Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF79CBC968D11F1B6E2F9B2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF79CBC968D11F1B6E2F9B2CE1D38B0.roa
File: ABF79CBC968D11F1B6E2F9B2CE1D38B0.roa (raw, json)
Hash identifier: zLQ6iRQ6fBqzBI/szEwW7HPDT37ch8+9d+oK++JKjE4=
Subject key identifier: 58:CC:6A:55:78:AD:26:22:0B:DD:10:74:F0:80:A8:F2:A9:B3:7D:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CC48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF79CBC968D11F1B6E2F9B2CE1D38B0.roa
Signing time: Wed 12 Aug 2026 20:37:45 +0000
ROA not before: Wed 12 Aug 2026 20:37:41 +0000
ROA not after: Sun 12 Aug 2029 20:37:41 +0000
asID: 17561
IP address blocks: 156.227.37.0/24 maxlen: 24
156.227.38.0/24 maxlen: 24
156.227.39.0/24 maxlen: 24
156.227.40.0/24 maxlen: 24
156.227.41.0/24 maxlen: 24
156.227.42.0/24 maxlen: 24
156.227.43.0/24 maxlen: 24
156.227.44.0/24 maxlen: 24
156.227.45.0/24 maxlen: 24
156.227.46.0/24 maxlen: 24
156.227.47.0/24 maxlen: 24
156.227.48.0/24 maxlen: 24
156.227.49.0/24 maxlen: 24
156.227.50.0/24 maxlen: 24
156.227.51.0/24 maxlen: 24
156.227.56.0/24 maxlen: 24
156.227.57.0/24 maxlen: 24
156.227.58.0/24 maxlen: 24
156.227.59.0/24 maxlen: 24
156.227.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117832 (0x1cc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 20:37:41 2026 GMT
Not After : Aug 12 20:37:41 2029 GMT
Subject: CN=6a7cd999-1353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:82:96:93:af:74:8d:ed:36:e0:d1:82:b3:
3e:da:ad:1d:ba:19:82:ab:50:cd:d3:cf:92:1d:39:
21:52:aa:f5:71:26:84:21:c9:5a:d1:72:c0:06:34:
19:21:fd:15:ec:f0:3e:94:c6:d5:43:40:1a:bb:ed:
c6:7d:c7:f0:54:97:48:ec:b4:d9:74:7f:f1:93:77:
c3:b8:30:f7:bb:4f:ac:f2:be:87:de:83:56:50:79:
bd:e9:5f:99:44:f9:04:5e:5c:be:74:89:df:4a:06:
75:c8:30:12:6b:bd:b4:ac:de:30:44:e8:f8:f7:bb:
af:a3:3b:60:12:cf:8e:d5:ff:07:da:6c:52:3e:b5:
73:00:3d:8c:43:1e:3c:6d:50:21:d8:e5:bb:90:12:
9e:c8:46:2c:76:ba:95:6f:bb:94:e6:3f:2b:17:09:
a9:ac:7c:d5:1d:09:b6:af:00:d0:7d:1d:76:af:b1:
67:37:04:49:f7:8d:30:39:dc:bd:06:f2:d0:7f:87:
3b:74:42:c3:d1:c0:f9:1e:4e:b6:af:19:a8:71:18:
b0:3b:e0:a4:d2:40:32:f3:10:0b:ca:1f:cf:22:17:
a0:88:c4:90:2a:03:56:75:03:1d:db:20:eb:76:90:
0c:98:78:3c:69:c8:ab:11:bc:fc:ff:a7:9e:19:14:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:6A:55:78:AD:26:22:0B:DD:10:74:F0:80:A8:F2:A9:B3:7D:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF79CBC968D11F1B6E2F9B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.37.0-156.227.51.255
156.227.56.0-156.227.60.255
Signature Algorithm: sha256WithRSAEncryption
81:93:91:a4:79:68:3f:26:df:d9:c4:15:c5:4b:f3:17:10:4b:
32:f7:ae:3f:e4:d5:14:98:8b:22:3a:76:7b:ce:18:12:ea:04:
14:ab:1e:53:85:1a:2d:15:db:bf:bc:86:91:56:3b:44:d6:a3:
2e:70:d2:97:ee:6a:19:bf:e2:0c:a0:a0:d3:bb:f7:70:af:01:
5a:09:be:70:9a:a1:20:c5:1b:f1:e7:26:e0:3d:98:a7:92:b2:
95:7f:3b:5a:75:d3:01:1b:8d:6a:6e:d2:7e:61:d2:6d:0c:52:
01:af:99:24:5a:51:d8:ce:b7:7c:8e:ac:46:3c:c1:c9:e5:81:
78:52:4a:ba:5a:50:5e:6c:59:5b:30:48:e7:a4:b9:04:8b:d9:
89:2c:e2:3e:be:76:b6:4f:3e:c7:b1:0b:a9:dd:ca:d7:ed:3a:
95:f6:59:36:fe:06:95:76:71:02:a5:14:09:61:c5:50:d0:64:
de:e3:72:85:8f:5b:02:d3:46:62:55:6f:42:78:43:85:80:72:
9c:d1:9a:00:47:51:51:ca:a8:59:88:92:e3:72:0f:2e:cd:7d:
56:8e:6e:e5:68:37:7c:7b:75:94:29:a4:51:7b:62:78:7a:49:
ff:32:77:d6:69:ef:df:d4:f3:9d:1a:a0:6c:ce:c7:5f:e7:cc:
3d:a5:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:21:35 2026 by rpki-client