Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7866B36E9BA211F1B3F54711CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7866B36E9BA211F1B3F54711CF1D38B0.roa
File: 7866B36E9BA211F1B3F54711CF1D38B0.roa (raw, json)
Hash identifier: ZjVMqtSOJsIQQKOSU2LKun7TcYC1FQG4ib+JvQwhlEE=
Subject key identifier: BE:52:0E:BA:CF:8D:37:30:CB:56:40:7E:A3:D5:7A:DD:E4:73:3B:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CE31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7866B36E9BA211F1B3F54711CF1D38B0.roa
Signing time: Wed 19 Aug 2026 07:49:14 +0000
ROA not before: Wed 19 Aug 2026 07:49:09 +0000
ROA not after: Fri 25 Sep 2026 07:49:09 +0000
asID: 271355
IP address blocks: 156.236.214.0/24 maxlen: 24
156.236.215.0/24 maxlen: 24
156.236.216.0/24 maxlen: 24
156.236.217.0/24 maxlen: 24
156.236.218.0/24 maxlen: 24
156.236.219.0/24 maxlen: 24
156.236.220.0/24 maxlen: 24
156.236.221.0/24 maxlen: 24
156.236.222.0/24 maxlen: 24
156.236.223.0/24 maxlen: 24
156.236.239.0/24 maxlen: 24
156.236.240.0/24 maxlen: 24
156.236.241.0/24 maxlen: 24
156.236.242.0/24 maxlen: 24
156.236.243.0/24 maxlen: 24
156.236.244.0/24 maxlen: 24
156.236.245.0/24 maxlen: 24
156.236.246.0/24 maxlen: 24
156.236.247.0/24 maxlen: 24
156.236.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118321 (0x1ce31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 07:49:09 2026 GMT
Not After : Sep 25 07:49:09 2026 GMT
Subject: CN=6a855ff9-9863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:e2:78:57:61:83:02:b4:c0:6a:4a:bf:de:
6f:dc:72:6e:04:44:62:40:53:47:bf:5e:43:5d:37:
c3:16:01:04:a9:43:62:43:c7:26:9d:09:00:6a:05:
0d:96:3d:89:9b:c9:be:c6:58:7f:1d:0e:5e:5d:19:
8e:9a:ae:70:4a:6a:43:59:54:b7:5e:01:7e:31:41:
fb:2d:68:02:cd:37:7d:06:64:a6:1a:36:0e:c0:e0:
2f:7d:6e:ef:08:35:80:18:e2:59:e5:1f:d4:bc:e5:
ba:d8:e0:95:b5:50:5d:8e:12:c1:5c:fd:35:e0:a8:
e6:84:b6:95:d3:d9:37:79:46:6e:8e:fc:e5:bf:7f:
15:7d:c3:17:17:25:4e:c9:e9:5d:05:37:d0:07:40:
86:4f:5b:28:5c:d9:31:d4:b1:48:4a:07:65:d9:6f:
c7:64:35:86:80:6e:25:eb:e6:fd:cd:34:0f:92:03:
17:81:90:bc:93:48:c3:5b:83:a1:61:ca:1d:03:5f:
c4:5a:38:41:9d:0b:d0:0e:88:72:95:46:fe:b2:ef:
6c:fd:1d:ba:78:f7:a0:3a:18:35:2d:88:77:8a:ec:
20:69:f4:95:3f:7e:18:58:4f:7e:3e:a2:8f:05:e1:
89:c0:c7:77:80:e1:2e:a1:da:7f:09:37:44:8a:49:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:52:0E:BA:CF:8D:37:30:CB:56:40:7E:A3:D5:7A:DD:E4:73:3B:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7866B36E9BA211F1B3F54711CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.214.0-156.236.223.255
156.236.239.0-156.236.248.255
Signature Algorithm: sha256WithRSAEncryption
86:d4:30:6c:5d:b3:a3:13:95:fb:b8:7a:b5:7e:a5:78:05:37:
e3:04:ed:ea:a9:d9:97:ea:75:2f:59:b8:4c:53:e9:05:b5:5a:
19:9b:07:65:c8:b3:e8:85:9d:31:7e:bc:47:64:40:f4:52:e6:
02:f2:d1:9c:f7:b8:d6:b0:ed:a4:73:9b:b0:30:a1:1b:4e:e7:
c9:e5:35:40:b5:74:03:6c:e9:fe:28:38:38:1c:37:f6:0d:bb:
a3:86:44:38:74:23:6b:d3:c1:64:30:8d:8a:b2:9a:57:4a:20:
ec:da:a8:2c:a4:d7:9a:97:eb:58:8d:70:1e:fc:c1:13:cf:c2:
50:29:e1:9f:dc:95:96:cd:99:80:e8:83:71:15:08:ca:1e:1f:
6d:33:b0:57:e5:0e:9c:7a:55:39:89:dd:ed:16:b2:16:2f:cc:
77:27:1b:38:71:85:54:c8:b1:69:b1:d5:ae:6d:08:e0:f9:69:
b4:1f:d8:d8:1e:8e:66:45:8e:e5:cc:bb:7e:29:76:6c:13:17:
8d:15:d3:44:3f:cf:77:24:d4:57:6f:09:dc:b0:e9:c6:f7:c9:
ca:18:5b:61:61:e5:72:ec:ec:43:24:4e:b2:fe:f7:01:19:40:
2e:85:91:55:06:fb:63:01:94:90:6c:0d:fb:da:2c:3d:8e:cd:
a5:dc:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:26:59 2026 by rpki-client