Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8633423AA6A811F1BEBA2115CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8633423AA6A811F1BEBA2115CF1D38B0.roa
File: 8633423AA6A811F1BEBA2115CF1D38B0.roa (raw, json)
Hash identifier: +ZhJYtyoDAKrugQobOCu7wmI6eBxVQGEKfWAOwIdyGs=
Subject key identifier: E2:50:31:80:17:13:92:67:DC:85:2E:59:3A:65:74:E5:AE:6F:62:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D264
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8633423AA6A811F1BEBA2115CF1D38B0.roa
Signing time: Wed 02 Sep 2026 08:30:16 +0000
ROA not before: Wed 02 Sep 2026 08:30:12 +0000
ROA not after: Fri 09 Oct 2026 08:30:12 +0000
asID: 48031
IP address blocks: 156.238.26.0/24 maxlen: 24
156.238.27.0/24 maxlen: 24
156.238.32.0/24 maxlen: 24
156.238.33.0/24 maxlen: 24
156.238.34.0/24 maxlen: 24
156.238.35.0/24 maxlen: 24
156.238.36.0/24 maxlen: 24
156.238.37.0/24 maxlen: 24
156.246.23.0/24 maxlen: 24
156.246.87.0/24 maxlen: 24
156.247.16.0/24 maxlen: 24
156.247.20.0/24 maxlen: 24
156.247.21.0/24 maxlen: 24
156.247.22.0/24 maxlen: 24
156.247.23.0/24 maxlen: 24
156.254.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119396 (0x1d264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 2 08:30:12 2026 GMT
Not After : Oct 9 08:30:12 2026 GMT
Subject: CN=6a97de98-e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:88:4f:71:8a:c2:c3:22:f3:d8:e1:4d:a2:
63:e2:9d:f6:ac:ca:0f:b1:9e:71:dd:59:a3:3d:31:
cd:05:26:9b:84:17:1b:3d:8c:d3:55:cd:5a:a5:ec:
5d:48:9f:07:8f:53:d9:e0:27:f3:58:30:8b:0f:4f:
7c:f1:9a:12:e1:b7:ff:dd:4b:da:5d:71:ed:8f:ee:
1d:bb:f1:b0:c0:df:91:ad:91:72:92:b4:ce:fa:9f:
64:cc:0a:b8:8a:97:16:0f:d7:d8:b5:44:c2:08:b5:
72:0d:18:89:7f:cb:04:aa:fe:c1:39:56:98:d2:5c:
32:82:4e:91:b4:0d:34:5f:f3:0a:7b:63:a5:00:b5:
4c:b0:26:f0:80:e6:c6:11:c1:83:56:27:55:bd:08:
b0:14:af:d8:05:a9:b0:a5:20:05:32:3b:98:df:aa:
d5:19:6c:ed:e8:08:49:1c:14:95:d3:89:ff:6f:c7:
96:a7:5e:ae:50:8d:4b:e8:22:c6:b5:2a:87:c7:40:
d1:90:d8:76:25:b7:cb:9d:94:17:e8:8b:fe:e8:78:
a6:f2:07:d4:c6:85:2e:84:6d:e8:6c:58:0f:82:a2:
4d:11:23:94:5f:64:c2:b8:47:33:38:49:82:10:1b:
d2:1d:8e:bd:19:38:57:1c:4e:9e:7d:50:cf:11:80:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:50:31:80:17:13:92:67:DC:85:2E:59:3A:65:74:E5:AE:6F:62:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8633423AA6A811F1BEBA2115CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.26.0/23
156.238.32.0-156.238.37.255
156.246.23.0/24
156.246.87.0/24
156.247.16.0/24
156.247.20.0/22
156.254.96.0/24
Signature Algorithm: sha256WithRSAEncryption
87:df:95:82:ff:20:20:f4:43:90:9d:f5:eb:bd:d5:ca:05:c5:
8e:81:11:5d:70:39:e1:b7:c5:74:37:b0:75:33:40:16:3e:00:
54:96:26:53:54:3a:ff:62:38:7a:b5:21:bb:56:d6:45:67:2a:
ac:19:19:b2:db:72:e1:93:49:15:ee:2e:59:56:81:25:ed:47:
6a:f6:30:14:eb:3b:3b:2c:88:8b:0e:29:3d:55:8b:ac:05:64:
af:c7:fd:dc:f7:d1:7d:90:64:cd:fb:84:ef:e4:a5:13:0e:15:
a7:b7:df:5e:e2:d2:4d:43:5a:d5:c6:39:ed:d8:0a:98:37:a6:
6c:a9:aa:70:95:d4:c3:13:df:c6:34:0f:56:7d:5d:16:fb:a6:
63:fb:e0:7c:86:aa:19:9f:2f:f4:2b:c7:c4:ab:85:45:39:3e:
a9:6d:a5:07:ed:04:69:04:f3:27:2a:51:db:b3:b6:0e:3e:15:
b9:31:1d:ad:3b:83:29:34:a8:34:92:ca:5e:41:5b:d7:03:b0:
59:3b:36:26:3f:2b:78:48:fa:bb:90:e6:10:ae:9c:ae:d1:c1:
22:64:e6:36:d9:fd:69:5b:0a:d1:0f:3d:32:64:bb:73:d5:7c:
9e:52:ec:79:eb:8b:77:df:42:c6:cb:56:0a:37:e6:31:73:ce:
e7:23:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:00 2026 by rpki-client