Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F8F3A3CCF7911F1B34764EFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F8F3A3CCF7911F1B34764EFCE1D38B0.roa
File: 4F8F3A3CCF7911F1B34764EFCE1D38B0.roa (raw, json)
Hash identifier: h1yQO24NKrRYNAs/J+xeptZUbg35GvC4KwL+Pmn23qk=
Subject key identifier: D6:01:42:DF:24:C7:AF:83:68:66:C1:AF:1D:1D:52:67:0A:54:20:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01DFF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F8F3A3CCF7911F1B34764EFCE1D38B0.roa
Signing time: Sat 24 Oct 2026 07:05:36 +0000
ROA not before: Sat 24 Oct 2026 07:05:31 +0000
ROA not after: Tue 08 Dec 2026 07:05:31 +0000
asID: 63099
IP address blocks: 156.227.136.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Nov 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122869 (0x1dff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 24 07:05:31 2026 GMT
Not After : Dec 8 07:05:31 2026 GMT
Subject: CN=6adc58c0-6198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:2a:ef:60:68:85:53:f9:4f:99:e9:fa:91:
a7:73:aa:d5:7e:7a:45:26:b1:a7:97:a6:9f:bd:b9:
8c:28:75:a9:5d:3b:33:7d:cd:7e:4a:2a:d1:d9:9a:
5d:76:70:3d:19:fa:27:31:75:d6:22:8e:59:ca:14:
4d:f7:17:0c:c2:6b:86:e5:dd:66:fe:5b:a9:40:8e:
00:d9:c1:ea:f9:15:26:f1:2f:0d:5c:dc:2e:72:2d:
40:6e:6e:ea:63:58:be:11:22:04:50:7c:0a:e8:cb:
e6:fb:02:90:fe:b9:50:82:94:67:eb:b6:69:20:11:
ae:ad:ef:7f:f0:aa:d9:97:bd:09:d5:fa:cb:f5:45:
78:49:60:aa:72:d9:a2:4e:09:98:ae:c7:f8:46:ec:
33:08:6e:07:70:8a:22:8f:1c:fa:a8:62:16:1a:91:
94:3e:fc:07:95:cd:60:70:fa:ec:d5:40:63:83:cc:
cb:f6:36:92:47:63:43:7a:d5:43:0d:a5:ea:e3:5e:
ce:31:89:7f:90:e5:f3:19:21:6b:eb:39:af:1c:fd:
a4:aa:bf:3b:3e:14:e0:ed:de:0f:8f:d8:5d:56:47:
5c:0e:89:d7:d9:8e:0b:e0:c0:bb:64:4b:11:38:1d:
67:27:da:fb:a7:3a:b1:68:d0:52:28:d6:c6:92:a3:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:01:42:DF:24:C7:AF:83:68:66:C1:AF:1D:1D:52:67:0A:54:20:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F8F3A3CCF7911F1B34764EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.136.0/24
156.231.6.0/24
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.233.66.0/24
156.249.133.0/24
156.249.166.0/23
156.249.190.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
73:22:f8:58:b2:44:cc:17:83:cc:aa:6c:46:f8:50:26:00:8b:
ca:6e:88:9e:f7:e3:5f:3c:91:8c:cc:76:ca:73:2a:81:ed:20:
42:e2:b6:f9:68:b6:1e:e5:f4:7c:e3:a4:3b:c6:1f:51:04:47:
73:df:fe:94:43:1a:13:7f:35:70:c5:bc:a9:31:42:db:19:45:
59:66:64:83:8b:cd:ab:10:d2:1c:98:d3:d9:e7:95:e1:08:bf:
76:3c:89:9e:cf:cb:3d:8f:a7:98:c0:82:fd:05:34:5c:41:88:
67:b3:2f:de:3d:b5:81:a9:5f:ac:37:ac:b8:d1:e3:a3:9a:fc:
69:ec:62:c7:02:fb:07:94:8d:74:cb:8f:fe:5d:ef:57:87:56:
52:a9:aa:26:2b:fa:49:ba:1a:99:40:6e:97:47:42:56:29:e1:
41:2d:88:31:72:28:1e:92:f6:2e:e2:d0:2b:5b:6d:55:a3:65:
72:d0:44:80:2a:5f:c0:de:e0:c5:f6:20:db:b3:11:44:ee:f1:
84:35:d0:ed:b5:4d:c6:ac:d7:55:70:4c:6d:f0:35:fa:a4:ec:
0d:d2:42:f4:9b:1b:71:82:2d:7f:29:0f:b3:6c:58:21:c6:3d:
4c:1d:2d:95:c0:89:be:28:2d:61:70:2a:9b:07:dd:46:ce:dd:
31:97:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:00:49 2026 by rpki-client