Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DD14AF08B2A11F18331D716CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DD14AF08B2A11F18331D716CF1D38B0.roa
File: 1DD14AF08B2A11F18331D716CF1D38B0.roa (raw, json)
Hash identifier: bR4kfoIGMm3OEMq9+3yN3IdfjS8yQ2yS92lM0lKGZJU=
Subject key identifier: BA:BC:95:25:AB:C5:9A:3B:F7:2C:9A:44:5F:DF:F4:E8:E1:36:17:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C893
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DD14AF08B2A11F18331D716CF1D38B0.roa
Signing time: Wed 29 Jul 2026 08:47:23 +0000
ROA not before: Wed 29 Jul 2026 08:47:19 +0000
ROA not after: Tue 01 Sep 2026 08:47:19 +0000
asID: 202656
IP address blocks: 156.233.9.0/24 maxlen: 24
156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.233.116.0/24 maxlen: 24
156.233.117.0/24 maxlen: 24
156.233.127.0/24 maxlen: 24
156.238.180.0/24 maxlen: 24
156.238.182.0/24 maxlen: 24
156.239.132.0/24 maxlen: 24
156.243.32.0/24 maxlen: 24
156.243.33.0/24 maxlen: 24
156.243.80.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Sep 2026 08:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116883 (0x1c893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 29 08:47:19 2026 GMT
Not After : Sep 1 08:47:19 2026 GMT
Subject: CN=6a69be1b-9dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:09:67:bb:f0:da:41:f2:6f:42:06:01:bc:
a8:c1:b3:03:47:12:3c:42:7b:b3:3e:50:06:47:13:
d7:c2:ac:fc:4b:50:cc:14:1c:c6:98:86:8f:97:53:
3b:18:3b:61:bb:dc:2e:f5:dc:07:5c:29:28:e9:24:
2d:52:1a:1d:68:4e:01:38:03:46:5e:ce:ac:48:ee:
ce:14:eb:48:1b:e3:6a:58:7c:7e:69:7a:dd:80:db:
c6:8c:04:79:5f:4f:b2:4a:4f:3c:d3:3c:1f:b4:27:
eb:f5:bc:ae:79:9b:52:d0:e7:00:94:0d:0f:a1:06:
c8:4c:26:21:e5:b7:07:f2:bc:99:91:e8:04:00:41:
1d:ad:e4:a8:05:78:e5:1f:fc:a2:78:54:31:6d:d3:
8b:1f:12:e0:73:10:d6:bd:e5:69:7d:45:9a:07:d0:
d6:10:ba:6a:33:7c:5e:5e:ca:88:ac:61:4b:e6:42:
75:7d:f9:7e:e8:a2:42:82:b4:b0:2b:12:11:e3:c0:
7b:0d:86:bc:41:95:88:63:9c:91:4c:e0:cf:87:6c:
a9:e9:b7:f3:1e:c8:5d:28:5d:d1:ef:a8:a3:ac:c5:
be:b5:a4:c6:a6:95:10:88:2a:1c:fa:ac:cb:cf:fb:
7b:38:57:98:1d:8e:78:5d:0a:e2:25:36:1d:9f:70:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:95:25:AB:C5:9A:3B:F7:2C:9A:44:5F:DF:F4:E8:E1:36:17:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DD14AF08B2A11F18331D716CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.9.0/24
156.233.96.0/23
156.233.106.0/24
