Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD461F5E9C8111F18B1555D6CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD461F5E9C8111F18B1555D6CE1D38B0.roa
File: AD461F5E9C8111F18B1555D6CE1D38B0.roa (raw, json)
Hash identifier: INpNGHkdUjmrPjwsyDyq/uVNf18kG8wtGlyrWP80CiE=
Subject key identifier: BF:6A:66:43:B8:3E:0C:CF:EC:89:C5:3E:C2:91:83:37:1F:26:E3:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CEC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD461F5E9C8111F18B1555D6CE1D38B0.roa
Signing time: Thu 20 Aug 2026 10:27:00 +0000
ROA not before: Thu 20 Aug 2026 10:26:56 +0000
ROA not after: Sat 10 Oct 2026 10:26:56 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
45.192.115.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.194.12.0/23 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
45.201.16.0/21 maxlen: 24
45.201.16.0/24 maxlen: 24
45.201.17.0/24 maxlen: 24
45.201.18.0/24 maxlen: 24
45.201.19.0/24 maxlen: 24
45.201.20.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
45.206.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118464 (0x1cec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 10:26:56 2026 GMT
Not After : Oct 10 10:26:56 2026 GMT
Subject: CN=6a86d674-21ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:27:66:af:50:13:4e:bc:29:35:02:e6:bb:
b2:27:a7:06:3d:2d:20:a3:0a:7b:02:75:29:d9:f5:
52:00:2b:49:f0:27:12:df:b9:19:07:f8:35:b6:91:
35:fe:c5:ec:71:f8:b5:a2:ba:b7:8f:18:b5:16:f4:
8a:a0:b5:dc:57:59:ef:9d:5e:6d:e1:35:ed:8b:1f:
b9:aa:9f:8e:f5:5b:cf:8b:08:d9:a8:2b:ec:ef:a1:
bd:2b:5a:dc:2c:e2:da:58:81:cf:ca:19:fc:dd:61:
00:09:7a:9a:b8:f8:8b:48:2c:a7:34:3e:a9:53:cc:
39:72:a7:99:73:ec:e0:9d:26:fe:ce:37:33:62:eb:
ee:ea:50:ab:a5:6b:4a:4c:29:06:ae:7a:35:35:ac:
e5:dd:26:07:c1:8e:7b:22:87:21:e0:cb:ee:87:ca:
b9:24:91:c2:f4:5c:bf:ef:fb:b6:05:a3:dd:e3:a9:
75:b3:be:f2:6c:ce:c6:9f:c3:3d:f5:62:ec:30:a5:
ac:02:2f:b0:d4:e9:c4:99:c4:ea:53:1c:09:57:2c:
9a:16:1a:da:a0:f8:34:04:c0:86:6a:5a:c8:f0:99:
48:46:49:aa:0f:6e:16:65:d4:e6:f4:dc:c9:d8:48:
b3:fe:c8:3c:cd:32:e5:1e:89:22:98:92:3e:af:e2:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:66:43:B8:3E:0C:CF:EC:89:C5:3E:C2:91:83:37:1F:26:E3:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD461F5E9C8111F18B1555D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
45.192.115.0/24
45.194.0.0/24
45.194.12.0/23
45.194.24.0/24
45.195.133.0/24
45.195.255.0/24
45.198.184.0/24
45.201.16.0/21
45.201.28.0/23
45.204.149.0-45.204.151.255
45.206.65.0/24
Signature Algorithm: sha256WithRSAEncryption
79:89:aa:ee:4d:75:07:01:aa:84:d5:54:62:a8:27:ee:49:a0:
d9:3f:a5:f2:a8:f3:05:bc:91:75:0f:2b:cd:1e:f6:4a:82:0b:
48:c5:4e:ae:89:c5:b9:d5:bd:5f:78:07:fc:3a:36:99:78:da:
29:ad:81:95:7e:98:bd:94:e6:96:12:00:94:51:8b:24:c1:3c:
f1:18:83:14:30:17:28:0b:c8:33:51:be:73:d7:86:cf:54:81:
18:7f:f5:e5:d3:e2:8c:2a:5e:fa:30:25:1e:af:3d:48:30:4e:
cd:c6:9a:5a:7a:c4:f0:55:fb:c3:47:b5:61:d2:43:eb:64:d8:
e7:9a:cc:1e:e8:cd:5b:94:ae:84:80:f1:4e:34:bf:73:f2:26:
f0:87:4b:80:0f:d8:74:98:05:fd:14:6d:45:63:34:60:3b:52:
f3:c5:62:9c:d5:74:42:93:84:8e:74:87:23:5d:88:b9:b7:32:
1a:10:52:a9:aa:7a:b3:e0:2c:35:28:64:1f:4a:47:42:f5:5c:
8d:f5:31:71:bc:08:5c:a5:0f:b5:6e:39:8d:98:a3:dc:f2:65:
b5:47:90:b0:aa:f9:c4:27:2d:92:ad:bf:b0:e0:ca:9c:16:82:
b7:e9:b6:65:ff:ac:9f:a4:df:ea:57:e6:ab:02:34:46:87:17:
50:d3:d9:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:45 2026 by rpki-client