Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB4B5722964011F1AEB1EBE6CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB4B5722964011F1AEB1EBE6CE1D38B0.roa
File: CB4B5722964011F1AEB1EBE6CE1D38B0.roa (raw, json)
Hash identifier: rR0OhPh8WNoyPJg7SetcPH+1k9b9HTTU/Vln5p8FsMY=
Subject key identifier: A5:5A:8E:FE:B0:35:60:3C:FA:5C:0F:EF:F0:30:40:B1:AC:81:99:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CBF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB4B5722964011F1AEB1EBE6CE1D38B0.roa
Signing time: Wed 12 Aug 2026 11:27:26 +0000
ROA not before: Wed 12 Aug 2026 11:27:22 +0000
ROA not after: Sun 12 Aug 2029 11:27:22 +0000
asID: 17561
IP address blocks: 156.237.60.0/24 maxlen: 24
156.237.61.0/24 maxlen: 24
156.237.62.0/24 maxlen: 24
156.237.63.0/24 maxlen: 24
156.237.64.0/24 maxlen: 24
156.237.65.0/24 maxlen: 24
156.237.66.0/24 maxlen: 24
156.237.67.0/24 maxlen: 24
156.237.68.0/24 maxlen: 24
156.237.69.0/24 maxlen: 24
156.237.70.0/24 maxlen: 24
156.237.71.0/24 maxlen: 24
156.237.72.0/24 maxlen: 24
156.237.73.0/24 maxlen: 24
156.237.74.0/24 maxlen: 24
156.237.75.0/24 maxlen: 24
156.237.76.0/24 maxlen: 24
156.237.77.0/24 maxlen: 24
156.237.78.0/24 maxlen: 24
156.237.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117748 (0x1cbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 11:27:22 2026 GMT
Not After : Aug 12 11:27:22 2029 GMT
Subject: CN=6a7c589e-9930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:7d:9b:eb:37:dd:34:3c:17:5b:35:aa:7d:
73:d3:00:45:f6:89:da:48:2b:38:49:34:74:ea:49:
dc:1e:ba:e0:1c:27:57:37:34:de:c2:9a:fc:25:2c:
85:a2:83:14:26:bb:d6:29:d8:59:e1:26:77:9d:86:
97:d3:83:d6:5b:f4:6b:c4:47:60:40:94:d0:94:bc:
ae:b9:36:e0:4b:b9:3d:03:78:7a:9d:ae:ff:da:d7:
59:2d:6a:d1:9c:a7:3d:05:0c:3f:f5:cc:72:83:8e:
65:65:c0:1f:b1:0d:76:a9:11:b5:e4:58:62:69:a6:
0a:ad:ea:8d:0a:7e:d4:2c:c3:2d:00:b0:10:a2:e8:
35:03:e9:28:a6:bc:06:1a:ef:93:59:c0:d9:8d:e6:
b8:48:67:8d:41:a4:f0:eb:3d:5c:9c:f8:54:72:b7:
ef:d9:78:c8:f1:cd:04:45:d1:3a:e0:f6:69:e9:56:
3c:d0:fe:86:c7:78:15:6f:ff:26:fa:00:11:a8:07:
70:7a:c3:e6:fc:ef:be:ea:b1:94:74:e8:6a:9c:9e:
f9:94:0c:87:00:bc:fd:0b:38:d3:23:d0:a8:c1:44:
73:29:07:81:fb:fd:48:a7:ec:f2:4c:58:f9:0f:00:
77:53:cb:1a:b4:e7:05:bf:ea:25:48:96:da:52:65:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:8E:FE:B0:35:60:3C:FA:5C:0F:EF:F0:30:40:B1:AC:81:99:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB4B5722964011F1AEB1EBE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.60.0-156.237.79.255
Signature Algorithm: sha256WithRSAEncryption
aa:8d:09:fd:34:e3:c8:ce:91:52:d0:80:c4:1d:98:a2:44:8b:
e0:e3:0c:74:9e:9e:cd:8a:f7:f7:26:b8:45:8a:08:71:8b:01:
ef:2a:df:ed:2f:f4:7b:1b:3e:0e:e2:49:98:a6:8c:37:80:6f:
ce:8a:7d:fc:61:b7:c7:71:e1:60:0b:c5:4d:e8:3b:af:10:3e:
84:4e:85:cd:47:92:64:cc:8f:29:5f:fa:94:c9:51:3d:92:f4:
39:58:95:54:b1:4d:22:cf:e1:c9:79:a9:0c:79:83:81:62:2a:
d5:22:37:2b:20:fc:ec:d0:f4:b2:3f:4d:d4:e8:fa:5e:a4:41:
34:ed:f1:71:64:24:10:a9:22:89:e5:57:ca:87:a0:0f:39:21:
56:4a:45:75:6b:4f:5a:75:75:56:06:d7:51:4a:91:cc:04:4f:
47:fd:f0:81:2f:fc:08:96:a9:f8:70:84:fe:62:ff:63:a5:22:
c5:b2:67:14:3c:20:6e:86:1f:51:61:95:ab:9f:37:41:88:31:
a6:83:67:71:ae:14:a4:ed:27:cc:65:46:67:38:e8:3f:fb:ca:
5c:06:ef:5c:96:11:b1:95:d3:18:e6:24:28:71:72:3b:f0:63:
06:a9:23:a2:21:31:22:7c:dc:a5:13:2e:72:97:c9:3a:f3:24:
3f:9d:88:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:52 2026 by rpki-client