156.233.116.0/23
156.233.127.0/24
156.238.180.0/24
156.238.182.0/24
156.239.132.0/24
156.243.32.0/23
156.243.80.0/24
156.243.243.0/24
156.243.248.0/23
156.243.254.0/24
156.248.6.0/23
156.248.20.0/24
Signature Algorithm: sha256WithRSAEncryption
50:36:29:80:bf:20:97:d6:d1:dd:c3:90:15:62:8c:7e:94:c1:
fc:e4:23:4e:3a:90:da:61:92:81:a5:65:fc:75:0e:85:32:18:
5f:ec:18:54:8b:a9:b3:1f:56:04:c4:fa:f8:c6:8d:21:93:eb:
3c:71:29:4c:f3:ad:ec:21:d9:ee:1c:8f:ea:30:a4:ce:75:b8:
68:b6:3e:c8:b1:30:6f:36:34:b5:36:2e:31:fe:db:5e:56:a8:
89:c1:e9:92:ed:ea:a4:40:ba:90:78:74:2b:e4:97:8c:55:a0:
27:d5:d9:6e:54:13:32:ce:51:bb:82:1e:48:3f:31:15:a0:55:
75:6b:9e:96:7c:0f:80:f2:23:2c:c4:db:ca:d2:14:c9:f1:bc:
aa:2a:07:32:34:53:0a:4e:1d:a1:8f:9d:f3:c2:63:f3:08:4e:
f3:1b:f9:03:4a:ba:2c:f1:20:3c:7f:c0:fe:b1:be:a9:e4:e2:
0a:3b:ee:3c:30:94:07:21:18:ce:be:87:1d:5c:de:9c:cf:32:
1d:15:7e:3b:09:0f:09:e1:c7:4c:ec:18:04:5d:af:c3:b8:02:
0f:5a:84:7d:df:93:54:8b:ab:a5:f8:48:30:bf:cf:aa:de:d0:
fb:fe:28:9c:12:91:82:55:e2:31:91:80:35:b3:12:dc:dd:06:
86:06:3c:01
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIDAciTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI5MDg0NzE5WhcNMjYwOTAxMDg0NzE5WjAYMRYw
FAYDVQQDEw02YTY5YmUxYi05ZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw3wJZ7vw2kHyb0IGAbyowbMDRxI8QnuzPlAGRxPXwqz8S1DMFBzGmIaP
l1M7GDthu9wu9dwHXCko6SQtUhodaE4BOANGXs6sSO7OFOtIG+NqWHx+aXrdgNvG
jAR5X0+ySk880zwftCfr9byueZtS0OcAlA0PoQbITCYh5bcH8ryZkegEAEEdreSo
BXjlH/yieFQxbdOLHxLgcxDWveVpfUWaB9DWELpqM3xeXsqIrGFL5kJ1ffl+6KJC
grSwKxIR48B7DYa8QZWIY5yRTODPh2yp6bfzHshdKF3R76ijrMW+taTGppUQiCoc
+qzLz/t7OFeYHY54XQriJTYdn3Ci8QIDAQABo4IC9jCCAvIwHQYDVR0OBBYEFLq8
lSWrxZo79yyaRF/f9OjhNhdrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xREQxNEFGMDhCMkExMUYxODMzMUQ3MTZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAnOkJAwQBnOlgAwQAnOlqAwQB
nOl0AwQAnOl/AwQAnO60AwQAnO62AwQAnO+EAwQBnPMgAwQAnPNQAwQAnPPzAwQB
nPP4AwQAnPP+AwQBnPgGAwQAnPgUMA0GCSqGSIb3DQEBCwUAA4IBAQBQNimAvyCX
1tHdw5AVYox+lMH85CNOOpDaYZKBpWX8dQ6FMhhf7BhUi6mzH1YExPr4xo0hk+s8
cSlM863sIdnuHI/qMKTOdbhotj7IsTBvNjS1Ni4x/tteVqiJwemS7eqkQLqQeHQr
5JeMVaAn1dluVBMyzlG7gh5IPzEVoFV1a56WfA+A8iMsxNvK0hTJ8byqKgcyNFMK
Th2hj53zwmPzCE7zG/kDSros8SA8f8D+sb6p5OIKO+48MJQHIRjOvocdXN6czzId
FX47CQ8J4cdM7BgEXa/DuAIPWoR935NUi6ul+Egwv8+q3tD7/iicEpGCVeIxkYA1
sxLc3QaGBjwB
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:21:47 2026 by rpki-client