
Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118A73709D4511F1BD6769FCCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118A73709D4511F1BD6769FCCE1D38B0.roa
File: 118A73709D4511F1BD6769FCCE1D38B0.roa (raw, json)
Hash identifier: EN60ksnVKZFwRd+VtGDpBvBEV8V3Za/7UJsol20Vn68=
Subject key identifier: 70:4B:A0:D6:C9:38:B9:D6:7D:3C:17:C7:A2:5A:AD:76:27:CC:A2:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CF89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118A73709D4511F1BD6769FCCE1D38B0.roa
Signing time: Fri 21 Aug 2026 09:45:40 +0000
ROA not before: Fri 21 Aug 2026 09:45:36 +0000
ROA not after: Thu 08 Oct 2026 09:45:36 +0000
asID: 32043
IP address blocks: 45.201.10.0/24 maxlen: 24
45.201.11.0/24 maxlen: 24
45.201.100.0/24 maxlen: 24
45.201.101.0/24 maxlen: 24
45.201.110.0/24 maxlen: 24
45.201.111.0/24 maxlen: 24
45.201.112.0/24 maxlen: 24
45.201.113.0/24 maxlen: 24
45.201.120.0/24 maxlen: 24
45.201.121.0/24 maxlen: 24
45.201.122.0/24 maxlen: 24
45.201.123.0/24 maxlen: 24
45.201.124.0/24 maxlen: 24
45.203.35.0/24 maxlen: 24
45.203.36.0/24 maxlen: 24
45.203.37.0/24 maxlen: 24
45.203.38.0/24 maxlen: 24
45.203.39.0/24 maxlen: 24
45.204.54.0/24 maxlen: 24
45.204.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118665 (0x1cf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 09:45:36 2026 GMT
Not After : Oct 8 09:45:36 2026 GMT
Subject: CN=6a881e44-fcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:e6:77:94:2c:04:ff:b7:32:57:c9:d7:56:
4c:ac:52:a1:84:b7:c4:fe:ee:46:95:1c:10:82:0e:
6e:3e:7d:ec:f7:ef:d7:99:d8:91:78:2b:6e:7e:4c:
f1:1e:ef:b0:ee:b2:9e:91:28:74:b2:69:f3:28:65:
1a:25:52:c1:9b:e2:14:02:c9:5a:92:a9:d1:9c:ab:
f6:8d:9f:79:22:7d:3f:64:ae:81:a3:43:13:28:01:
4e:8f:39:0d:bd:81:17:f8:3d:e2:55:b2:fb:00:86:
86:1c:b6:bd:83:62:58:e9:c8:e1:94:b4:a4:07:12:
d3:34:ba:66:da:c1:d5:81:04:c2:23:7f:62:bf:21:
42:d9:f7:68:a6:b9:76:0c:be:6f:d3:3e:e7:f6:dc:
c1:f9:18:09:bf:8d:e0:c1:4c:5f:b6:a2:c0:55:07:
c7:25:1a:52:43:27:1d:b7:83:10:d9:b7:97:8d:b6:
a6:eb:c1:31:1c:cf:63:22:43:ea:b1:1b:02:65:84:
e6:02:84:b5:49:e0:b6:8c:b0:04:8b:3a:62:84:78:
a9:63:4b:a0:e8:ca:f2:ea:ce:9a:17:8c:61:41:74:
a6:62:17:e6:f5:92:4c:9c:40:6f:eb:51:cb:78:4a:
25:6c:70:c7:31:74:f5:78:b9:20:50:55:cc:02:1b:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:A0:D6:C9:38:B9:D6:7D:3C:17:C7:A2:5A:AD:76:27:CC:A2:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/118A73709D4511F1BD6769FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.201.100.0/23
45.201.110.0-45.201.113.255
45.201.120.0-45.201.124.255
45.203.35.0-45.203.39.255
45.204.54.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:43:88:f5:76:40:0b:04:a3:d1:0f:9c:22:8c:35:5b:bd:21:
51:b2:4d:16:ab:bd:bf:23:07:86:4e:f5:7d:fc:29:fe:85:14:
5b:5f:4e:64:27:58:c8:38:94:84:da:84:b5:ad:47:1f:65:5f:
43:c4:da:fb:49:9c:eb:90:59:0b:97:ea:27:18:0a:d9:cb:47:
17:d6:37:a8:14:54:79:fe:2a:17:58:54:40:cd:3b:d3:dd:32:
be:69:8c:de:f7:cb:46:82:82:04:0f:d1:af:f4:11:dd:ce:3c:
6e:67:14:2b:c5:2f:5f:82:73:9e:d3:f1:cf:c5:48:0f:d0:9d:
a9:85:f4:98:65:a9:2a:9e:f5:68:47:4d:d8:6e:46:aa:14:86:
01:b3:0f:ef:fa:85:27:06:d5:d9:00:fe:6f:a2:9a:2f:79:55:
24:cb:99:ae:29:97:c2:c0:de:84:27:cd:98:8f:d2:dd:63:01:
33:04:ee:5a:8a:38:61:12:79:a9:68:2e:03:c8:c2:1f:1a:3f:
dd:5e:85:0e:7b:43:90:04:15:af:b6:0b:8a:ca:07:d8:ab:63:
78:d2:f4:af:31:c5:d1:18:5e:80:9f:c2:b4:1b:b9:9c:3e:ec:
43:97:3c:48:25:db:64:51:5e:a0:64:02:f4:3b:75:cd:c6:66:
b3:c1:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:42 2026 by rpki-client