Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B5CB172A6AC11F1A36E47ABCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B5CB172A6AC11F1A36E47ABCE1D38B0.roa
File: 1B5CB172A6AC11F1A36E47ABCE1D38B0.roa (raw, json)
Hash identifier: FDvyq+j4tjYISUSLao3UWYwKBDo4KNTm8+HdInjquBE=
Subject key identifier: 9B:F8:14:AA:12:30:31:0B:0E:15:F2:9D:2A:7F:23:A3:08:E1:5D:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D26A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B5CB172A6AC11F1A36E47ABCE1D38B0.roa
Signing time: Wed 02 Sep 2026 08:55:55 +0000
ROA not before: Wed 02 Sep 2026 08:55:51 +0000
ROA not after: Fri 09 Oct 2026 08:55:51 +0000
asID: 44559
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.198.0/24 maxlen: 24
45.202.200.0/24 maxlen: 24
45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 15:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119402 (0x1d26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 08:55:51 2026 GMT
Not After : Oct 9 08:55:51 2026 GMT
Subject: CN=6a97e49b-4902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:43:79:6c:13:58:7c:12:d9:f3:e8:cc:be:
2e:42:f2:7e:f2:97:6a:3d:70:89:c7:b2:5b:7f:28:
52:f7:da:2b:91:74:1e:88:f7:e4:a2:00:5c:65:c8:
cd:08:eb:96:52:0f:18:ba:b7:a4:64:d3:70:e6:f4:
95:36:c4:7a:83:48:6f:d9:10:1f:4c:7f:b4:67:f1:
34:70:ef:e0:e5:ec:97:0d:f2:29:64:ba:bd:96:59:
a8:a3:e9:36:15:d1:ce:f9:21:50:72:83:1f:da:33:
35:dc:c5:02:b0:91:69:f9:df:b2:f0:25:01:c8:70:
93:75:eb:17:b6:07:3c:4a:96:26:40:b4:06:84:b5:
2b:2f:4b:c8:66:86:7b:e6:a7:d0:78:67:e2:e6:38:
1e:4a:7e:4f:fe:36:b3:f8:de:76:7a:f7:2d:11:61:
d5:b3:e3:2b:41:f0:8d:33:ed:ba:73:07:48:82:4e:
28:98:f7:9a:80:72:82:6a:0e:c9:19:a0:f1:7f:07:
d9:ca:c8:bc:e4:b0:c4:e2:08:52:c5:1a:41:42:e9:
87:ad:15:fa:59:f3:8e:51:33:0d:92:f1:33:1e:8e:
0c:0c:52:c2:4b:9b:65:2f:ef:1a:90:24:60:43:8a:
bd:f1:82:a9:d5:f6:23:0c:20:a4:d7:0e:be:28:3d:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F8:14:AA:12:30:31:0B:0E:15:F2:9D:2A:7F:23:A3:08:E1:5D:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B5CB172A6AC11F1A36E47ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.198.0/24
45.202.200.0-45.202.202.255
45.202.205.0-45.202.208.255
45.204.65.0/24
45.204.73.0/24
45.204.75.0/24
45.207.149.0-45.207.151.255
45.207.160.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
26:7f:20:82:95:ae:d3:37:21:a2:f9:d1:e4:7c:24:44:e8:c2:
89:8d:a9:df:6a:93:7e:98:8e:c5:ce:05:40:bd:58:51:f3:b6:
dc:6e:39:3a:34:2b:ef:64:60:e2:df:be:5d:4d:a1:ff:2d:a2:
cb:18:75:42:a8:c3:01:10:29:13:66:23:8a:a6:81:cf:0b:5d:
b2:31:b5:61:7f:3b:db:c0:99:d1:4f:24:f6:d1:b5:08:e8:b6:
b1:e7:fa:6c:42:ef:04:bf:74:b6:2a:30:58:5a:32:78:36:26:
54:49:2d:fa:4a:3f:82:49:8c:80:7f:9c:1b:1a:1a:3d:12:1b:
4f:9f:81:a0:49:5e:f5:fa:7b:f7:f3:90:e9:29:df:e2:21:94:
ad:23:d4:ad:77:b4:d4:75:2e:b8:c1:e0:74:eb:4e:21:41:42:
9b:7a:6c:bb:1b:cb:ea:e8:c6:c1:18:a7:3f:96:0e:81:26:42:
f4:cb:f4:c1:3e:98:1b:1e:db:53:2e:41:fb:68:a5:d5:59:c6:
ba:0d:81:ea:fe:c7:01:4e:0d:e8:6d:da:cc:94:a3:a3:92:b0:
32:3c:bb:c9:37:bc:71:5d:a8:85:d4:b4:d3:18:0c:68:07:aa:
2a:6b:dc:68:ca:78:a7:ef:21:84:71:e7:9a:60:13:ab:cc:e3:
d1:96:ba:35
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIDAdJqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTAyMDg1NTUxWhcNMjYxMDA5MDg1NTUxWjAYMRYw
FAYDVQQDEw02YTk3ZTQ5Yi00OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsKVDeWwTWHwS2fPozL4uQvJ+8pdqPXCJx7JbfyhS99orkXQeiPfkogBc
ZcjNCOuWUg8YurekZNNw5vSVNsR6g0hv2RAfTH+0Z/E0cO/g5eyXDfIpZLq9llmo
o+k2FdHO+SFQcoMf2jM13MUCsJFp+d+y8CUByHCTdesXtgc8SpYmQLQGhLUrL0vI
ZoZ75qfQeGfi5jgeSn5P/jaz+N52evctEWHVs+MrQfCNM+26cwdIgk4omPeagHKC
ag7JGaDxfwfZysi85LDE4ghSxRpBQumHrRX6WfOOUTMNkvEzHo4MDFLCS5tlL+8a
kCRgQ4q98YKp1fYjDCCk1w6+KD0G0wIDAQABo4IC8jCCAu4wHQYDVR0OBBYEFJv4
FKoSMDELDhXynSp/I6MI4V22MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQjVDQjE3MkE2QUMxMUYxQTM2RTQ3QUJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQBLcRqAwQALcrGMAwDBAMtysgD
BAAtysowDAMEAC3KzQMEAC3K0AMEAC3MQQMEAC3MSQMEAC3MSzAMAwQALc+VAwQD
Lc+QMAwDBAUtz6ADBAAtz6IwDQYJKoZIhvcNAQELBQADggEBACZ/IIKVrtM3IaL5
0eR8JETowomNqd9qk36YjsXOBUC9WFHzttxuOTo0K+9kYOLfvl1Nof8tossYdUKo
wwEQKRNmI4qmgc8LXbIxtWF/O9vAmdFPJPbRtQjotrHn+mxC7wS/dLYqMFhaMng2
JlRJLfpKP4JJjIB/nBsaGj0SG0+fgaBJXvX6e/fzkOkp3+IhlK0j1K13tNR1LrjB
4HTrTiFBQpt6bLsby+roxsEYpz+WDoEmQvTL9ME+mBse21MuQftopdVZxroNger+
xwFODeht2syUo6OSsDI8u8k3vHFdqIXUtNMYDGgHqipr3GjKeKfvIYRx55pgE6vM
49GWujU=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:54 2026 by rpki-client