Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA8CC469F8611F188D2E1E5CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA8CC469F8611F188D2E1E5CE1D38B0.roa
File: CBA8CC469F8611F188D2E1E5CE1D38B0.roa (raw, json)
Hash identifier: wtufIH/hwE7brN+OYN3sa9rCyCWWJbsPK10fbdhssH0=
Subject key identifier: B9:2D:74:51:30:AF:E5:87:CF:A9:54:1C:31:EB:61:78:C3:72:B8:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D044
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA8CC469F8611F188D2E1E5CE1D38B0.roa
Signing time: Mon 24 Aug 2026 06:41:12 +0000
ROA not before: Mon 24 Aug 2026 06:41:08 +0000
ROA not after: Thu 03 Sep 2026 06:41:08 +0000
asID: 399077
IP address blocks: 156.240.194.0/24 maxlen: 24
156.240.195.0/24 maxlen: 24
156.240.196.0/24 maxlen: 24
156.240.197.0/24 maxlen: 24
156.240.198.0/24 maxlen: 24
156.240.199.0/24 maxlen: 24
156.240.200.0/24 maxlen: 24
156.240.201.0/24 maxlen: 24
156.240.202.0/24 maxlen: 24
156.240.203.0/24 maxlen: 24
156.240.204.0/24 maxlen: 24
156.240.205.0/24 maxlen: 24
156.240.206.0/24 maxlen: 24
156.240.207.0/24 maxlen: 24
156.240.208.0/24 maxlen: 24
156.240.209.0/24 maxlen: 24
156.240.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118852 (0x1d044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 24 06:41:08 2026 GMT
Not After : Sep 3 06:41:08 2026 GMT
Subject: CN=6a8be788-502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:ba:62:e3:e4:18:d1:2f:17:39:03:3d:f0:
f8:27:2a:9b:9e:d3:59:82:ef:c8:1c:af:3b:b6:0e:
f4:99:5e:3b:cf:56:a0:e9:78:0b:ea:31:88:d2:01:
5a:3a:85:62:df:c4:45:8d:6b:b9:65:4e:18:2a:be:
81:db:45:aa:b1:3c:ed:03:c6:a7:63:c6:9b:1c:ba:
4d:54:a4:03:d7:e6:3d:22:c2:31:5d:df:b9:ac:f9:
5a:cf:ef:ca:35:8c:fa:ae:ef:1f:e9:b9:98:64:c5:
92:0e:3b:e0:bd:c8:30:b8:b3:56:3e:d6:ab:b6:b0:
e9:53:fb:f5:e7:cc:1c:b1:1e:f9:e3:76:54:63:b0:
22:cc:30:b3:8a:69:b5:23:09:e9:6e:d9:59:c0:ee:
15:5f:90:2d:2a:85:da:24:cb:5a:d2:cd:89:c0:f5:
8f:b1:b2:30:4a:fb:ac:62:8a:75:0b:24:d9:6b:5e:
19:30:84:55:8b:54:8e:fe:da:d1:2b:ff:0b:53:a2:
17:8e:62:d9:1a:f3:01:66:be:60:11:22:bb:ac:87:
21:0d:9f:3a:ed:86:ba:99:ab:87:e3:fc:31:4e:df:
2b:76:8a:a8:49:8b:0b:39:88:65:5a:3b:4f:ed:ed:
8d:4c:4c:c9:d6:29:38:e9:0b:20:ec:30:4d:06:77:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:74:51:30:AF:E5:87:CF:A9:54:1C:31:EB:61:78:C3:72:B8:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA8CC469F8611F188D2E1E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.194.0-156.240.210.255
Signature Algorithm: sha256WithRSAEncryption
99:a6:df:aa:68:2a:a5:e2:85:65:73:98:46:81:d9:30:91:5d:
87:47:a3:b6:15:6f:7e:75:12:6a:b6:57:a1:45:aa:05:7f:9d:
14:e0:20:89:29:69:07:a1:a5:9f:82:32:f8:66:2e:8b:7b:dc:
3e:20:3b:4c:4d:32:c2:5f:09:89:27:98:17:e1:94:14:66:fb:
fe:34:30:56:e2:d7:24:ea:1b:a5:a8:ce:e7:10:28:38:a2:e9:
b9:41:44:c6:fc:f0:c3:0a:bb:37:01:87:39:8a:06:4d:25:16:
4c:9c:20:64:3c:d1:94:e6:00:85:6e:ed:e7:fb:2d:76:c2:08:
20:39:b9:94:43:c7:73:01:9f:eb:22:a0:9b:eb:56:22:54:d4:
4c:e1:6f:b7:1c:e2:fb:97:54:37:9a:d9:d0:3e:8b:11:01:33:
87:b3:98:f1:c7:bb:3c:c8:94:26:fa:ab:77:69:b6:55:d6:46:
e7:a2:95:02:48:00:9a:97:39:82:b8:9e:10:d8:25:65:18:31:
12:e6:8f:2d:16:86:85:64:87:aa:75:4a:0c:4b:9b:6c:b9:bf:
23:da:fd:83:35:fd:eb:0e:6f:16:46:4d:1a:ac:4e:0a:b7:7d:
71:e6:85:f1:99:0b:ad:09:4b:62:26:a1:55:8d:de:0c:c8:3f:
fb:e1:04:0a
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdBEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI0MDY0MTA4WhcNMjYwOTAzMDY0MTA4WjAYMRYw
FAYDVQQDEw02YThiZTc4OC01MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvv26YuPkGNEvFzkDPfD4JyqbntNZgu/IHK87tg70mV47z1ag6XgL6jGI
0gFaOoVi38RFjWu5ZU4YKr6B20WqsTztA8anY8abHLpNVKQD1+Y9IsIxXd+5rPla
z+/KNYz6ru8f6bmYZMWSDjvgvcgwuLNWPtartrDpU/v158wcsR7543ZUY7AizDCz
imm1IwnpbtlZwO4VX5AtKoXaJMta0s2JwPWPsbIwSvusYop1CyTZa14ZMIRVi1SO
/trRK/8LU6IXjmLZGvMBZr5gESK7rIchDZ867Ya6mauH4/wxTt8rdoqoSYsLOYhl
WjtP7e2NTEzJ1ik46Qsg7DBNBnfgeQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLkt
dFEwr+WHz6lUHDHrYXjDcrhZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQkE4Q0M0NjlGODYxMUYxODhEMkUxRTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc8MIDBACc8NIwDQYJKoZI
hvcNAQELBQADggEBAJmm36poKqXihWVzmEaB2TCRXYdHo7YVb351Emq2V6FFqgV/
nRTgIIkpaQehpZ+CMvhmLot73D4gO0xNMsJfCYknmBfhlBRm+/40MFbi1yTqG6Wo
zucQKDii6blBRMb88MMKuzcBhzmKBk0lFkycIGQ80ZTmAIVu7ef7LXbCCCA5uZRD
x3MBn+sioJvrViJU1Ezhb7cc4vuXVDea2dA+ixEBM4ezmPHHuzzIlCb6q3dptlXW
RueilQJIAJqXOYK4nhDYJWUYMRLmjy0WhoVkh6p1SgxLm2y5vyPa/YM1/esObxZG
TRqsTgq3fXHmhfGZC60JS2ImoVWN3gzIP/vhBAo=
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:01:11 2026 by rpki-client