
Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BB9A7C9D4E11F19566E9B6CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BB9A7C9D4E11F19566E9B6CE1D38B0.roa
File: C6BB9A7C9D4E11F19566E9B6CE1D38B0.roa (raw, json)
Hash identifier: uVMClDf1NJ0f9101Hiyt2wFdAPEcu+m8mxHVDF35vwc=
Subject key identifier: 39:B6:9E:65:43:44:2F:32:44:B3:F2:79:53:FB:23:86:D4:D3:01:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CFB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BB9A7C9D4E11F19566E9B6CE1D38B0.roa
Signing time: Fri 21 Aug 2026 10:55:09 +0000
ROA not before: Fri 21 Aug 2026 10:55:05 +0000
ROA not after: Thu 08 Oct 2026 10:55:05 +0000
asID: 63099
IP address blocks: 156.227.136.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118704 (0x1cfb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 10:55:05 2026 GMT
Not After : Oct 8 10:55:05 2026 GMT
Subject: CN=6a882e8d-3805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:74:75:19:f2:d1:ae:c8:5e:e5:a0:dc:f4:
cd:7b:f8:1e:75:4d:c3:bc:bb:b2:80:fa:4f:70:5f:
3b:26:cc:e9:ed:2d:a7:b6:e5:c6:97:36:84:91:da:
ee:c8:1e:ea:a2:2b:c9:93:e6:a3:42:ce:81:cc:17:
52:cf:41:f8:1e:4e:e3:26:e9:34:37:68:39:b6:9b:
94:37:c3:57:d5:76:80:fd:07:8e:02:e6:57:9c:98:
78:68:fc:2b:8d:1e:9a:7e:52:d1:c9:14:8b:a1:63:
26:70:9e:02:bc:96:56:59:8f:0f:3a:84:b2:2c:b3:
fe:1c:94:d4:e4:fa:77:58:fe:c3:73:b1:5b:d6:d9:
ce:03:cb:6e:7a:56:b5:71:7b:8c:12:53:bb:b0:c6:
be:4d:c4:84:c8:51:52:9b:96:87:b7:91:9f:27:25:
d8:0d:65:97:b8:ee:a7:79:b5:56:a5:94:96:75:5b:
f1:9c:6e:ac:f5:ff:1c:6b:c9:b0:45:d5:2b:fd:65:
30:9c:5d:2f:48:12:4d:b4:db:c9:ce:cd:04:2d:68:
9f:aa:42:0c:b5:5f:1e:5e:ee:9b:10:63:f7:2b:ea:
97:c1:6b:76:88:6b:53:0a:ad:4a:32:39:b3:71:5f:
4b:af:4b:70:0d:6f:28:66:4f:8a:45:65:0c:21:a4:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B6:9E:65:43:44:2F:32:44:B3:F2:79:53:FB:23:86:D4:D3:01:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BB9A7C9D4E11F19566E9B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.136.0/24
156.231.6.0/24
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.233.66.0/24
156.249.133.0/24
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.180.0/24
156.249.187.0/24
156.249.190.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
51:04:57:e2:6c:2b:2e:49:8e:52:1e:8c:2d:9c:fb:d9:92:7c:
b2:58:98:94:94:f5:0b:ed:ee:bc:45:36:da:8a:62:8a:46:28:
3e:37:f1:74:ba:c1:a3:14:f6:8f:09:ec:6a:d8:52:40:04:66:
62:c1:ac:33:1c:6e:01:22:60:bb:7c:1a:1b:14:d5:59:8b:03:
3e:91:b6:1a:21:93:ac:91:ca:8b:ad:de:0c:79:9a:21:39:d0:
d5:26:12:fd:ae:9c:96:b8:d0:b5:76:36:8a:65:29:2c:3b:50:
68:b0:ac:c6:ba:32:89:01:2e:14:19:29:57:b6:c5:63:b0:d4:
17:56:f2:1c:3d:c7:8c:5a:e6:3e:da:ed:d3:fe:46:0e:7b:53:
9b:59:87:be:31:77:f2:62:f0:e6:f2:f9:1c:79:81:74:c7:89:
1d:82:ee:db:a2:a2:da:46:7a:ae:ed:6e:50:b5:36:6c:08:b5:
9b:d2:89:5e:76:fa:29:0e:7a:81:81:aa:34:ef:10:1a:ec:fd:
80:f7:58:14:c9:4b:bb:b5:db:ca:d2:c9:1e:ed:66:ac:78:1f:
eb:d4:2c:fa:f5:fe:05:aa:56:f7:df:5d:db:9a:31:4c:4f:cb:
6d:cc:5b:86:2d:62:94:b2:fd:75:18:36:b9:76:99:67:35:18:
ce:dc:01:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:46 2026 by rpki-client