Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C3D0F28970311F19B599E06CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C3D0F28970311F19B599E06CF1D38B0.roa
File: 1C3D0F28970311F19B599E06CF1D38B0.roa (raw, json)
Hash identifier: oCwdqBryCgt6A4HpGQj8E6LVyKCXOvXhe5ZDFOCL9Ns=
Subject key identifier: D9:CF:00:CA:D1:D3:6C:E3:F9:C0:8F:F5:A2:C6:22:CE:4F:38:71:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CC94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C3D0F28970311F19B599E06CF1D38B0.roa
Signing time: Thu 13 Aug 2026 10:38:24 +0000
ROA not before: Thu 13 Aug 2026 10:38:20 +0000
ROA not after: Thu 24 Sep 2026 10:38:20 +0000
asID: 395793
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.14.0/24 maxlen: 24
45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.195.157.0/24 maxlen: 24
45.195.158.0/24 maxlen: 24
45.196.64.0/22 maxlen: 24
45.196.68.0/24 maxlen: 24
45.196.136.0/24 maxlen: 24
45.196.137.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
45.201.36.0/22 maxlen: 24
45.201.40.0/24 maxlen: 24
45.203.60.0/24 maxlen: 24
45.203.61.0/24 maxlen: 24
45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
45.207.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117908 (0x1cc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 10:38:20 2026 GMT
Not After : Sep 24 10:38:20 2026 GMT
Subject: CN=6a7d9ea0-ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:e8:9f:53:d2:fe:9a:d9:76:ee:89:a7:19:
e1:e7:b1:21:03:74:66:01:32:5f:fc:b5:ff:32:9a:
e4:04:86:57:3e:96:81:9e:dd:d8:05:9d:b6:d6:b9:
ed:c9:30:ab:c2:03:f2:47:42:da:6f:48:5a:49:fe:
39:73:67:0b:01:01:36:24:2b:2c:07:ac:b2:bc:7a:
fa:d5:f3:61:5c:b6:36:b8:ef:5f:2b:60:e2:28:6f:
6e:63:e5:b9:f3:d3:c1:81:e0:65:70:7f:73:8e:77:
55:a7:02:59:2a:13:39:35:c5:f1:90:c9:fd:c9:26:
64:70:60:b1:9a:ae:78:5f:c7:f6:4c:d6:1b:55:ad:
55:0e:8d:0d:41:3b:3a:15:0c:79:97:6a:80:3c:af:
b2:a4:07:da:5a:4a:d2:3b:a5:6c:23:95:07:f3:2f:
2d:66:7d:d3:8d:18:20:73:c1:a9:48:d8:d4:c3:8d:
73:5b:42:31:9d:c5:df:00:cf:a8:2c:0a:79:04:08:
70:3a:4c:41:73:6a:d7:c6:20:27:81:f5:57:c4:11:
c7:4b:5f:66:e0:be:a1:26:24:1a:54:91:73:25:1c:
20:2d:f6:ea:d5:ea:7a:00:32:c7:af:b4:df:76:31:
26:2c:24:63:e2:79:a4:80:d4:69:17:e9:9a:20:86:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:00:CA:D1:D3:6C:E3:F9:C0:8F:F5:A2:C6:22:CE:4F:38:71:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C3D0F28970311F19B599E06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0-45.192.16.255
45.195.157.0-45.195.158.255
45.196.64.0-45.196.68.255
45.196.136.0/23
45.198.226.0/24
45.201.36.0-45.201.40.255
45.203.60.0/23
45.207.138.0-45.207.147.255
Signature Algorithm: sha256WithRSAEncryption
82:4f:bf:af:d9:fe:09:9e:19:3d:89:2f:bc:2f:8a:1b:50:8b:
2e:f2:71:9c:9c:20:3c:8b:71:4d:96:58:e5:04:08:63:54:fd:
82:b4:3d:dd:9e:68:5e:4e:25:57:45:cb:65:78:c3:85:43:21:
7f:85:cb:af:48:a6:a6:eb:60:d7:69:34:f9:d5:85:ef:5d:16:
07:ee:fb:78:5e:e9:55:7e:19:bc:62:79:b7:85:08:a5:43:81:
9b:e6:8a:55:00:c3:9f:93:81:6e:b2:21:52:b6:6c:b4:27:87:
b0:39:95:87:4d:65:fd:63:20:bd:31:93:de:d4:c0:c0:4f:be:
1c:39:45:92:f9:ec:b0:62:88:7e:49:1a:12:c6:ec:4b:2c:c0:
8d:9b:d3:b5:d3:ff:bd:94:7d:06:f3:3d:41:32:d1:61:63:6c:
c0:f6:89:2b:c8:65:d6:c6:c4:09:d6:41:e0:32:9d:e8:c4:2f:
d2:78:65:93:cc:ad:8b:e2:8e:52:4f:8a:6b:80:fc:6a:47:12:
2c:2d:ad:78:06:b4:d2:ed:48:d4:02:e3:e3:01:89:2e:5d:eb:
c4:b8:4b:4b:08:cb:88:41:03:a5:29:87:90:20:13:2b:02:7c:
52:9b:ae:3a:a7:82:d6:86:97:39:1f:48:08:0d:3a:96:8e:e7:
8d:b4:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:49:03 2026 by rpki-client