Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B87A3AA964811F1AB064B15CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B87A3AA964811F1AB064B15CF1D38B0.roa
File: 7B87A3AA964811F1AB064B15CF1D38B0.roa (raw, json)
Hash identifier: ylIXE2aIbhGsCUuxufy2ejNoSOizwiqF6CEDps9Y7VE=
Subject key identifier: 65:41:A8:6F:61:1E:A1:57:96:55:E2:20:89:78:31:AD:ED:F4:6A:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CC02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B87A3AA964811F1AB064B15CF1D38B0.roa
Signing time: Wed 12 Aug 2026 12:22:28 +0000
ROA not before: Wed 12 Aug 2026 12:22:24 +0000
ROA not after: Sun 12 Aug 2029 12:22:24 +0000
asID: 17561
IP address blocks: 156.251.154.0/24 maxlen: 24
156.251.155.0/24 maxlen: 24
156.251.156.0/24 maxlen: 24
156.251.157.0/24 maxlen: 24
156.251.158.0/24 maxlen: 24
156.251.159.0/24 maxlen: 24
156.251.160.0/24 maxlen: 24
156.251.161.0/24 maxlen: 24
156.251.162.0/24 maxlen: 24
156.251.163.0/24 maxlen: 24
156.251.164.0/24 maxlen: 24
156.251.165.0/24 maxlen: 24
156.251.166.0/24 maxlen: 24
156.251.167.0/24 maxlen: 24
156.251.168.0/24 maxlen: 24
156.251.169.0/24 maxlen: 24
156.251.170.0/24 maxlen: 24
156.251.171.0/24 maxlen: 24
156.251.172.0/24 maxlen: 24
156.251.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117762 (0x1cc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 12:22:24 2026 GMT
Not After : Aug 12 12:22:24 2029 GMT
Subject: CN=6a7c6584-ad1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:ab:1e:01:88:2d:81:44:4f:99:fe:75:8a:
58:62:1b:1f:ce:41:6b:9a:bd:06:ce:3a:b6:07:8a:
3d:6f:ce:e1:de:86:e9:c8:d4:f0:5f:81:27:93:1f:
93:30:62:58:6b:2e:83:bb:fa:c6:25:ad:49:0e:4b:
58:b2:ad:f4:83:1a:a4:66:e6:be:87:e1:cc:97:07:
c2:31:9e:64:0a:4e:f4:d7:ee:78:5f:cb:a9:84:9c:
65:4a:4b:27:32:2e:48:4b:40:29:0d:27:28:6e:a2:
af:56:ab:4c:fd:98:06:b9:ad:31:12:2c:be:f3:d8:
6f:f8:2a:dd:bb:29:a0:e5:84:24:58:7e:ca:cd:c5:
48:3c:3c:83:ca:16:20:f2:d8:a7:3c:81:20:68:37:
74:83:d8:e2:cc:75:7c:76:3c:60:a2:81:2a:0e:ac:
a2:6e:84:ef:21:d0:a4:95:16:1e:4a:05:02:52:8c:
c4:99:43:36:95:0f:80:f0:13:03:7a:c2:8c:37:0b:
37:17:cc:41:76:b8:bb:33:b2:b0:8f:5f:5a:8a:fc:
a3:a9:eb:ff:60:ba:ed:d9:2b:34:c9:c5:c7:74:90:
fc:2f:bb:0d:25:9d:e8:f7:6a:66:37:c0:af:02:44:
9a:26:f7:aa:a5:98:b4:a8:45:7a:d8:0c:e1:f3:e8:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:A8:6F:61:1E:A1:57:96:55:E2:20:89:78:31:AD:ED:F4:6A:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B87A3AA964811F1AB064B15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.154.0-156.251.173.255
Signature Algorithm: sha256WithRSAEncryption
85:45:c9:f0:5e:36:c9:c2:4a:08:6c:3c:42:4c:41:37:af:05:
79:d6:cf:fc:f9:5f:2b:87:96:6c:3b:1b:99:43:26:79:02:bc:
89:12:9a:15:41:24:81:59:47:da:cc:65:30:77:0e:3f:4d:b4:
bb:ef:ce:22:5e:40:f7:61:39:c0:3c:0e:9a:f3:a4:d6:ad:92:
a0:20:47:4b:81:0f:96:47:a3:3b:11:89:5a:dd:28:f2:14:d4:
1b:85:b4:6d:03:09:fb:08:ab:fe:70:c7:bb:a0:66:83:cc:66:
2c:57:52:4d:2b:c7:c5:06:18:d3:69:5c:0d:17:b7:32:a7:46:
5f:a5:b2:4b:9f:11:df:b0:97:c0:d8:8d:b4:b7:20:23:28:36:
49:58:56:1b:a5:46:ca:63:6d:9c:ff:b0:b6:0f:12:b1:13:2d:
5f:e1:10:51:4c:c7:e4:15:29:c1:cf:d5:9d:65:5f:e5:63:e9:
52:83:d9:fc:80:cd:3e:1c:20:e8:4b:5b:0d:46:2f:7b:f7:ff:
7d:d5:fb:71:cc:7b:f8:4a:d5:1a:cb:63:c3:8c:f7:86:6d:e7:
16:d2:05:0d:82:b3:2d:be:5e:42:ae:90:e4:41:f4:e1:ab:2f:
31:3f:cd:fc:53:6a:b6:4b:d6:cf:56:61:f1:db:51:9f:9d:37:
89:f8:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:27 2026 by rpki-client