Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A79B6FA9F9F11F180B941F5CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A79B6FA9F9F11F180B941F5CE1D38B0.roa
File: 2A79B6FA9F9F11F180B941F5CE1D38B0.roa (raw, json)
Hash identifier: 0m0oYOBH5KsLW7n2ZHQ4rEhknd6YAxM9cYs+KDCAmuA=
Subject key identifier: 9E:FC:C5:85:96:07:19:02:2D:20:22:29:CF:6A:F4:98:C6:CD:F1:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D07B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A79B6FA9F9F11F180B941F5CE1D38B0.roa
Signing time: Mon 24 Aug 2026 09:35:39 +0000
ROA not before: Mon 24 Aug 2026 09:35:35 +0000
ROA not after: Fri 02 Oct 2026 09:35:35 +0000
asID: 202656
IP address blocks: 156.233.9.0/24 maxlen: 24
156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.233.116.0/24 maxlen: 24
156.233.117.0/24 maxlen: 24
156.233.127.0/24 maxlen: 24
156.238.180.0/24 maxlen: 24
156.238.182.0/24 maxlen: 24
156.239.132.0/24 maxlen: 24
156.243.32.0/24 maxlen: 24
156.243.33.0/24 maxlen: 24
156.243.80.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118907 (0x1d07b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 24 09:35:35 2026 GMT
Not After : Oct 2 09:35:35 2026 GMT
Subject: CN=6a8c106b-f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:31:b6:ea:81:bf:12:a5:7a:93:6b:7e:04:
42:70:44:34:8d:53:e4:47:1e:ac:8e:fb:79:ad:aa:
b7:f0:42:a4:ae:8f:77:f3:c9:3f:e1:c4:e9:23:4f:
3e:f8:17:6b:ef:47:dc:b5:de:1d:4f:6f:fa:07:06:
95:40:c8:79:22:08:0c:22:8b:70:0e:12:d9:3b:f5:
38:4e:9f:0a:f0:58:f8:b3:b7:df:28:07:f6:72:20:
9e:9c:3a:dc:1c:35:21:6d:b1:22:a2:56:ef:e0:f0:
79:67:a0:da:3b:a2:46:93:f2:50:94:ce:ec:8b:02:
79:e3:2c:1b:cd:e4:87:21:f8:f9:2c:80:3f:27:20:
98:d1:23:ef:73:39:39:06:40:21:b9:f8:79:e1:0e:
00:51:9f:78:f7:38:8d:4b:0d:36:d1:70:e4:80:06:
6f:47:af:5f:59:de:c0:e1:a2:ab:67:42:b0:8b:aa:
35:6f:a3:15:08:1b:d6:77:24:ba:bc:e1:5c:2a:f0:
ff:ae:c3:3d:c3:8c:5e:42:26:4e:6c:96:e9:1d:10:
d9:2b:68:b7:a0:70:b0:a6:ae:61:64:56:b3:69:14:
44:cb:e0:ef:88:b2:e6:f4:db:7b:bb:f8:72:37:5b:
7b:00:bb:58:42:d1:df:e2:5b:68:41:29:d9:05:73:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:C5:85:96:07:19:02:2D:20:22:29:CF:6A:F4:98:C6:CD:F1:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A79B6FA9F9F11F180B941F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.9.0/24
156.233.96.0/23
156.233.106.0/24
156.233.116.0/23
156.233.127.0/24
156.238.180.0/24
156.238.182.0/24
156.239.132.0/24
156.243.32.0/23
156.243.80.0/24
156.243.243.0/24
156.243.248.0/23
156.243.254.0/24
156.248.6.0/23
156.248.20.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2c:5e:ee:06:43:a1:3f:ba:92:9f:6c:33:70:d1:21:37:1e:
bb:58:a3:07:b9:08:1b:93:fe:e9:ac:51:e6:0a:e5:32:89:5a:
4d:a8:48:b2:3a:fd:9c:c6:61:03:ea:0e:8c:07:62:b3:52:0d:
40:f9:bb:98:fa:1e:d5:53:cb:9a:eb:66:96:5d:49:b1:03:1e:
f5:32:f1:9b:34:f5:ac:d0:d8:ed:d4:39:fc:b6:e5:5d:bd:64:
95:ad:18:9f:78:8e:ef:dc:0f:8c:7a:77:bd:10:2c:23:4e:e2:
e1:3c:c8:bc:15:20:f7:01:bc:22:04:1e:5a:4f:a0:46:85:1e:
de:e9:a5:c8:cc:3a:03:05:36:2a:7a:62:5e:5d:4a:35:67:8a:
04:b6:cb:32:7b:cc:d3:55:21:c6:5d:d7:7d:57:23:62:1d:15:
19:39:33:41:d3:0d:c6:b8:49:19:fb:7d:a3:c5:84:cf:4d:33:
e6:32:7b:54:80:cc:66:66:9d:ef:52:d6:8b:ec:8f:c1:70:1b:
7b:4e:a1:a9:90:2f:d2:04:75:2b:e6:80:f3:a9:de:e7:25:b9:
df:51:77:bb:47:ce:c2:ff:22:52:6d:be:f0:6d:5b:55:1c:a5:
2e:6e:25:43:9c:57:04:ba:68:e9:34:07:94:34:b4:7f:a0:e4:
61:50:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:01:27 2026 by rpki-client