c:bd:
7f:90:6b:b2:58:cc:ca:7d:2f:b4:52:bd:8d:d2:77:47:48:b9:
dd:68:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:34 2026 by rpki-client