Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C6BB76B58511F1A04F39C9CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C6BB76B58511F1A04F39C9CE1D38B0.roa
File: 79C6BB76B58511F1A04F39C9CE1D38B0.roa (raw, json)
Hash identifier: dnyutRTILF1XX8osjqIFUViZvlTtJUqyVQpWD5Nd4p4=
Subject key identifier: 6A:A7:0D:E4:2F:CB:B4:70:A3:36:84:B3:9E:37:FF:30:34:C4:F4:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D749
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C6BB76B58511F1A04F39C9CE1D38B0.roa
Signing time: Mon 21 Sep 2026 06:27:11 +0000
ROA not before: Mon 21 Sep 2026 06:27:07 +0000
ROA not after: Mon 28 Sep 2026 06:27:07 +0000
asID: 139613
IP address blocks: 45.194.85.0/24 maxlen: 24
45.195.60.0/24 maxlen: 24
45.195.62.0/24 maxlen: 24
45.195.192.0/24 maxlen: 24
45.195.196.0/24 maxlen: 24
45.195.197.0/24 maxlen: 24
45.197.1.0/24 maxlen: 24
45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 09:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120649 (0x1d749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 06:27:07 2026 GMT
Not After : Sep 28 06:27:07 2026 GMT
Subject: CN=6ab0ce3f-6463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:fa:48:e5:16:20:0e:ce:58:3a:ac:93:ba:
cc:8e:74:b9:e1:e1:61:d3:52:9c:9a:fd:e1:4e:ef:
84:6c:32:e8:42:d3:23:64:6a:48:b4:5e:6e:2c:2e:
b7:02:96:23:86:9c:d5:18:f3:15:c6:4c:53:fd:39:
58:43:d0:db:e9:b5:23:a2:85:fa:89:53:7c:87:d2:
cf:ee:d0:ad:77:e8:1c:b3:7b:b3:08:3c:a0:f3:6d:
98:35:e6:29:af:16:cd:c1:dd:46:42:a7:44:62:24:
3f:c1:25:d8:50:68:ea:9d:36:a3:a3:64:3d:09:6f:
c1:ee:ef:d8:39:3b:d9:2a:92:5c:62:43:5f:33:53:
5c:a0:f3:56:04:3e:8c:8f:71:96:85:e3:4e:57:75:
a6:ca:9c:a2:87:d3:be:75:00:44:4e:78:1a:9a:d1:
96:1a:1a:cc:79:57:86:2c:f4:aa:74:61:b8:a3:95:
5f:5f:45:ad:e5:27:aa:a4:ba:d2:aa:2f:52:70:39:
91:fd:0a:f3:28:59:f2:86:42:f4:08:a8:58:b2:93:
9c:dc:1e:be:58:3f:61:cf:58:b0:5a:f6:d5:ea:91:
ff:04:08:2c:a6:f5:ca:f2:53:b8:2d:61:52:f0:76:
3b:a5:59:dd:ea:37:d8:d7:d2:a8:a9:80:0d:43:f4:
76:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:0D:E4:2F:CB:B4:70:A3:36:84:B3:9E:37:FF:30:34:C4:F4:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C6BB76B58511F1A04F39C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.195.60.0/24
45.195.62.0/24
45.195.192.0/24
45.195.196.0/23
45.197.1.0-45.197.2.255
45.197.4.0/23
45.199.191.0/24
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:06:3f:c0:a3:f6:a0:28:c1:14:11:01:9d:dd:a5:21:cf:35:
06:c1:c3:46:49:9d:da:e4:6c:ae:75:f4:02:36:fa:61:23:c4:
55:a9:59:c7:19:e3:3a:c7:32:1f:dc:dd:52:60:d6:07:4f:69:
22:f6:98:ee:41:a6:42:0d:ba:5f:03:5f:e6:a4:2d:9e:dd:4d:
f6:75:99:20:d1:92:a4:1c:9e:79:27:16:4c:7a:98:a9:bc:b0:
24:08:ed:93:18:bf:26:36:7e:40:23:16:7e:8e:af:3e:44:67:
d8:63:76:83:76:9c:6e:4e:b0:7d:3a:4f:13:97:71:bf:df:f3:
a3:f2:23:f9:10:44:92:55:dd:00:7f:59:85:49:2e:53:e9:d7:
be:13:40:32:e4:fa:79:44:96:17:2a:18:6f:d3:2b:83:2e:78:
db:a3:19:fd:eb:79:c7:18:f3:f8:51:98:22:88:2c:0f:78:23:
44:b7:97:57:f6:b0:a0:f8:79:4e:5f:56:1c:96:76:a0:1f:72:
07:57:3f:aa:0c:bf:69:6f:e9:42:80:58:f4:51:c8:c8:9d:cc:
7f:8d:09:d7:8e:66:ab:11:ba:14:2b:74:bc:0f:85:09:9b:84:
33:83:ea:54:9f:a5:56:4f:07:e8:33:fa:04:4e:f8:a3:d0:b3:
0e:69:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:04:33 2026 by rpki-client