Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/181AD8FA9FA811F19D7C4BACCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/181AD8FA9FA811F19D7C4BACCE1D38B0.roa
File:                     181AD8FA9FA811F19D7C4BACCE1D38B0.roa (raw, json)
Hash identifier:          zc+Z2Q0aKkVu7yjeU44Zzh7+G1qJ59DKa3BSPORYZpo=
Subject key identifier:   84:E8:C0:5C:5A:EA:8E:EF:4B:50:86:B9:97:55:31:34:DF:49:8B:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D098
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/181AD8FA9FA811F19D7C4BACCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:39:34 +0000
ROA not before:           Mon 24 Aug 2026 10:39:30 +0000
ROA not after:            Sat 03 Oct 2026 10:39:30 +0000
asID:                     140869
IP address blocks:        156.225.80.0/24 maxlen: 24
                          156.225.81.0/24 maxlen: 24
                          156.225.82.0/24 maxlen: 24
                          156.225.83.0/24 maxlen: 24
                          156.225.84.0/24 maxlen: 24
                          156.225.85.0/24 maxlen: 24
                          156.225.86.0/24 maxlen: 24
                          156.225.87.0/24 maxlen: 24
                          156.225.88.0/24 maxlen: 24
                          156.225.89.0/24 maxlen: 24
                          156.225.90.0/24 maxlen: 24
                          156.225.91.0/24 maxlen: 24
                          156.225.92.0/24 maxlen: 24
                          156.225.93.0/24 maxlen: 24
                          156.225.94.0/24 maxlen: 24
                          156.225.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118936 (0x1d098)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 10:39:30 2026 GMT
            Not After : Oct  3 10:39:30 2026 GMT
        Subject: CN=6a8c1f65-9032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:2c:d9:99:a1:85:04:a3:c7:b0:32:c7:ca:
                    82:cc:86:1e:43:56:d6:02:38:ea:41:56:d1:2f:93:
                    49:31:16:9c:b5:c7:0e:28:a5:c0:d5:61:ba:45:e0:
                    04:a8:5a:d2:ff:8e:a3:03:4a:0a:37:8d:07:98:ab:
                    ec:01:57:a5:9f:48:e4:d1:38:ec:b6:40:9d:4f:a4:
                    68:3e:89:5f:b4:eb:93:b3:3d:c0:8e:01:36:d8:60:
                    b1:d1:75:79:ec:6e:0e:ae:5f:a9:92:b2:69:ac:2e:
                    05:0f:c8:7c:6d:7b:1f:ee:18:c0:fe:7e:2e:30:cf:
                    4d:0b:02:4d:05:9e:f1:ba:a0:f8:7b:4f:c6:c7:16:
                    2a:19:68:92:25:58:2f:4f:39:6d:33:08:d5:6e:f9:
                    6c:2c:38:68:82:71:fa:54:08:ef:4f:c2:e7:6b:29:
                    07:88:d8:c3:60:87:8f:2c:76:4d:e4:9f:18:5a:34:
                    86:a6:b6:28:09:2b:f4:bb:f5:ae:b3:e4:af:2b:ad:
                    83:ff:85:cd:f9:9b:9f:c7:f6:bc:c4:71:d5:a2:a4:
                    2b:14:4f:2b:ae:3b:76:32:4f:39:24:03:8f:f6:00:
                    7a:5f:0b:bb:08:62:01:5a:41:97:56:41:29:57:a9:
                    92:7f:75:f3:92:7d:8e:90:ed:cc:d9:a1:ce:a6:0f:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E8:C0:5C:5A:EA:8E:EF:4B:50:86:B9:97:55:31:34:DF:49:8B:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/181AD8FA9FA811F19D7C4BACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:93:7f:a1:3e:35:b7:f3:74:a0:ad:98:c1:e3:0c:8f:e7:89:
         e6:19:43:17:35:0d:7f:2a:74:be:39:6b:1e:5f:d8:7f:ec:1c:
         45:38:e2:1f:4d:a2:65:53:3d:8e:f9:7d:fc:62:01:1d:0f:86:
         0d:c2:79:0a:ec:52:46:14:96:51:54:35:fd:cd:e3:02:89:93:
         7c:03:4e:2c:c1:bd:96:4e:b5:29:85:bd:80:40:ca:02:0a:7f:
         7f:28:3a:04:33:b1:d3:85:a1:1e:ba:f9:98:55:5e:6b:02:6f:
         0a:3b:99:8f:14:a8:31:3c:0d:7c:e5:20:89:a9:14:ad:00:fb:
         3c:67:e9:4f:b1:ae:b2:fb:aa:01:79:3b:0c:22:4c:95:00:26:
         62:97:1a:69:f4:4c:1a:a4:e1:6b:23:17:e8:2f:75:26:f7:1d:
         e0:cd:c1:5c:ed:f1:7a:f0:99:fb:43:a6:81:ae:ae:3d:99:89:
         d1:e5:3c:ac:88:55:74:d2:3c:c9:db:8c:6a:fb:a5:b1:fe:99:
         b8:5f:bf:96:cd:47:33:77:6d:be:16:6f:ef:04:ad:7c:d8:c4:
         7f:d9:f2:4e:f2:59:24:a0:2f:04:81:ff:c4:1b:9b:f1:85:64:
         64:1b:e9:be:cf:45:ae:50:d6:b2:ad:22:08:bf:d6:64:d5:84:
         19:5a:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:14:43 2026 by rpki-client