Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6541EC9D3911F18E309AB5CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6541EC9D3911F18E309AB5CE1D38B0.roa
File: 1B6541EC9D3911F18E309AB5CE1D38B0.roa (raw, json)
Hash identifier: e6qXlbXpdgcBN19NxcXp5uWKcSZ67gWrV1CfVvZ4Ehc=
Subject key identifier: 38:7E:7B:59:F5:96:BE:25:48:10:78:40:36:09:3B:72:98:5D:BB:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CF75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6541EC9D3911F18E309AB5CE1D38B0.roa
Signing time: Fri 21 Aug 2026 08:20:03 +0000
ROA not before: Fri 21 Aug 2026 08:19:58 +0000
ROA not after: Thu 08 Oct 2026 08:19:58 +0000
asID: 9304
IP address blocks: 156.245.163.0/24 maxlen: 24
156.245.168.0/24 maxlen: 24
156.245.194.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118645 (0x1cf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:19:58 2026 GMT
Not After : Oct 8 08:19:58 2026 GMT
Subject: CN=6a880a33-f2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:91:30:ef:70:42:17:4c:a1:b3:ec:7c:ee:
a6:74:1c:04:bb:b3:c9:5d:5b:94:27:a0:be:e9:5d:
8f:f9:51:b8:d1:40:2e:46:e6:d7:96:3e:5c:48:fd:
38:fb:01:92:d7:38:f6:2a:7f:ac:f6:55:69:4f:b6:
49:7b:57:bd:7d:ce:62:01:48:db:af:1d:50:fe:d2:
fa:d0:5e:69:fc:bb:4c:fc:1d:f5:e7:9d:b8:94:67:
00:e4:77:69:7e:04:44:b0:7c:31:6f:88:c6:36:27:
22:1c:37:89:f0:56:bd:9f:30:a7:71:87:a0:bf:07:
8c:c4:06:9e:e0:93:d9:c1:d7:bb:07:75:05:20:9d:
87:db:55:fa:a4:6c:11:07:5b:fb:4d:b4:a9:78:4c:
ad:20:47:08:9f:d6:51:9d:8c:ad:e4:9f:5d:39:87:
af:85:2b:18:6b:f8:f1:c2:d3:3d:0e:83:84:d5:19:
7f:09:b3:6a:32:14:9b:d5:a0:c6:00:d3:68:2d:fd:
3d:2d:f6:a6:06:37:78:b7:92:af:9b:67:d2:eb:d5:
7c:89:6a:8f:9b:57:cd:d6:ec:1d:51:39:28:ea:58:
d9:f7:3a:be:bc:21:1d:1a:6e:cd:da:25:11:a8:ba:
52:53:04:93:ce:bb:40:1a:9c:f6:df:1e:f7:2e:8d:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7E:7B:59:F5:96:BE:25:48:10:78:40:36:09:3B:72:98:5D:BB:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6541EC9D3911F18E309AB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.163.0/24
156.245.168.0/24
156.245.194.0/24
156.245.211.0/24
156.245.224.0/24
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.180.0/24
156.249.183.0/24
156.249.185.0/24
156.249.187.0/24
156.249.190.0/23
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
97:41:23:f4:3e:7b:93:aa:47:f7:21:bf:6a:c7:18:d1:98:aa:
0b:71:6e:ee:e4:98:8a:ac:62:6d:c6:70:a8:59:5c:33:8f:1f:
d9:d0:9b:4a:16:ff:cb:4e:7a:4e:c6:8a:50:02:84:a1:26:e1:
75:69:3e:a1:64:c5:a6:61:48:a6:bd:79:0f:2e:da:33:d5:ea:
3e:5c:05:8f:eb:8b:fb:22:4e:8c:30:42:93:94:05:d9:b6:22:
40:d1:bc:93:a6:84:1b:17:fe:f6:c4:b5:c6:f1:1d:0a:24:a9:
ed:39:d3:da:84:80:21:99:6d:40:02:6c:44:f9:d5:62:a9:46:
83:45:bf:ce:1b:ec:6f:99:d6:13:83:5d:c7:24:45:77:10:35:
14:30:e8:bc:ab:65:53:e6:fc:77:93:a6:6d:f2:ec:b9:e5:c0:
4e:04:68:ad:d7:af:d5:24:8f:e6:59:10:9d:0a:4b:03:86:4d:
d3:5d:fd:7b:6d:57:74:ab:c5:19:4c:28:c7:c1:45:26:81:d7:
25:67:5d:bb:fa:36:27:fe:8a:a2:df:61:cb:df:df:3b:3f:d6:
bd:55:30:43:20:8f:62:e4:ae:9a:1c:6a:50:31:ea:f2:86:ba:
e7:51:ed:4e:a6:46:d9:46:06:3f:06:37:03:83:06:d1:ee:20:
e5:77:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:53 2026 by rpki-client