Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30AC4830C79F11F18DF690F8CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30AC4830C79F11F18DF690F8CE1D38B0.roa
File: 30AC4830C79F11F18DF690F8CE1D38B0.roa (raw, json)
Hash identifier: Hmbn4mbmIuycN61FTaf430BSv8SvPQXYQEU0cdh48qE=
Subject key identifier: 4A:46:9A:0E:D8:22:2F:CA:CB:DA:F6:9D:22:3A:2D:6B:A5:EF:B7:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01DD44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30AC4830C79F11F18DF690F8CE1D38B0.roa
Signing time: Wed 14 Oct 2026 07:16:36 +0000
ROA not before: Wed 14 Oct 2026 07:16:31 +0000
ROA not after: Sat 21 Nov 2026 07:16:31 +0000
asID: 214143
IP address blocks: 45.195.3.0/24 maxlen: 24
45.195.157.0/24 maxlen: 24
45.195.158.0/24 maxlen: 24
45.197.135.0/24 maxlen: 24
45.198.69.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.81.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.198.89.0/24 maxlen: 24
45.198.90.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.104.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.112.0/24 maxlen: 24
45.198.138.0/24 maxlen: 24
45.198.163.0/24 maxlen: 24
45.198.168.0/24 maxlen: 24
45.198.181.0/24 maxlen: 24
45.206.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122180 (0x1dd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 14 07:16:31 2026 GMT
Not After : Nov 21 07:16:31 2026 GMT
Subject: CN=6acf2c54-fd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:72:dd:2b:63:9a:d4:32:a1:b2:29:85:7a:
56:ad:0d:5e:a8:a6:a4:9f:c0:ab:77:63:df:77:e5:
b2:a6:27:2b:57:68:8b:f0:05:ca:85:dc:0f:64:f7:
2c:42:e3:05:bc:ff:51:33:56:3b:54:a0:af:54:d0:
64:63:33:88:93:34:b6:06:3d:3e:69:3e:e5:27:6c:
4a:fd:5d:5b:14:ad:2b:d7:45:f5:cf:17:32:0b:a9:
b7:09:5a:03:7a:5c:dd:ad:e3:1d:7c:cc:72:08:4d:
5b:93:75:33:b5:e3:1b:b6:83:97:18:0b:5f:94:ec:
43:86:95:ce:27:ad:80:ab:70:f5:90:53:dc:0f:31:
81:55:1b:89:0d:dc:83:80:9e:c1:4f:e3:f3:f4:45:
8c:16:21:6e:a9:bd:14:4f:1f:0c:6d:98:db:a7:35:
44:47:ab:8f:e5:36:85:68:01:60:38:93:94:2e:de:
dc:3e:19:43:9a:83:5d:32:a0:4b:6b:8f:76:c9:53:
cb:ba:e3:57:c1:09:fa:c4:d8:a1:97:ad:00:f3:4a:
51:d6:70:6f:a3:1d:77:4a:94:6f:c5:89:ca:87:30:
4f:ff:95:b8:11:e3:6e:ae:0a:43:9d:ed:18:37:d3:
60:a8:b8:5b:5c:34:bc:fe:ad:b1:68:c2:b5:c3:96:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:9A:0E:D8:22:2F:CA:CB:DA:F6:9D:22:3A:2D:6B:A5:EF:B7:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30AC4830C79F11F18DF690F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
45.195.157.0-45.195.158.255
45.197.135.0/24
45.198.69.0/24
45.198.75.0/24
45.198.81.0/24
45.198.84.0/24
45.198.86.0/24
45.198.89.0-45.198.90.255
45.198.97.0/24
45.198.104.0/24
45.198.109.0/24
45.198.112.0/24
45.198.138.0/24
45.198.163.0/24
45.198.168.0/24
45.198.181.0/24
45.206.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:16:63:2c:6c:21:d4:cc:3f:92:dd:41:a4:ae:b4:31:98:89:
b5:80:bd:9b:13:4f:b3:ed:b7:28:8c:20:98:ca:e8:96:18:06:
fb:f7:19:66:0c:21:9b:d0:c5:60:d0:71:83:cf:2b:0b:c3:4a:
1c:6d:ac:23:b7:5c:60:2b:86:c6:4e:8d:ef:72:12:18:62:32:
a6:de:3d:48:72:20:a1:5f:7e:da:74:71:67:d9:c3:4c:d9:ec:
8d:4b:89:5d:f5:d6:e7:3d:dc:e2:a1:0e:47:f6:5a:7a:5f:98:
03:c5:34:b2:c2:5d:ef:04:82:66:22:9c:cd:23:2f:09:92:53:
2a:b2:0c:fb:1a:f1:0f:77:6d:43:95:0a:8b:f7:97:82:86:0c:
cf:db:45:05:5a:9e:47:20:e3:9a:71:15:de:49:26:05:af:17:
c9:9d:33:a8:92:62:19:7d:3f:b1:e5:c8:59:2f:0e:ff:71:63:
b4:7b:71:84:86:99:e2:21:89:f0:16:a1:3f:18:55:c1:1f:77:
20:f0:1b:cd:81:26:ac:ba:bf:7e:4a:10:45:67:dc:fd:52:28:
d4:89:52:89:6d:10:5a:73:50:8e:36:6a:58:f7:f0:fe:13:68:
e8:bc:7c:6c:37:0d:25:bf:6b:4a:e6:ca:16:9c:7b:44:93:b4:
2c:a3:84:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:34 2026 by rpki-client