Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82A72B28A6A711F1BD22C310CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82A72B28A6A711F1BD22C310CF1D38B0.roa
File: 82A72B28A6A711F1BD22C310CF1D38B0.roa (raw, json)
Hash identifier: N0kj2sNg7YW9UagIBttghXtEFXV4dfqdj4u0DJ7hUO4=
Subject key identifier: 36:F7:68:D9:59:AB:5A:23:CF:B0:B5:2F:C8:C7:D1:2F:36:28:94:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D262
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82A72B28A6A711F1BD22C310CF1D38B0.roa
Signing time: Wed 02 Sep 2026 08:23:01 +0000
ROA not before: Wed 02 Sep 2026 08:22:57 +0000
ROA not after: Fri 09 Oct 2026 08:22:57 +0000
asID: 48031
IP address blocks: 156.238.24.0/24 maxlen: 24
156.238.25.0/24 maxlen: 24
156.238.38.0/24 maxlen: 24
156.238.39.0/24 maxlen: 24
156.247.19.0/24 maxlen: 24
156.254.97.0/24 maxlen: 24
156.254.98.0/24 maxlen: 24
156.254.99.0/24 maxlen: 24
156.254.100.0/24 maxlen: 24
156.254.101.0/24 maxlen: 24
156.254.102.0/24 maxlen: 24
156.254.103.0/24 maxlen: 24
156.254.104.0/24 maxlen: 24
156.254.105.0/24 maxlen: 24
156.254.106.0/24 maxlen: 24
156.254.107.0/24 maxlen: 24
156.254.108.0/24 maxlen: 24
156.254.109.0/24 maxlen: 24
156.254.110.0/24 maxlen: 24
156.254.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119394 (0x1d262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 08:22:57 2026 GMT
Not After : Oct 9 08:22:57 2026 GMT
Subject: CN=6a97dce5-b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:d0:64:34:ff:b8:c6:f6:4e:cc:f3:fd:b8:
15:ce:71:29:47:ff:4c:a6:48:a7:b8:b0:f1:c2:50:
7c:24:87:39:a3:55:e1:1a:25:53:ba:ac:51:c4:93:
d3:cc:5a:92:cd:60:e6:e2:fe:db:31:73:6c:a2:68:
60:d8:cf:43:51:b9:e1:08:a3:47:d8:4b:ea:7e:76:
71:5c:ee:81:99:47:0c:68:6f:a2:35:a0:da:03:e1:
97:d8:08:6b:c5:3b:c1:ae:53:33:09:13:5b:42:eb:
a0:78:ac:79:62:e8:ab:0a:e2:90:c6:a6:a1:00:de:
28:43:53:93:35:6a:b1:e7:61:9c:a9:23:a2:2f:07:
f4:5d:d4:f9:c5:04:56:6b:d7:38:27:03:5c:b4:71:
f7:57:8c:da:1c:4a:90:8d:88:0c:6a:65:93:98:46:
29:98:81:89:17:6d:9e:e4:92:68:fa:3f:db:e4:95:
54:a7:d9:a1:bd:85:d7:3e:f4:40:c9:46:fe:69:61:
9c:22:50:7e:37:47:45:01:b8:2a:44:1b:7a:3e:c5:
8b:00:65:ac:7f:42:58:25:64:63:4a:6b:89:a9:f1:
b1:54:f1:5b:46:03:cc:b7:84:ea:05:50:c2:b7:d5:
b3:24:2e:a3:c7:f8:27:bb:8c:ca:6d:78:48:46:eb:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:68:D9:59:AB:5A:23:CF:B0:B5:2F:C8:C7:D1:2F:36:28:94:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82A72B28A6A711F1BD22C310CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.24.0/23
156.238.38.0/23
156.247.19.0/24
156.254.97.0-156.254.111.255
Signature Algorithm: sha256WithRSAEncryption
2c:8a:3d:6f:fc:9a:3d:71:3e:6a:35:b3:bf:26:3a:6a:0f:5b:
a9:93:d8:04:9a:65:70:d9:ff:c5:15:2a:85:f3:59:61:30:e8:
33:64:46:2c:55:1a:27:93:bc:cc:96:2f:bd:ee:a2:42:bc:a8:
27:1c:0c:0d:38:bd:fe:03:b5:45:a3:19:c4:7c:84:3d:04:61:
ea:12:8b:f5:d6:33:fb:5e:73:e2:c3:bb:28:6f:c5:fd:c0:c1:
09:f2:39:98:14:29:60:cb:67:af:19:87:78:2a:73:08:59:3c:
d2:8f:f3:90:db:24:cc:a8:8c:4a:d5:99:48:5a:d9:aa:43:33:
1f:27:b3:f1:fe:88:84:12:1b:2e:cf:5c:ce:36:91:a5:1f:8b:
47:ee:54:a9:2c:2c:2e:13:89:c1:d2:f5:c1:61:d2:b7:58:e8:
d3:21:65:3c:b7:76:08:a2:84:08:c0:45:89:df:df:b3:de:80:
b9:53:e0:89:48:d9:d7:69:cb:a5:21:31:d9:3d:f4:4e:f6:39:
67:8f:fc:09:8a:1b:95:26:80:89:c3:a5:3b:ec:68:91:15:6c:
11:c3:3f:76:5b:8a:e8:ed:58:4d:d9:f4:53:5a:ed:34:fb:fb:
2a:a8:da:d8:f9:c2:34:35:45:72:4b:18:94:ac:48:21:8d:7c:
aa:70:54:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:42 2026 by rpki-client