Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9552B40AB8D11F1AF3AA5B2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9552B40AB8D11F1AF3AA5B2CE1D38B0.roa
File: A9552B40AB8D11F1AF3AA5B2CE1D38B0.roa (raw, json)
Hash identifier: N8QhtI2I/9m+doiDlaOTjm9wQMJ14MB5548ZVYjAI9I=
Subject key identifier: 3B:D9:80:36:13:1E:E1:64:7D:41:38:B1:C8:E6:57:40:94:39:1A:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D417
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9552B40AB8D11F1AF3AA5B2CE1D38B0.roa
Signing time: Tue 08 Sep 2026 14:00:35 +0000
ROA not before: Tue 08 Sep 2026 14:00:30 +0000
ROA not after: Wed 04 Nov 2026 14:00:30 +0000
asID: 63099
IP address blocks: 45.192.115.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/24 maxlen: 24
45.192.229.0/24 maxlen: 24
45.192.230.0/24 maxlen: 24
45.192.231.0/24 maxlen: 24
45.192.232.0/24 maxlen: 24
45.192.233.0/24 maxlen: 24
45.192.234.0/24 maxlen: 24
45.192.235.0/24 maxlen: 24
45.192.236.0/24 maxlen: 24
45.192.237.0/24 maxlen: 24
45.192.238.0/24 maxlen: 24
45.192.239.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Sep 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119831 (0x1d417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 8 14:00:30 2026 GMT
Not After : Nov 4 14:00:30 2026 GMT
Subject: CN=6aa01503-41a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:00:3c:ed:be:60:66:46:85:b5:01:c0:6b:
34:1d:5c:7b:c1:de:8c:f4:7b:0d:04:9a:6e:3f:63:
90:52:e3:90:ea:6d:64:21:82:f0:49:fb:1a:46:db:
2f:1b:b1:31:ab:47:ba:e6:a5:13:3b:fd:50:03:32:
1e:26:89:66:33:3e:1b:3e:f9:7b:a6:ab:40:18:09:
02:30:e5:52:68:08:51:5a:62:41:04:81:66:81:cf:
92:e3:c3:3c:27:1e:77:0e:c4:92:24:e6:b3:77:c5:
63:1f:0d:18:1f:67:d1:d5:c4:d8:14:69:09:f4:f6:
23:15:bd:2c:dd:81:27:b0:19:75:60:ad:db:95:ee:
5c:0a:b5:4c:e3:3d:8e:51:3f:4b:ed:1f:78:66:86:
00:ff:a7:7b:3f:68:a3:e7:18:de:18:d4:4e:c6:0b:
d7:5f:c6:0f:31:03:ea:c3:73:99:f4:b7:74:0b:94:
0e:f3:7e:1d:72:bc:20:5f:b1:a2:1e:85:ce:d7:bd:
fe:94:a9:f4:3d:48:e3:f8:48:44:cb:da:6c:11:f3:
40:b0:85:13:58:4c:e6:dd:e7:e4:ab:4b:e2:a1:f2:
c6:47:65:12:9b:52:de:58:86:5a:40:2b:82:e4:bb:
72:44:22:c5:be:c5:c2:f3:00:93:58:9c:7e:1b:ea:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:80:36:13:1E:E1:64:7D:41:38:B1:C8:E6:57:40:94:39:1A:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9552B40AB8D11F1AF3AA5B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.115.0/24
45.192.166.0/24
45.192.227.0-45.192.239.255
45.196.226.0/24
45.198.231.0/24
45.201.30.0-45.201.32.255
Signature Algorithm: sha256WithRSAEncryption
29:70:2b:6f:06:d0:8f:6f:e6:05:ae:e7:b3:e8:d9:18:fd:f6:
db:62:90:e6:62:82:0f:a4:2f:db:13:d9:17:ee:48:4e:81:29:
28:0f:b5:7c:85:94:a1:a9:3b:7d:43:c3:52:b1:04:bd:73:85:
6a:93:7b:c1:d5:9c:c3:3d:1f:68:e0:e7:b9:4f:d2:f3:f9:ff:
de:0e:d3:27:6b:95:62:5c:e7:ca:04:e6:56:c5:88:cc:bb:aa:
18:6d:c7:b6:8f:af:96:a3:6f:b7:ba:3e:05:e0:bd:db:32:98:
27:57:71:7b:6f:90:2f:41:40:44:00:9f:df:75:45:f0:6a:42:
c5:7a:bc:b4:4d:5a:2d:d2:ae:92:4d:a1:33:b3:7c:a0:a5:dc:
b3:cf:b4:c9:b0:f7:93:a6:4a:9d:d8:24:c2:61:59:15:b5:18:
dc:43:6f:4a:3c:4e:0e:87:f2:76:85:f2:0d:9d:15:74:ff:8a:
d0:a3:c5:67:eb:d6:6a:f9:e9:53:ae:a8:bf:e1:5d:41:81:e6:
98:05:2b:e3:32:7b:21:65:0f:44:43:f4:c8:e1:c1:c2:1d:e5:
91:9e:03:e4:f7:b9:61:59:4e:67:ee:42:47:22:b5:a1:c6:b6:
cf:40:d0:45:6d:f4:0d:c0:b3:11:f8:20:42:4c:86:03:57:e2:
57:97:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:00 2026 by rpki-client