Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5672C966B99B11F19F2C06EBCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5672C966B99B11F19F2C06EBCE1D38B0.roa
File: 5672C966B99B11F19F2C06EBCE1D38B0.roa (raw, json)
Hash identifier: 35jiogc282XaxkSeFlItK42h5lXOE9sbuY8C9U0MRn4=
Subject key identifier: 87:94:C4:86:ED:87:C4:B5:73:43:50:E8:42:0A:7D:AE:F1:F3:24:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D904
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5672C966B99B11F19F2C06EBCE1D38B0.roa
Signing time: Sat 26 Sep 2026 11:13:45 +0000
ROA not before: Sat 26 Sep 2026 11:13:41 +0000
ROA not after: Mon 02 Nov 2026 11:13:41 +0000
asID: 11427
IP address blocks: 156.229.192.0/19 maxlen: 24
156.233.128.0/20 maxlen: 24
156.233.160.0/19 maxlen: 24
156.238.176.0/22 maxlen: 24
156.238.184.0/22 maxlen: 24
156.241.16.0/20 maxlen: 24
156.241.48.0/20 maxlen: 24
156.243.160.0/20 maxlen: 24
156.248.32.0/19 maxlen: 24
156.248.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121092 (0x1d904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 26 11:13:41 2026 GMT
Not After : Nov 2 11:13:41 2026 GMT
Subject: CN=6ab7a8e9-8539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:f7:a0:82:16:3d:3a:e6:7c:cf:1c:f6:0a:
0b:a8:71:52:f9:1a:ff:74:5f:d6:73:6a:9b:4c:2d:
97:49:18:d9:92:03:18:10:cc:62:83:04:07:de:8c:
6c:0c:d3:35:47:57:f4:fb:1a:51:e8:45:d7:47:12:
58:48:5b:9f:0c:5b:9b:e2:db:3b:87:36:92:ac:a6:
66:74:b6:1a:99:ec:ac:e4:c8:44:a8:69:16:6c:2a:
f5:48:ee:2e:a9:48:71:28:98:56:71:21:3d:bc:bf:
de:cc:6e:63:55:f4:2a:c2:06:d4:07:c1:8b:1b:e1:
6a:4b:ec:0b:dd:a7:4c:0c:6a:e4:e6:50:2e:70:e3:
f7:a0:de:86:f1:93:c6:90:b5:c9:92:85:f9:fa:96:
74:5a:b3:99:25:a3:bf:f5:05:a9:4d:32:4f:18:ba:
5a:01:9f:0f:fa:99:ac:1b:db:6f:6d:a7:91:85:4b:
63:e9:46:ce:bc:9a:d7:e0:41:66:d5:22:35:4c:09:
e4:23:f7:0f:bd:6c:a3:54:e2:bd:92:c1:da:df:e1:
b4:24:87:cd:2c:20:38:63:c3:ce:d2:b0:82:71:06:
56:73:0c:3d:b1:df:b6:46:26:68:72:fa:e9:ed:7b:
9a:8f:c2:2f:32:88:2f:f3:bf:49:03:b1:5c:ef:a1:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:C4:86:ED:87:C4:B5:73:43:50:E8:42:0A:7D:AE:F1:F3:24:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5672C966B99B11F19F2C06EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.192.0/19
156.233.128.0/20
156.233.160.0/19
156.238.176.0/22
156.238.184.0/22
156.241.16.0/20
156.241.48.0/20
156.243.160.0/20
156.248.32.0/19
156.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
51:29:81:e6:cb:a4:c6:7e:05:47:08:2a:9f:e9:48:08:e9:cb:
a7:dc:8f:2f:b2:14:fc:d0:50:9e:59:8b:42:cc:af:fa:01:8c:
68:6a:65:51:da:f8:4c:55:3a:65:f7:27:c6:03:5e:39:d4:ab:
30:d4:01:23:27:a8:89:b6:c2:95:1e:ad:d2:f7:3c:8a:1f:11:
fe:b0:f2:07:63:b1:fe:73:45:df:c7:50:f3:74:24:7d:28:bb:
db:9d:4d:5d:35:d7:0c:ed:1b:29:1e:37:19:7c:41:0b:a9:3b:
ea:32:d0:3a:f6:47:37:a4:53:b0:2f:52:cb:27:2a:26:0a:9c:
95:df:48:77:4b:70:de:56:16:8c:da:44:bc:bc:06:7d:fa:cd:
1d:49:61:a6:b0:e4:39:4a:af:13:44:ff:d9:ce:32:b5:13:bd:
6e:8f:66:cd:96:0a:8a:ac:da:10:fc:f7:2a:ac:dd:39:bd:92:
1c:6c:9b:94:38:15:97:b6:c9:65:5b:6e:fd:d8:f6:45:d5:d3:
2f:3c:6b:42:6c:a9:8b:21:2a:5f:80:33:4b:a3:0f:f7:78:f5:
d7:d8:53:04:5b:9d:ed:70:b4:60:89:6a:c7:a2:32:c5:c3:7a:
b1:4b:c2:ef:93:df:7a:81:07:07:89:9d:a4:2c:5b:e4:54:5b:
f7:f6:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:35:37 2026 by rpki-client