Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A429C29F8511F1BDFE96DFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A429C29F8511F1BDFE96DFCE1D38B0.roa
File: C0A429C29F8511F1BDFE96DFCE1D38B0.roa (raw, json)
Hash identifier: 0FSwrlV38uwcamXvUDu59m/qAGt+k1K0aCI3ao28mjU=
Subject key identifier: 79:3F:A8:61:12:BC:57:32:C7:8F:76:CF:91:91:88:43:5D:43:43:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D042
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A429C29F8511F1BDFE96DFCE1D38B0.roa
Signing time: Mon 24 Aug 2026 06:33:44 +0000
ROA not before: Mon 24 Aug 2026 06:33:40 +0000
ROA not after: Thu 03 Sep 2026 06:33:40 +0000
asID: 399077
IP address blocks: 156.240.211.0/24 maxlen: 24
156.240.212.0/24 maxlen: 24
156.240.213.0/24 maxlen: 24
156.240.214.0/24 maxlen: 24
156.240.215.0/24 maxlen: 24
156.240.216.0/24 maxlen: 24
156.240.217.0/24 maxlen: 24
156.240.218.0/24 maxlen: 24
156.240.219.0/24 maxlen: 24
156.240.220.0/24 maxlen: 24
156.240.221.0/24 maxlen: 24
156.240.222.0/24 maxlen: 24
156.240.223.0/24 maxlen: 24
156.240.224.0/24 maxlen: 24
156.240.225.0/24 maxlen: 24
156.240.226.0/24 maxlen: 24
156.240.227.0/24 maxlen: 24
156.240.228.0/24 maxlen: 24
156.240.229.0/24 maxlen: 24
156.240.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118850 (0x1d042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 24 06:33:40 2026 GMT
Not After : Sep 3 06:33:40 2026 GMT
Subject: CN=6a8be5c8-f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:77:16:40:79:e6:cf:06:f9:b7:64:db:84:39:
bc:71:36:bd:19:bc:0f:6e:e0:18:f1:34:af:73:59:
c8:74:8b:d5:90:e2:ef:0e:49:4f:45:87:f1:dc:b8:
a2:f7:c8:6b:e6:2a:b7:51:1b:55:91:02:c1:25:ee:
2d:4b:75:5c:87:4c:02:1a:f7:5d:a6:79:c6:f4:af:
ff:6f:c8:29:84:29:13:6c:0f:f8:da:82:98:63:52:
35:68:95:a4:c5:e6:ac:61:71:0f:c4:9f:71:c1:4c:
53:9c:dd:40:e5:67:77:0c:05:62:37:79:3e:9c:2c:
ae:04:cd:51:50:e7:51:83:48:b9:48:fa:2c:b1:bd:
e5:a8:5d:1b:58:6b:1c:0e:db:5c:d7:d4:d2:38:87:
a1:6f:ba:d2:fb:32:03:67:77:8a:0a:b4:65:93:9a:
f6:5a:cc:f5:80:05:8d:af:0e:8a:7c:62:bc:f9:8d:
d5:e5:9f:27:e3:28:4f:fd:98:3b:7a:5f:c9:67:12:
a3:b9:46:68:3f:5c:73:7d:ec:a4:24:40:23:31:90:
09:89:62:91:56:f0:3f:cc:a6:f1:d0:1d:2f:2c:ee:
6e:44:53:8b:68:cd:7e:e4:35:d9:91:a6:ce:c1:58:
e3:89:f4:f8:49:dc:25:3a:dd:90:96:be:9d:2f:59:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:A8:61:12:BC:57:32:C7:8F:76:CF:91:91:88:43:5D:43:43:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A429C29F8511F1BDFE96DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.211.0-156.240.230.255
Signature Algorithm: sha256WithRSAEncryption
7c:0f:c2:7c:b8:46:6d:07:e2:17:2c:76:b2:76:84:2d:eb:27:
26:6e:0e:b0:01:f6:a6:34:a8:cc:39:8d:87:d6:cf:bd:d7:1b:
f8:99:b1:33:8a:4f:29:14:7b:82:00:72:18:81:22:65:b7:92:
31:93:2a:26:c7:01:3e:d7:fd:a9:0d:09:f2:1c:df:96:60:b1:
a7:e7:2d:d4:f8:27:73:ff:6d:43:7a:a9:f0:53:a6:cc:4d:f8:
a9:cb:05:d2:ce:9b:b9:e1:af:e2:d8:80:5c:2b:be:5b:5e:00:
bd:2f:9e:36:ec:41:a8:d7:9b:f6:03:cc:2f:3d:83:77:69:fe:
88:d4:da:fd:9e:16:14:1a:fc:13:b2:2d:86:3d:b4:55:39:9a:
e2:97:b1:0c:ab:08:04:d1:7f:05:78:69:f2:26:7c:b6:42:36:
bf:fb:ac:64:e9:2a:a9:86:6a:fc:87:1d:0c:36:03:25:59:1f:
2b:9d:18:9c:be:d7:c7:bb:8a:97:ea:ec:bc:2d:9b:70:b4:29:
17:24:5f:7e:18:d0:bc:fe:40:41:00:62:bf:51:5a:b9:4a:31:
1a:61:e9:86:aa:fc:80:6b:83:d1:8e:c1:11:75:ec:2f:b6:0f:
56:be:07:c6:1a:eb:1c:6f:7c:53:92:e7:84:7f:26:0c:45:c0:
1e:3b:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:31 2026 by rpki-client