Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3186B4649D3A11F1A032D4BBCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3186B4649D3A11F1A032D4BBCE1D38B0.roa
File: 3186B4649D3A11F1A032D4BBCE1D38B0.roa (raw, json)
Hash identifier: tgOHK6k1k+MrByy4w0q2CvKI35zA5D+tuS1YTqgLHqs=
Subject key identifier: F6:47:A3:DF:61:96:56:66:36:E0:54:FB:4B:9E:6E:C7:0B:BB:46:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CF79
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3186B4649D3A11F1A032D4BBCE1D38B0.roa
Signing time: Fri 21 Aug 2026 08:27:49 +0000
ROA not before: Fri 21 Aug 2026 08:27:45 +0000
ROA not after: Thu 08 Oct 2026 08:27:45 +0000
asID: 9304
IP address blocks: 45.198.5.0/24 maxlen: 24
45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
45.204.132.0/24 maxlen: 24
45.204.154.0/24 maxlen: 24
45.204.181.0/24 maxlen: 24
45.204.248.0/24 maxlen: 24
45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118649 (0x1cf79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 08:27:45 2026 GMT
Not After : Oct 8 08:27:45 2026 GMT
Subject: CN=6a880c05-61f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:32:f1:94:26:ac:3e:26:61:6e:57:5f:b6:
71:de:fe:14:84:ea:31:c1:a2:65:4d:29:85:6d:4b:
f5:4c:a7:d3:d5:6d:69:a6:47:2e:a7:50:70:3d:f6:
a7:15:e3:f8:0d:b6:52:27:78:f8:2d:4c:ac:07:da:
2f:b5:f1:0c:b9:ae:96:50:d4:47:5d:92:cb:fd:d5:
e3:90:be:9d:b5:df:43:d3:9b:a8:fe:d9:fe:e1:6e:
e3:ee:4c:44:eb:8b:0f:90:d2:30:d8:02:20:2e:eb:
07:aa:4f:b5:ec:10:04:a2:a5:47:12:8f:d8:51:0d:
d6:cd:c3:a5:fc:5a:ea:5a:4f:40:e1:b2:93:76:d1:
da:26:32:a4:e9:6c:a9:ef:34:c7:08:84:48:d2:65:
b0:d5:ba:8f:a3:84:0b:2f:76:16:3a:c1:75:f4:69:
1d:21:5c:90:d1:79:17:0c:d5:b9:39:7e:8d:c6:a1:
5f:43:34:3f:4d:b9:4e:31:c1:29:c5:a0:f2:06:7b:
01:04:29:fb:9f:f1:18:4c:0f:15:10:15:e2:f2:e4:
a1:e9:4c:87:20:1b:34:e9:a2:55:cb:c0:f1:2d:f9:
b7:89:e5:6d:5c:69:99:ee:ef:c5:59:56:a1:82:91:
65:12:10:85:95:d6:63:b6:3e:9b:42:54:fa:76:0e:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:47:A3:DF:61:96:56:66:36:E0:54:FB:4B:9E:6E:C7:0B:BB:46:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3186B4649D3A11F1A032D4BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.5.0/24
45.198.16.0-45.198.18.255
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
45.204.48.0-45.204.53.255
45.204.132.0/24
45.204.154.0/24
45.204.181.0/24
45.204.248.0/24
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ad:9a:9d:55:30:18:d8:64:4a:c6:6f:88:f7:92:9e:21:32:
1d:f5:eb:67:3e:49:e4:74:71:48:be:11:45:af:5d:1b:d4:02:
ad:d9:88:fa:5a:fb:ea:ac:d1:1c:d9:9c:25:8a:1a:f0:a7:21:
9b:f8:08:c7:8b:6a:0f:93:5f:57:13:4b:5c:87:30:92:f7:76:
c7:92:fb:a5:9b:db:5f:b8:97:aa:c0:1e:fb:6e:9e:81:d5:04:
e0:49:0c:d6:b5:62:b3:25:4e:34:f9:4c:cc:ea:06:8c:b8:c7:
50:bf:ca:7b:2e:d9:90:87:9f:fa:5a:b9:45:33:44:22:65:ba:
4e:e0:c8:54:81:60:c6:fa:31:3f:86:c6:2d:b6:a5:b7:54:e5:
b9:d1:3b:3b:a4:c8:6f:5f:b0:ed:da:9b:06:4f:37:e2:57:77:
25:f7:ea:87:29:b6:e4:20:f8:b4:e7:55:73:ba:e7:b9:14:db:
34:72:c9:23:4f:e8:0c:d2:6e:48:71:9e:c6:02:3c:32:f1:d3:
5a:4d:f6:70:a0:6b:a2:3a:4f:ad:6e:da:5a:7b:59:ae:46:31:
6d:db:2a:75:70:d4:d1:5c:bf:89:1d:a6:66:8b:c5:0b:80:79:
cf:86:fc:ba:5f:36:0a:77:78:67:30:60:7e:cb:b5:fc:f7:d5:
d0:3e:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:38 2026 by rpki-client