Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1071F9D4BE3011F195A63DD3CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1071F9D4BE3011F195A63DD3CE1D38B0.roa
File: 1071F9D4BE3011F195A63DD3CE1D38B0.roa (raw, json)
Hash identifier: q2auaIDw54bg0J1ponY5odb5zL0Rx1PlCvW92886yTU=
Subject key identifier: 52:AA:D4:C5:92:84:30:BE:34:8A:1D:11:2A:F9:35:71:1A:86:60:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D9ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1071F9D4BE3011F195A63DD3CE1D38B0.roa
Signing time: Fri 02 Oct 2026 07:08:27 +0000
ROA not before: Fri 02 Oct 2026 07:08:23 +0000
ROA not after: Mon 09 Nov 2026 07:08:23 +0000
asID: 401650
IP address blocks: 156.252.96.0/24 maxlen: 24
156.252.97.0/24 maxlen: 24
156.252.103.0/24 maxlen: 24
156.252.104.0/24 maxlen: 24
156.252.105.0/24 maxlen: 24
156.252.106.0/24 maxlen: 24
156.252.107.0/24 maxlen: 24
156.252.108.0/24 maxlen: 24
156.252.109.0/24 maxlen: 24
156.252.110.0/24 maxlen: 24
156.252.111.0/24 maxlen: 24
156.252.112.0/24 maxlen: 24
156.252.113.0/24 maxlen: 24
156.252.114.0/24 maxlen: 24
156.252.115.0/24 maxlen: 24
156.252.116.0/24 maxlen: 24
156.252.117.0/24 maxlen: 24
156.252.118.0/24 maxlen: 24
156.252.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121325 (0x1d9ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 07:08:23 2026 GMT
Not After : Nov 9 07:08:23 2026 GMT
Subject: CN=6abf586b-9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:58:22:b9:ca:29:40:03:3b:4c:90:5f:68:
93:4c:f9:7a:fe:29:43:d0:a7:a8:9f:d3:81:d6:01:
03:00:e4:88:f8:1d:21:80:81:8a:cd:b7:a0:e7:29:
83:9f:28:d5:b4:6a:6c:81:ea:b5:e5:81:12:86:a5:
08:ba:86:78:63:47:f3:55:04:6c:8b:b1:c6:8b:33:
50:f2:31:be:0b:41:3d:6d:5d:86:85:84:8e:72:ef:
bf:65:29:57:31:f1:48:05:0c:c6:44:40:a2:fd:d4:
8f:5b:23:dd:ae:9f:a6:c2:d5:df:2d:8d:a4:41:f8:
69:ef:a0:ca:54:a0:f8:99:50:d0:79:39:d7:e1:27:
b6:26:d6:0c:5c:9e:3a:a3:8a:d2:0c:61:9b:d8:21:
2c:b3:d6:8a:09:9e:71:f8:13:e0:89:d2:74:29:ef:
b4:24:f5:d1:65:33:5b:fe:0f:02:6c:0d:51:90:3a:
a5:e4:ce:87:93:f2:3b:77:80:3f:e0:aa:d7:0a:1b:
71:87:e0:ba:d9:86:cb:72:64:03:b3:e7:6c:6b:54:
2b:d3:69:e3:e8:72:5e:b7:fb:79:84:a0:35:a0:5c:
f1:d7:be:85:e3:ac:bc:77:65:dd:4c:28:51:4b:a3:
62:b1:91:91:e8:51:e7:ee:5e:2b:3c:09:bc:3b:47:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:D4:C5:92:84:30:BE:34:8A:1D:11:2A:F9:35:71:1A:86:60:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1071F9D4BE3011F195A63DD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.96.0/23
156.252.103.0-156.252.119.255
Signature Algorithm: sha256WithRSAEncryption
6e:da:70:99:08:bd:86:bf:41:62:58:5e:b8:c9:b7:53:87:e2:
5d:c5:b7:58:96:9f:c5:10:80:d1:91:62:65:9c:b8:4b:0e:74:
ed:6e:d1:d6:37:bc:76:67:23:e5:9f:a5:ca:7e:d6:c5:ee:96:
a8:bd:9c:d8:9f:48:75:e4:a3:86:c7:93:d2:32:20:00:6d:f7:
89:f1:5b:29:9d:8c:57:4f:3f:1c:c7:bd:48:6c:b7:82:6f:62:
9c:70:8d:a6:ac:3b:67:17:16:65:10:f4:01:3b:8e:22:df:7a:
66:22:b2:10:ff:b0:f3:11:8e:81:fa:62:e3:57:cc:c9:80:b6:
9a:93:18:32:f0:67:c1:7f:99:db:76:72:14:80:86:4a:63:46:
06:28:d0:2a:1a:90:e3:70:ad:2f:2c:9d:7a:58:e9:ce:f2:a3:
0d:a8:a7:13:3c:ac:bd:7e:08:ab:9f:8c:6e:31:8c:5a:bd:bb:
86:5d:79:c6:5e:42:58:ed:39:b7:e8:98:50:49:17:96:08:c7:
ce:fb:fa:c9:27:d3:82:62:91:f1:11:99:dd:b4:40:38:bd:69:
1d:80:9a:7c:1f:0a:d4:09:2a:7f:31:36:cb:41:68:b8:43:c9:
08:ee:12:1c:cb:78:cd:a5:cf:53:b9:13:d2:6f:e6:86:89:ce:
c1:88:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:46:04 2026 by rpki-client