Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27836CB4903811F18A1D4FD1CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27836CB4903811F18A1D4FD1CE1D38B0.roa
File:                     27836CB4903811F18A1D4FD1CE1D38B0.roa (raw, json)
Hash identifier:          Hpq2LrXsmaVJjkZfk9IWBagUR1W+9IoYKUBQLiwEmWs=
Subject key identifier:   32:E0:A9:30:16:3B:E9:70:42:93:AD:BC:90:C8:C8:4C:CD:77:DB:BC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27836CB4903811F18A1D4FD1CE1D38B0.roa
Signing time:             Tue 04 Aug 2026 19:10:28 +0000
ROA not before:           Tue 04 Aug 2026 19:10:24 +0000
ROA not after:            Sun 20 Aug 2028 19:10:24 +0000
asID:                     17561
IP address blocks:        45.195.80.0/24 maxlen: 24
                          45.198.25.0/24 maxlen: 24
                          45.199.190.0/24 maxlen: 24
                          45.201.1.0/24 maxlen: 24
                          45.201.8.0/24 maxlen: 24
                          45.201.35.0/24 maxlen: 24
                          45.201.41.0/24 maxlen: 24
                          45.201.42.0/24 maxlen: 24
                          45.201.43.0/24 maxlen: 24
                          45.201.44.0/24 maxlen: 24
                          45.201.45.0/24 maxlen: 24
                          45.201.46.0/24 maxlen: 24
                          45.201.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117167 (0x1c9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  4 19:10:24 2026 GMT
            Not After : Aug 20 19:10:24 2028 GMT
        Subject: CN=6a723924-e326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:0c:d1:b5:fe:15:cf:49:78:24:47:05:8e:
                    0c:40:89:7f:8f:68:b2:49:54:d8:30:9b:3b:ab:24:
                    56:4e:99:ef:49:95:7b:79:70:a3:61:1d:dd:75:3c:
                    5b:60:84:f0:be:65:81:96:a0:97:4a:cd:6a:2a:98:
                    bd:6b:35:37:0a:b8:61:b9:3d:7f:a3:b2:a3:10:b3:
                    cd:74:c3:61:5f:58:9d:ac:fe:51:83:78:0c:86:82:
                    54:30:88:97:bb:f5:05:0e:d5:62:39:5b:94:6a:1c:
                    a4:d6:3b:ef:8a:35:6b:aa:3e:c8:59:3f:c7:c1:4f:
                    16:5e:ca:50:10:5a:fd:d2:b4:bc:cb:d7:6e:35:3b:
                    5e:05:b4:e3:68:f1:ec:d5:77:98:7f:60:bc:58:92:
                    7f:7b:a7:91:87:c2:5e:3a:c4:89:0a:8b:23:3a:15:
                    77:ee:ce:34:a1:da:d1:bb:17:8a:99:d6:fa:7d:07:
                    2f:75:18:dd:1c:ae:42:96:b5:99:7e:c0:3a:86:11:
                    f5:64:e2:c3:bb:b0:a7:4f:64:f2:03:39:4b:dc:3d:
                    a7:21:97:b2:71:ae:e1:ca:99:c2:0a:4e:58:23:f0:
                    cc:8d:25:a8:2a:6f:8f:98:6d:33:8c:91:6d:df:00:
                    06:86:ca:6d:fb:83:42:10:fe:f8:4c:86:88:c1:12:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E0:A9:30:16:3B:E9:70:42:93:AD:BC:90:C8:C8:4C:CD:77:DB:BC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27836CB4903811F18A1D4FD1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.80.0/24
                  45.198.25.0/24
                  45.199.190.0/24
                  45.201.1.0/24
                  45.201.8.0/24
                  45.201.35.0/24
                  45.201.41.0-45.201.47.255

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:3c:69:be:47:80:b5:59:93:bf:89:42:da:33:6a:1a:bf:
         42:fe:5c:0b:6d:f8:d7:3a:6a:1c:03:6b:f3:94:66:d8:25:f1:
         e9:b1:ed:d4:ee:ed:57:12:9d:9b:7c:1b:c5:49:00:a7:fb:f9:
         37:2b:b0:af:34:4d:d8:c1:a7:4d:3d:ad:4b:4f:25:08:86:d1:
         9c:38:80:d2:e2:3a:cc:ab:5e:b8:86:13:6b:44:0c:36:49:1a:
         c9:de:ba:77:7e:fe:40:23:ad:5e:25:81:fa:80:7a:32:55:cc:
         a6:f9:f1:23:c1:9f:e1:ef:8a:04:0b:1b:0d:a6:d5:4a:64:0e:
         c7:44:2f:9d:74:a2:e4:c2:88:cf:2e:63:21:23:7d:95:b5:ea:
         c9:32:70:3e:01:6d:34:0b:aa:f6:b1:cd:f8:92:70:2d:f7:ad:
         21:06:13:fc:d1:a2:88:23:ea:14:d7:65:74:78:ca:80:9b:2e:
         3c:7e:ad:b8:9c:f1:43:ad:97:7b:61:ca:0b:2d:b9:8a:e6:51:
         c1:68:c7:1d:8a:6c:93:f2:8b:1a:7e:cc:77:d1:50:8b:56:b6:
         dc:12:8f:d5:07:2d:b8:de:b0:87:d7:19:ec:d4:53:63:4e:da:
         0f:c4:42:41:a8:43:a4:db:84:b6:7d:83:fc:f5:d0:c9:08:4e:
         e2:c5:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:14:30 2026 by rpki-client