Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/163E39B0A05611F1940D6ACFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/163E39B0A05611F1940D6ACFCE1D38B0.roa
File: 163E39B0A05611F1940D6ACFCE1D38B0.roa (raw, json)
Hash identifier: sPGWAIbc5OXr68bGP71LvTgQ3khK2EAlktByXNChKh8=
Subject key identifier: 7B:AD:C1:1A:E1:88:DE:75:FC:C4:B9:37:FE:71:27:7B:8A:9B:5B:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D0C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/163E39B0A05611F1940D6ACFCE1D38B0.roa
Signing time: Tue 25 Aug 2026 07:25:03 +0000
ROA not before: Tue 25 Aug 2026 07:24:59 +0000
ROA not after: Fri 04 Sep 2026 07:24:59 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.227.143.0/24 maxlen: 24
156.227.145.0/24 maxlen: 24
156.231.98.0/24 maxlen: 24
156.231.101.0/24 maxlen: 24
156.232.32.0/24 maxlen: 24
156.232.33.0/24 maxlen: 24
156.233.109.0/24 maxlen: 24
156.242.66.0/24 maxlen: 24
156.242.67.0/24 maxlen: 24
156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.172.0/24 maxlen: 24
156.249.173.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118977 (0x1d0c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 25 07:24:59 2026 GMT
Not After : Sep 4 07:24:59 2026 GMT
Subject: CN=6a8d434f-ef36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:78:97:a0:39:85:72:68:9c:80:06:44:07:
c1:36:31:dd:72:7d:a8:1e:3f:5c:a7:7b:8c:02:f0:
11:6c:ac:26:fa:d8:4f:9c:1d:1b:08:3b:6e:0e:38:
6a:22:94:ac:ad:84:c0:d2:f4:66:19:90:9a:77:ce:
21:9e:14:41:26:13:5f:f3:e5:13:57:a7:e6:ba:dc:
26:3c:2d:94:65:18:0c:f7:f2:51:af:4f:21:2f:65:
d4:ff:62:6d:4a:d3:cc:47:42:2a:bd:9f:1b:6a:75:
e4:da:b6:51:4d:84:1a:bf:d1:0d:07:59:c0:b0:ee:
e1:33:09:90:f0:7f:c1:f2:d3:ec:94:09:c9:da:6c:
78:39:78:f1:c9:21:2a:c6:5a:7b:9a:ef:db:04:38:
f8:7d:20:3d:ce:bc:46:a9:57:45:b1:08:d9:20:68:
e0:ca:b6:ea:fa:ea:92:d0:db:f8:92:75:2b:f7:2e:
dd:89:8b:29:c7:bc:c7:15:02:7d:e7:86:42:63:39:
29:b1:bd:f3:f9:10:19:e7:f7:46:e1:6a:c8:38:ce:
98:ca:65:a9:08:47:b7:28:26:a6:44:e4:ca:d0:fb:
25:f4:cc:2f:58:a4:29:8a:35:d1:fd:08:8b:a2:c2:
49:43:6f:2e:b9:d2:c8:b9:8d:b9:9b:d7:f8:28:15:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:C1:1A:E1:88:DE:75:FC:C4:B9:37:FE:71:27:7B:8A:9B:5B:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/163E39B0A05611F1940D6ACFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.227.143.0/24
156.227.145.0/24
156.231.98.0/24
156.231.101.0/24
156.232.32.0/23
156.233.109.0/24
156.242.66.0-156.242.68.255
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.172.0/23
156.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d3:76:6b:fc:60:6e:7a:dd:a9:5e:de:a3:ca:56:33:01:71:
56:bd:92:63:33:71:e2:9e:db:6f:a3:c7:a9:1e:25:e3:50:96:
d2:2a:4d:7a:6d:66:c7:52:a9:37:f8:b8:b8:f3:b8:31:32:e8:
d2:b8:06:cb:a6:2f:29:1b:8b:41:cf:35:a3:f8:dd:14:b9:49:
56:74:34:c6:83:83:5e:36:98:62:0c:25:fa:d5:1a:40:40:73:
53:22:6b:f1:3b:0d:ef:19:3d:8b:3e:2d:e0:c4:46:b7:dc:3c:
bf:b5:01:eb:7a:4b:e9:ba:15:ad:22:80:7c:7f:7a:5d:df:1e:
a1:8e:ed:0a:0b:ca:bc:c0:da:c0:a0:aa:eb:cf:67:41:42:39:
c6:09:ba:a5:b5:51:3b:ae:2f:fa:34:da:e7:14:06:51:4e:ca:
99:52:7a:39:e6:0d:35:d5:95:5d:ae:72:20:c2:31:4d:89:69:
63:08:72:58:64:54:70:13:5b:6c:7b:a0:39:28:4a:f3:7e:f7:
c9:90:86:8b:c1:ad:b2:15:49:73:21:87:54:73:b7:04:36:db:
97:d5:80:ee:7d:de:d6:c2:ef:40:d7:49:c2:5d:4d:20:57:2c:
55:0e:00:20:39:e9:89:62:98:b2:29:64:f7:9d:fd:da:1b:42:
5a:79:db:fa
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIDAdDBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI1MDcyNDU5WhcNMjYwOTA0MDcyNDU5WjAYMRYw
FAYDVQQDEw02YThkNDM0Zi1lZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt3d4l6A5hXJonIAGRAfBNjHdcn2oHj9cp3uMAvARbKwm+thPnB0bCDtu
DjhqIpSsrYTA0vRmGZCad84hnhRBJhNf8+UTV6fmutwmPC2UZRgM9/JRr08hL2XU
/2JtStPMR0IqvZ8banXk2rZRTYQav9ENB1nAsO7hMwmQ8H/B8tPslAnJ2mx4OXjx
ySEqxlp7mu/bBDj4fSA9zrxGqVdFsQjZIGjgyrbq+uqS0Nv4knUr9y7diYspx7zH
FQJ954ZCYzkpsb3z+RAZ5/dG4WrIOM6YymWpCEe3KCamROTK0Psl9MwvWKQpijXR
/QiLosJJQ28uudLIuY25m9f4KBVcYwIDAQABo4IDADCCAvwwHQYDVR0OBBYEFHut
wRrhiN51/MS5N/5xJ3uKm1vdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNjNFMzlCMEEwNTYxMUYxOTQwRDZBQ0ZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQAnOOFAwQAnOOPAwQAnOORAwQA
nOdiAwQAnOdlAwQBnOggAwQAnOltMAwDBAGc8kIDBACc8kQDBACc8lAwDAMEAJzy
WQMEAJzyWgMEAZzyXAMEAJzz5QMEAZz5rAMEAJz5rzANBgkqhkiG9w0BAQsFAAOC
AQEAmNN2a/xgbnrdqV7eo8pWMwFxVr2SYzNx4p7bb6PHqR4l41CW0ipNem1mx1Kp
N/i4uPO4MTLo0rgGy6YvKRuLQc81o/jdFLlJVnQ0xoODXjaYYgwl+tUaQEBzUyJr
8TsN7xk9iz4t4MRGt9w8v7UB63pL6boVrSKAfH96Xd8eoY7tCgvKvMDawKCq689n
QUI5xgm6pbVRO64v+jTa5xQGUU7KmVJ6OeYNNdWVXa5yIMIxTYlpYwhyWGRUcBNb
bHugOShK8373yZCGi8GtshVJcyGHVHO3BDbbl9WA7n3e1sLvQNdJwl1NIFcsVQ4A
IDnpiWKYsilk95392htCWnnb+g==
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:32 2026 by rpki-client