Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA33F56A2FB11F1B544C5D2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA33F56A2FB11F1B544C5D2CE1D38B0.roa
File: 9EA33F56A2FB11F1B544C5D2CE1D38B0.roa (raw, json)
Hash identifier: WekLP2UK70a+fSqiD7h861tl0BRn2FOY00xLZSj4tVM=
Subject key identifier: F3:9D:57:F9:08:1C:37:27:2B:99:DA:AA:C2:E2:0D:7F:14:12:73:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D1AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA33F56A2FB11F1B544C5D2CE1D38B0.roa
Signing time: Fri 28 Aug 2026 16:15:01 +0000
ROA not before: Fri 28 Aug 2026 16:14:57 +0000
ROA not after: Fri 02 Oct 2026 16:14:57 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.227.143.0/24 maxlen: 24
156.227.145.0/24 maxlen: 24
156.231.98.0/24 maxlen: 24
156.231.101.0/24 maxlen: 24
156.232.32.0/24 maxlen: 24
156.232.33.0/24 maxlen: 24
156.233.109.0/24 maxlen: 24
156.242.66.0/24 maxlen: 24
156.242.67.0/24 maxlen: 24
156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.172.0/24 maxlen: 24
156.249.173.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119213 (0x1d1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 28 16:14:57 2026 GMT
Not After : Oct 2 16:14:57 2026 GMT
Subject: CN=6a91b405-fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:ba:1f:50:41:a9:dd:19:65:8d:bb:55:35:
47:61:68:70:47:3c:45:88:3e:2e:86:bc:33:9b:7d:
a2:9f:bf:f4:91:08:41:2d:8c:45:93:94:df:7a:3c:
03:25:ba:0b:0f:b5:6e:ed:57:fc:03:f6:a8:2c:8b:
e5:2c:01:7c:c1:8d:6e:f8:fd:c9:95:21:51:5e:9f:
eb:2b:2d:d0:a1:34:04:14:f6:3c:d6:9e:98:1c:9d:
62:44:86:11:fd:d5:8e:6a:c4:b2:30:7d:33:07:e1:
44:ab:14:d6:6b:62:78:22:48:e5:b7:5d:0d:39:ef:
48:4b:12:af:9d:2b:96:6b:1f:22:4c:90:e1:c9:7e:
26:f7:ac:a2:93:4c:6c:5a:12:75:d6:34:2d:d1:81:
c9:2c:db:db:56:bc:60:66:21:07:a5:4e:f8:ed:1a:
44:82:d3:fd:4a:f7:66:b8:41:0a:bb:14:36:5e:eb:
0b:a2:5f:de:b8:e2:d3:90:7d:9c:d7:d3:94:26:8b:
36:ae:c4:51:e0:3a:52:5c:f9:a7:7d:46:71:0f:16:
5b:21:d5:5f:89:40:fc:56:c2:3e:92:70:f6:c6:6b:
d9:54:18:12:4b:6f:d3:19:e3:9b:8c:61:69:2f:ce:
94:3f:cc:83:69:da:5d:5f:9c:64:62:9c:9e:c6:c6:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:57:F9:08:1C:37:27:2B:99:DA:AA:C2:E2:0D:7F:14:12:73:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA33F56A2FB11F1B544C5D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.227.143.0/24
156.227.145.0/24
156.231.98.0/24
156.231.101.0/24
156.232.32.0/23
156.233.109.0/24
156.242.66.0-156.242.68.255
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.172.0/23
156.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:aa:c7:86:3c:91:77:a2:a9:92:44:90:c6:8f:7c:39:49:60:
ff:55:d5:0d:a2:27:aa:43:03:46:f6:76:03:d4:a2:b5:81:bb:
50:0b:24:8e:e2:85:2c:1e:31:cf:d1:43:c4:8c:94:cb:ff:fa:
6a:2b:7b:0b:f6:d2:ce:6d:94:0c:fd:67:2e:96:c0:02:a1:d7:
c9:6e:b5:6a:4b:02:f4:e7:50:09:0f:b1:e1:67:b2:11:45:06:
a0:d4:78:cd:ef:f9:2a:21:f1:ad:d7:36:aa:46:c5:0e:71:31:
48:bd:4e:fd:a1:3b:ae:16:ce:a7:0c:c4:7c:a9:42:96:12:4c:
5a:f1:80:09:e4:23:a6:2a:15:9f:d8:a7:4f:cd:69:01:18:91:
16:5a:91:de:a5:29:a3:77:76:b3:c8:0a:b2:d5:97:57:50:03:
83:86:0e:38:b8:d8:ed:82:81:8d:17:73:94:af:14:26:e1:e8:
7f:1c:2e:7b:71:09:7b:43:4d:36:a0:ef:06:5d:d4:56:f2:a9:
4f:d8:b5:7a:7b:2a:ad:14:7a:27:64:20:ac:9f:37:a4:3e:f8:
ee:b1:f3:ac:5a:d7:af:8b:15:f8:a9:31:f4:70:46:ea:3f:a2:
7a:08:08:4a:c7:7b:2c:ef:c0:4d:0f:8e:31:eb:50:82:14:78:
33:f3:a0:55
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIDAdGtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI4MTYxNDU3WhcNMjYxMDAyMTYxNDU3WjAYMRYw
FAYDVQQDEw02YTkxYjQwNS1mYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzWm6H1BBqd0ZZY27VTVHYWhwRzxFiD4uhrwzm32in7/0kQhBLYxFk5Tf
ejwDJboLD7Vu7Vf8A/aoLIvlLAF8wY1u+P3JlSFRXp/rKy3QoTQEFPY81p6YHJ1i
RIYR/dWOasSyMH0zB+FEqxTWa2J4Ikjlt10NOe9ISxKvnSuWax8iTJDhyX4m96yi
k0xsWhJ11jQt0YHJLNvbVrxgZiEHpU747RpEgtP9SvdmuEEKuxQ2XusLol/euOLT
kH2c19OUJos2rsRR4DpSXPmnfUZxDxZbIdVfiUD8VsI+knD2xmvZVBgSS2/TGeOb
jGFpL86UP8yDadpdX5xkYpyexsYI9wIDAQABo4IDADCCAvwwHQYDVR0OBBYEFPOd
V/kIHDcnK5naqsLiDX8UEnMpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUEzM0Y1NkEyRkIxMUYxQjU0NEM1RDJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQAnOOFAwQAnOOPAwQAnOORAwQA
nOdiAwQAnOdlAwQBnOggAwQAnOltMAwDBAGc8kIDBACc8kQDBACc8lAwDAMEAJzy
WQMEAJzyWgMEAZzyXAMEAJzz5QMEAZz5rAMEAJz5rzANBgkqhkiG9w0BAQsFAAOC
AQEAvKrHhjyRd6KpkkSQxo98OUlg/1XVDaInqkMDRvZ2A9SitYG7UAskjuKFLB4x
z9FDxIyUy//6ait7C/bSzm2UDP1nLpbAAqHXyW61aksC9OdQCQ+x4WeyEUUGoNR4
ze/5KiHxrdc2qkbFDnExSL1O/aE7rhbOpwzEfKlClhJMWvGACeQjpioVn9inT81p
ARiRFlqR3qUpo3d2s8gKstWXV1ADg4YOOLjY7YKBjRdzlK8UJuHofxwue3EJe0NN
NqDvBl3UVvKpT9i1ensqrRR6J2QgrJ83pD747rHzrFrXr4sV+Kkx9HBG6j+ieggI
Ssd7LO/ATQ+OMetQghR4M/OgVQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:14:21 2026 by rpki-client