Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0BBB348F2111F1AE8BADC1CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0BBB348F2111F1AE8BADC1CE1D38B0.roa
File: 3E0BBB348F2111F1AE8BADC1CE1D38B0.roa (raw, json)
Hash identifier: zX2jtU7DEBn4Krgf9EuR9XOQDuX8y0oLMtDOt6Rzxh4=
Subject key identifier: EA:E5:2B:E6:E7:F4:08:A6:7B:F3:FB:2C:90:14:DD:73:9F:61:3E:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C993
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0BBB348F2111F1AE8BADC1CE1D38B0.roa
Signing time: Mon 03 Aug 2026 09:53:57 +0000
ROA not before: Mon 03 Aug 2026 09:53:53 +0000
ROA not after: Thu 10 Sep 2026 09:53:53 +0000
asID: 63139
IP address blocks: 45.197.95.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.108.0/24 maxlen: 24
45.197.109.0/24 maxlen: 24
45.197.110.0/24 maxlen: 24
45.197.111.0/24 maxlen: 24
45.197.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117139 (0x1c993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 3 09:53:53 2026 GMT
Not After : Sep 10 09:53:53 2026 GMT
Subject: CN=6a706534-db73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a3:bc:95:07:74:1b:8b:48:de:f2:88:98:f0:
ab:d8:ea:9a:71:a7:d6:1b:8c:27:a6:bc:fe:1f:e0:
d7:43:41:8f:89:b5:48:6e:e1:4b:b0:55:b5:f9:e9:
36:e5:89:0d:ea:80:9b:d0:aa:7c:6c:cf:ec:ad:da:
63:77:93:e4:ce:bb:92:cf:8a:04:b1:f8:d9:a1:21:
ed:6f:7f:41:32:84:5e:4d:81:45:a5:d8:ee:0e:8f:
56:1d:fe:65:cc:0e:ab:ba:43:fc:3f:3f:ed:56:71:
ea:2d:74:59:6c:0f:5b:78:d4:22:07:2c:99:cb:40:
23:f7:30:ea:87:da:53:18:63:16:d0:a3:b2:16:fe:
04:6d:bb:9e:44:3c:83:c7:85:dd:c7:f8:d1:7b:59:
4a:05:e8:7d:fd:1e:f4:94:c8:36:ce:76:54:5f:b3:
96:60:a0:50:8d:4c:5b:98:1f:f4:14:99:97:79:f1:
26:2b:37:bc:9c:87:1e:81:f2:ce:7f:17:e9:22:26:
0b:65:3e:ab:fe:ec:6c:d5:6e:40:19:38:61:eb:3a:
6a:26:45:cf:85:65:9e:43:5b:8d:40:84:5b:ad:27:
e4:73:a4:37:7d:27:2e:8b:65:60:79:8a:b7:59:83:
d0:bd:e2:4d:a9:a9:b0:b7:13:d9:49:3a:e1:94:c0:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:2B:E6:E7:F4:08:A6:7B:F3:FB:2C:90:14:DD:73:9F:61:3E:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E0BBB348F2111F1AE8BADC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.95.0-45.197.99.255
45.197.108.0-45.197.112.255
Signature Algorithm: sha256WithRSAEncryption
67:59:fd:84:93:7a:a8:25:fe:6d:5d:98:ad:49:47:3b:3d:0c:
41:46:4f:e1:c5:80:a7:5d:56:99:a6:83:c5:07:43:c9:16:14:
b0:87:63:a0:4c:79:fa:a1:19:53:bf:6a:d2:7b:db:cd:49:d0:
76:66:ef:45:ed:b8:c4:4a:be:a6:c5:14:ae:2c:6b:8b:c0:95:
a6:cf:f0:5f:e5:c0:87:d9:ad:96:9d:71:cf:9c:c6:1e:52:cd:
c3:ac:70:c4:92:8c:ed:1d:b5:da:5a:2b:86:f5:2c:88:18:9e:
b3:e3:84:cd:59:24:32:69:7f:5f:4e:88:3e:94:b0:4f:65:49:
46:74:b0:e0:c4:54:e3:c9:08:66:d9:78:31:7a:09:6d:36:b5:
aa:0c:6e:a6:a4:23:8f:45:e4:8b:44:d8:1f:36:d9:3a:c1:04:
93:93:3f:40:f1:82:2d:d7:a6:c2:6d:65:64:95:00:38:14:fe:
c5:26:35:94:29:80:aa:52:01:f0:78:78:d2:d5:91:4f:90:4e:
9c:0d:e2:33:f4:db:49:95:0f:0b:bc:28:5a:6c:66:b1:70:09:
ca:2b:cd:9d:ad:b3:89:79:c6:96:4c:61:0a:68:ed:e4:b2:bd:
5e:f3:8e:73:ad:71:8f:29:09:63:f1:f2:70:f1:ec:cf:aa:82:
86:6d:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:15 2026 by rpki-client