Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2472B0EC8F0D11F1A55996CACE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2472B0EC8F0D11F1A55996CACE1D38B0.roa
File: 2472B0EC8F0D11F1A55996CACE1D38B0.roa (raw, json)
Hash identifier: JMgIbje/EApjkla+ewyzkWRFJ69+klr2uTAl+4Mq3ag=
Subject key identifier: 62:AC:2F:C5:3D:C0:A1:E7:E9:D6:8D:22:E2:5F:58:A2:26:31:9C:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C956
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2472B0EC8F0D11F1A55996CACE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:30:04 +0000
ROA not before: Mon 03 Aug 2026 07:30:00 +0000
ROA not after: Thu 10 Sep 2026 07:30:00 +0000
asID: 138915
IP address blocks: 156.244.9.0/24 maxlen: 24
156.244.10.0/24 maxlen: 24
156.244.11.0/24 maxlen: 24
156.244.12.0/24 maxlen: 24
156.244.13.0/24 maxlen: 24
156.244.14.0/24 maxlen: 24
156.244.15.0/24 maxlen: 24
156.244.16.0/24 maxlen: 24
156.244.17.0/24 maxlen: 24
156.244.18.0/24 maxlen: 24
156.244.49.0/24 maxlen: 24
156.244.50.0/24 maxlen: 24
156.244.51.0/24 maxlen: 24
156.244.52.0/24 maxlen: 24
156.244.53.0/24 maxlen: 24
156.244.54.0/24 maxlen: 24
156.244.55.0/24 maxlen: 24
156.244.56.0/23 maxlen: 24
156.244.58.0/23 maxlen: 24
156.244.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117078 (0x1c956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 07:30:00 2026 GMT
Not After : Sep 10 07:30:00 2026 GMT
Subject: CN=6a70437c-3128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:e1:e3:17:1f:7f:58:bb:6f:b8:14:f7:ea:
7c:25:c2:50:c3:72:b8:09:85:c3:ed:f9:4e:5e:53:
60:fa:c7:95:3b:f1:14:56:65:41:3a:bd:27:25:48:
9a:a2:b0:2f:41:09:64:a9:bc:9c:26:df:6d:c9:f6:
7a:8e:14:3d:68:68:74:f8:a2:50:33:ff:11:a8:b9:
f7:96:c0:25:58:6b:58:da:1c:be:31:5c:31:22:30:
a2:10:13:14:1c:e1:a2:ba:75:2d:76:05:ae:06:65:
f0:2b:e9:5f:50:4b:73:05:aa:57:1e:bf:2f:85:27:
f0:35:40:a0:b3:59:bf:41:51:aa:a7:68:51:f5:c6:
47:19:b5:6c:64:bc:f3:ef:b3:a4:4d:cf:0b:54:4d:
92:14:68:9b:88:a2:b7:6e:d5:27:3f:ac:3c:5d:a3:
51:f0:9f:7f:a1:b4:31:54:8f:91:84:a7:d4:9b:9e:
6d:72:40:86:38:f7:48:aa:0d:eb:68:cc:be:6c:a8:
73:d9:6a:df:38:5c:51:9b:78:73:34:27:c5:0c:50:
53:e7:1f:1c:50:87:e7:5a:7f:8d:6b:b1:f8:ac:bb:
c8:7d:23:33:82:66:1f:7b:af:fa:aa:d6:34:19:63:
50:fa:f3:d7:67:f6:7d:7a:88:af:d3:94:ff:22:3c:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AC:2F:C5:3D:C0:A1:E7:E9:D6:8D:22:E2:5F:58:A2:26:31:9C:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2472B0EC8F0D11F1A55996CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.9.0-156.244.18.255
156.244.49.0-156.244.60.255
Signature Algorithm: sha256WithRSAEncryption
10:f3:62:b3:97:b8:1e:d5:ba:62:53:01:63:66:89:15:01:41:
db:71:7f:00:4c:cc:78:ed:2f:d8:82:42:9b:d7:7b:ea:6e:ae:
c6:e7:fb:71:3d:55:70:dd:23:64:ab:b8:63:64:40:dd:19:75:
16:66:35:90:28:83:71:99:83:96:84:5b:ef:e3:1d:c1:15:50:
5b:0f:c1:1f:48:83:9f:9d:0c:8f:f9:c8:7b:1d:19:c5:4c:fa:
04:57:b6:1a:2a:5b:cd:52:59:2d:e9:4d:8b:aa:51:e2:3a:c0:
e5:9e:7a:2e:61:0a:53:cd:9a:8d:a7:ad:f8:d3:57:85:d2:85:
b8:65:46:c9:1a:4d:06:dd:b4:07:52:b1:f3:55:a0:55:58:05:
57:c3:24:b6:4c:80:fe:11:11:0a:5e:87:3e:9e:eb:49:0e:ad:
53:ac:91:e2:87:b6:8c:5c:9e:78:9a:bd:17:4b:c2:bc:ee:7d:
e2:c8:3d:fd:33:92:e8:bf:2f:e5:1c:a8:db:47:d0:33:ce:70:
69:52:96:9b:6d:5e:a6:f5:86:3b:7b:28:64:1e:1b:6f:a2:1b:
84:80:5f:fb:30:54:26:9e:3a:93:fc:5c:25:86:f9:6e:24:e0:
7d:f2:b8:0a:76:d6:84:cf:4b:13:aa:a3:c7:f3:9c:33:9b:c8:
b1:63:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:21:54 2026 by rpki-client