Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4EE6326968E11F19DE400BBCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4EE6326968E11F19DE400BBCE1D38B0.roa
File: C4EE6326968E11F19DE400BBCE1D38B0.roa (raw, json)
Hash identifier: GW8A88ySGiJo6L5pIvu1vM6QobJRmK0NQzdM/zBq/eo=
Subject key identifier: 31:7F:2F:0C:8C:A1:7D:E7:BC:A1:5A:32:8B:32:BB:F5:D8:ED:F0:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CC4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4EE6326968E11F19DE400BBCE1D38B0.roa
Signing time: Wed 12 Aug 2026 20:45:36 +0000
ROA not before: Wed 12 Aug 2026 20:45:32 +0000
ROA not after: Sun 12 Aug 2029 20:45:32 +0000
asID: 17561
IP address blocks: 156.227.61.0/24 maxlen: 24
156.227.62.0/24 maxlen: 24
156.227.63.0/24 maxlen: 24
156.227.128.0/24 maxlen: 24
156.227.131.0/24 maxlen: 24
156.227.134.0/24 maxlen: 24
156.227.135.0/24 maxlen: 24
156.227.137.0/24 maxlen: 24
156.227.138.0/24 maxlen: 24
156.227.141.0/24 maxlen: 24
156.227.142.0/24 maxlen: 24
156.227.146.0/24 maxlen: 24
156.227.147.0/24 maxlen: 24
156.227.148.0/24 maxlen: 24
156.227.149.0/24 maxlen: 24
156.227.150.0/24 maxlen: 24
156.227.151.0/24 maxlen: 24
156.227.152.0/24 maxlen: 24
156.227.153.0/24 maxlen: 24
156.227.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117834 (0x1cc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 20:45:32 2026 GMT
Not After : Aug 12 20:45:32 2029 GMT
Subject: CN=6a7cdb70-07e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:5f:7a:aa:10:76:a0:ed:e7:c9:70:93:53:
10:d7:31:96:a2:67:69:52:08:6f:a8:aa:79:8e:76:
b9:4b:1a:27:cd:57:54:f5:e4:94:82:8b:2e:3e:3f:
ef:66:c5:70:73:fa:09:26:9b:20:e7:bb:e5:ef:4e:
66:96:2b:b3:d4:e0:0c:50:5e:3e:11:7a:2b:12:54:
11:cd:87:d8:83:6b:47:25:0e:95:0a:a0:f8:95:05:
0c:09:32:bc:f2:70:49:16:9d:69:af:70:9c:c2:62:
1b:d7:ab:15:cb:90:a4:06:6d:f8:c7:d5:9a:65:24:
f0:1f:81:68:f4:47:ae:df:66:48:b6:db:f9:0a:ef:
7b:ef:c6:65:81:0c:ef:b8:4f:48:99:91:63:fa:e8:
d6:2f:c6:d8:c0:80:6f:ee:3e:50:f7:00:e3:14:21:
49:48:32:aa:0f:60:16:97:36:09:6c:73:9d:e2:ed:
7d:8a:07:70:0f:22:6f:a3:06:9c:69:f7:76:0b:b7:
1e:d3:28:f4:80:1f:25:9d:14:4f:17:ea:e2:00:a5:
16:ba:cb:ed:9e:42:0a:ed:be:4c:7d:64:28:79:7b:
56:fb:cf:fd:f6:ae:28:ed:72:b3:a1:53:18:ba:e6:
9c:e4:b7:2d:b5:11:4f:33:2b:e9:ed:8d:29:c0:8a:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:2F:0C:8C:A1:7D:E7:BC:A1:5A:32:8B:32:BB:F5:D8:ED:F0:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4EE6326968E11F19DE400BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.61.0-156.227.63.255
156.227.128.0/24
156.227.131.0/24
156.227.134.0/23
156.227.137.0-156.227.138.255
156.227.141.0-156.227.142.255
156.227.146.0-156.227.154.255
Signature Algorithm: sha256WithRSAEncryption
3b:3e:1f:14:ed:dd:1d:dc:b7:4e:ff:77:d8:d4:ea:ae:b5:e6:
bb:56:bd:2c:76:c7:f5:23:28:ce:b7:44:93:1d:99:f6:3e:9a:
54:e2:16:08:9b:c0:b5:fe:81:cc:75:10:86:cc:b7:11:20:9d:
31:3b:11:e5:3f:a5:2e:e3:68:2c:76:da:0e:67:34:95:ca:42:
2d:0f:90:37:c7:70:ae:30:e6:e0:d2:cf:ee:4e:59:db:0c:ff:
dd:a8:cb:40:b1:60:a1:b6:29:a3:7d:d8:4a:05:33:1d:7c:d1:
53:fd:d5:0b:a2:bd:69:3b:ef:91:c0:b5:a3:34:3d:3b:c3:42:
e3:9c:3d:69:f0:77:20:78:f0:bc:a8:98:f4:96:a9:4d:ad:bf:
8e:46:66:f3:24:ff:49:cc:c0:a6:8e:94:c4:ac:5f:58:2a:3c:
06:a1:9d:3f:29:d1:5f:b9:57:91:9b:64:0b:2a:71:a0:68:51:
48:a7:ec:8a:3f:8f:5e:43:18:25:27:3f:1c:5c:d8:c2:d7:9a:
a6:81:d6:c3:90:7c:3b:1b:1c:38:ac:99:0b:44:ce:27:35:5e:
39:b3:ba:f8:4d:11:33:f6:71:52:df:2d:73:0e:9c:d3:93:a5:
60:49:e4:aa:b9:74:f9:fe:24:83:59:f0:a6:3b:b5:7f:a6:e5:
e1:02:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:40:14 2026 by rpki-client