Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F69F34A923811F18E0B60FECE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F69F34A923811F18E0B60FECE1D38B0.roa
File:                     9F69F34A923811F18E0B60FECE1D38B0.roa (raw, json)
Hash identifier:          /pEjZR+7FAT03JwJN+JIJ1GsxpVm0Bri7bwT1w+Oy5w=
Subject key identifier:   45:FA:81:8F:E2:BF:2A:08:44:55:6F:F7:2F:2C:0A:0F:32:6D:EF:E7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F69F34A923811F18E0B60FECE1D38B0.roa
Signing time:             Fri 07 Aug 2026 08:18:52 +0000
ROA not before:           Fri 07 Aug 2026 08:18:48 +0000
ROA not after:            Sun 04 Oct 2026 08:18:48 +0000
asID:                     40115
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.16.0/22 maxlen: 24
                          45.194.16.0/23 maxlen: 24
                          45.194.16.0/24 maxlen: 24
                          45.194.17.0/24 maxlen: 24
                          45.194.18.0/23 maxlen: 24
                          45.194.18.0/24 maxlen: 24
                          45.194.19.0/24 maxlen: 24
                          45.194.20.0/22 maxlen: 24
                          45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
                          45.194.22.0/23 maxlen: 24
                          45.194.22.0/24 maxlen: 24
                          45.194.23.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117303 (0x1ca37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 08:18:48 2026 GMT
            Not After : Oct  4 08:18:48 2026 GMT
        Subject: CN=6a7594ec-618d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:cb:63:1d:60:66:cf:8a:3d:a2:6c:93:e1:
                    82:f5:75:5a:9a:07:df:73:01:24:c2:17:a6:ea:6e:
                    ba:18:e0:cf:73:3d:5c:6c:19:e7:d9:00:db:7e:4f:
                    d4:95:39:72:55:af:96:95:c3:e7:ee:b1:ca:ee:b2:
                    39:78:48:7c:66:c5:50:f2:b1:8c:22:c6:96:da:a7:
                    94:a7:c2:ef:2c:12:18:ba:d9:ba:76:d6:86:10:3d:
                    cd:9c:95:50:f4:a3:4e:4c:66:bf:3b:9d:e1:f2:30:
                    6b:07:30:a8:e5:cc:90:00:67:45:32:ac:ba:da:23:
                    45:34:5f:8b:00:a4:f6:fd:04:e1:6b:53:ec:d7:00:
                    fb:2c:96:60:a0:19:fa:fe:3f:44:95:bb:71:48:5f:
                    ee:0f:5a:fa:5c:a7:0d:88:ea:8e:64:b7:7f:05:3f:
                    d5:44:e6:4e:e4:d4:ce:31:f0:3d:f6:66:ba:95:07:
                    e4:7a:57:ba:ae:e3:16:87:98:4c:cc:9a:51:78:97:
                    5d:f5:d6:1a:5b:77:35:1b:3b:57:dc:a2:9d:42:bf:
                    52:54:75:91:fa:94:51:54:4d:de:a4:f5:76:fd:a0:
                    3c:c9:d2:55:b9:c2:3b:40:b2:5f:22:0c:30:57:26:
                    44:ce:57:9a:b7:6d:ea:83:22:99:8a:dc:68:16:f5:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FA:81:8F:E2:BF:2A:08:44:55:6F:F7:2F:2C:0A:0F:32:6D:EF:E7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F69F34A923811F18E0B60FECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0-45.207.12.255

    Signature Algorithm: sha256WithRSAEncryption
         44:91:fa:dd:24:6e:4b:a0:c9:12:8c:5b:ee:a2:2a:83:dc:55:
         0d:9a:5c:93:5d:0a:fa:ea:a5:0d:fd:4d:c0:f9:8b:8b:da:c0:
         e5:2f:1f:73:c5:28:1f:8a:47:36:2a:7c:cb:3f:1b:48:e8:28:
         b0:a7:81:26:f5:d9:fa:d2:a5:1e:98:ef:0f:c5:e8:30:9d:52:
         7b:fa:25:87:bc:ac:57:7e:ed:e9:8f:a9:f7:66:75:36:09:38:
         8e:6d:85:08:ac:cc:6b:90:a3:e4:b2:24:4c:eb:85:23:7d:9a:
         40:ed:41:73:ee:48:47:ac:e5:f9:0d:d4:43:f1:53:1f:bf:f9:
         4f:48:a5:c1:6c:87:bd:04:49:f8:b7:2c:87:56:72:dd:d7:4b:
         8e:28:eb:be:f9:c3:bb:c1:da:8f:12:c5:87:33:d0:86:e0:76:
         5f:7d:ac:30:85:5e:42:c0:bd:8d:c2:e0:57:b9:31:9e:e7:ec:
         d3:c6:7a:bf:46:60:bf:a6:23:42:42:14:e1:c4:eb:cb:42:ed:
         19:d2:29:2c:d1:e3:c7:bf:e5:38:a6:14:4b:a3:28:87:20:fe:
         29:db:c6:29:20:a7:6e:79:ab:d0:17:de:b6:6c:56:a2:0a:c0:
         34:03:be:9f:07:b2:49:dd:dd:9e:11:9c:53:56:a1:93:9c:bd:
         1b:77:50:c5
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAco3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA3MDgxODQ4WhcNMjYxMDA0MDgxODQ4WjAYMRYw
FAYDVQQDEw02YTc1OTRlYy02MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuYTLYx1gZs+KPaJsk+GC9XVamgffcwEkwhem6m66GODPcz1cbBnn2QDb
fk/UlTlyVa+WlcPn7rHK7rI5eEh8ZsVQ8rGMIsaW2qeUp8LvLBIYutm6dtaGED3N
nJVQ9KNOTGa/O53h8jBrBzCo5cyQAGdFMqy62iNFNF+LAKT2/QTha1Ps1wD7LJZg
oBn6/j9ElbtxSF/uD1r6XKcNiOqOZLd/BT/VROZO5NTOMfA99ma6lQfkele6ruMW
h5hMzJpReJdd9dYaW3c1GztX3KKdQr9SVHWR+pRRVE3epPV2/aA8ydJVucI7QLJf
IgwwVyZEzleat23qgyKZitxoFvVc4wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEX6
gY/ivyoIRFVv9y8sCg8ybe/nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RjY5RjM0QTkyMzgxMUYxOEUwQjYwRkVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDLcIQMAwDBAMtzwgDBAAtzwww
DQYJKoZIhvcNAQELBQADggEBAESR+t0kbkugyRKMW+6iKoPcVQ2aXJNdCvrqpQ39
TcD5i4vawOUvH3PFKB+KRzYqfMs/G0joKLCngSb12frSpR6Y7w/F6DCdUnv6JYe8
rFd+7emPqfdmdTYJOI5thQiszGuQo+SyJEzrhSN9mkDtQXPuSEes5fkN1EPxUx+/
+U9IpcFsh70ESfi3LIdWct3XS44o6775w7vB2o8SxYcz0Ibgdl99rDCFXkLAvY3C
4Fe5MZ7n7NPGer9GYL+mI0JCFOHE68tC7RnSKSzR48e/5TimFEujKIcg/inbxikg
p255q9AX3rZsVqIKwDQDvp8Hsknd3Z4RnFNWoZOcvRt3UMU=
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:14:55 2026 by rpki-client