Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D1A27328F0E11F1AD85F7CECE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D1A27328F0E11F1AD85F7CECE1D38B0.roa
File: 3D1A27328F0E11F1AD85F7CECE1D38B0.roa (raw, json)
Hash identifier: 2H9KhcBPELKDYgkH2L1YvpKrIYM/T00lk6jVsu8lgEc=
Subject key identifier: 20:36:DC:E0:4F:0F:2C:9E:8E:4D:FA:22:49:22:C1:4C:3E:8D:D0:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C95A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D1A27328F0E11F1AD85F7CECE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:37:54 +0000
ROA not before: Mon 03 Aug 2026 07:37:50 +0000
ROA not after: Thu 10 Sep 2026 07:37:50 +0000
asID: 138915
IP address blocks: 156.244.19.0/24 maxlen: 24
156.244.20.0/24 maxlen: 24
156.244.21.0/24 maxlen: 24
156.244.22.0/24 maxlen: 24
156.244.25.0/24 maxlen: 24
156.244.26.0/24 maxlen: 24
156.244.27.0/24 maxlen: 24
156.244.28.0/24 maxlen: 24
156.244.29.0/24 maxlen: 24
156.244.30.0/24 maxlen: 24
156.244.31.0/24 maxlen: 24
156.244.32.0/24 maxlen: 24
156.244.33.0/24 maxlen: 24
156.244.34.0/24 maxlen: 24
156.244.35.0/24 maxlen: 24
156.244.37.0/24 maxlen: 24
156.244.38.0/24 maxlen: 24
156.244.39.0/24 maxlen: 24
156.244.40.0/24 maxlen: 24
156.244.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117082 (0x1c95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 07:37:50 2026 GMT
Not After : Sep 10 07:37:50 2026 GMT
Subject: CN=6a704552-2e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:03:c9:8b:98:68:57:a6:04:a9:dc:e0:82:
0d:8d:92:4d:20:57:24:e6:36:30:a1:89:d8:49:1f:
0e:cb:88:2a:4c:96:f6:50:56:c9:50:37:82:03:ec:
6a:b5:ad:e9:8c:cf:32:34:46:5e:a1:dd:7b:b6:6b:
2a:dd:a8:99:b5:80:2e:d2:69:2e:7b:2f:a1:97:60:
bc:cf:88:82:ed:38:3d:49:16:89:1e:9d:8b:27:89:
fe:40:07:a2:ac:05:fb:17:3d:52:e1:57:02:b3:c0:
68:43:c0:3f:50:b5:58:51:88:69:9d:75:07:67:72:
07:b2:69:75:c5:a3:4e:4a:9c:84:57:eb:6b:90:19:
b0:1f:ab:71:ca:cd:da:59:02:ad:68:5f:f1:d7:f2:
99:93:78:53:cb:98:c2:a7:dc:07:7e:87:dd:47:4d:
8c:f8:53:50:e2:84:fc:ea:b8:43:7b:6c:bc:29:f6:
8e:9c:f3:43:04:d3:3c:4f:fb:30:55:be:71:d3:11:
e0:29:ab:29:41:6d:be:dc:d4:46:b4:dc:9e:bf:b3:
01:95:8b:22:c8:58:68:40:a6:88:c6:2c:a0:7d:0c:
d0:5d:5c:fa:39:3c:83:f8:86:72:cf:4f:48:6f:c0:
05:4e:c0:b2:88:25:12:ec:da:39:58:1d:89:68:e8:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:DC:E0:4F:0F:2C:9E:8E:4D:FA:22:49:22:C1:4C:3E:8D:D0:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D1A27328F0E11F1AD85F7CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.19.0-156.244.22.255
156.244.25.0-156.244.35.255
156.244.37.0-156.244.40.255
156.244.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9e:ca:16:3c:a9:dd:ef:1b:1d:62:b0:de:46:fc:3c:5d:7b:
c3:a1:3c:1b:70:ae:0b:dc:ff:2c:58:40:ca:55:4b:33:a3:2e:
37:07:4a:ed:3b:d6:d1:1f:5b:ed:5a:57:c1:e3:fe:00:73:4f:
31:89:69:27:17:4c:8c:db:e0:4f:a1:25:e4:7c:50:d3:94:f6:
3a:3d:bd:5a:3f:93:9b:0a:cb:ed:23:14:7d:d3:a0:af:68:e8:
43:fd:10:99:a4:cb:af:2c:4d:4f:d9:b9:c4:62:95:40:8e:4f:
d7:1b:ed:7e:ee:08:2b:fe:ca:cd:4f:75:9a:cd:52:54:80:9a:
0f:a7:3f:6c:6d:a1:aa:dc:ae:f0:f0:87:cf:ee:1f:7b:d1:f2:
cc:ff:81:12:88:73:8b:bf:43:f5:20:22:bf:3e:11:62:2f:21:
4d:97:1e:56:fc:6c:df:3c:95:be:e4:fa:bf:63:db:d6:56:ac:
c8:87:c2:d5:3c:ab:6f:04:b3:17:5c:59:64:e9:bc:4e:3b:a3:
a1:8e:4a:d7:eb:46:92:49:41:e4:ba:a9:8b:cb:ba:cf:8b:29:
b9:f9:4a:bc:c8:5f:81:9d:cd:3a:86:55:9f:f5:cd:7f:d7:20:
d1:b8:95:bd:9f:7e:82:3e:a0:4b:8b:24:ac:07:51:8d:76:61:
92:dd:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:41 2026 by rpki-client