Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D98C0502964F11F1A636BEC4CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D98C0502964F11F1A636BEC4CE1D38B0.roa
File: D98C0502964F11F1A636BEC4CE1D38B0.roa (raw, json)
Hash identifier: Yfucjezmv3XSpDPusyXAeDsAwQHpRxEbh91lYIlMJs4=
Subject key identifier: 73:7E:44:FC:BB:4B:01:12:B8:28:39:D3:38:27:B0:A1:AD:67:E6:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CC12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D98C0502964F11F1A636BEC4CE1D38B0.roa
Signing time: Wed 12 Aug 2026 13:15:12 +0000
ROA not before: Wed 12 Aug 2026 13:15:08 +0000
ROA not after: Sun 12 Aug 2029 13:15:08 +0000
asID: 17561
IP address blocks: 45.204.156.0/24 maxlen: 24
45.204.157.0/24 maxlen: 24
45.204.158.0/24 maxlen: 24
45.204.159.0/24 maxlen: 24
45.204.176.0/24 maxlen: 24
45.204.177.0/24 maxlen: 24
45.204.178.0/24 maxlen: 24
45.204.179.0/24 maxlen: 24
45.204.180.0/24 maxlen: 24
45.204.182.0/24 maxlen: 24
45.204.183.0/24 maxlen: 24
45.204.184.0/24 maxlen: 24
45.204.185.0/24 maxlen: 24
45.204.186.0/24 maxlen: 24
45.204.187.0/24 maxlen: 24
45.204.188.0/24 maxlen: 24
45.204.189.0/24 maxlen: 24
45.204.190.0/24 maxlen: 24
45.204.191.0/24 maxlen: 24
45.204.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117778 (0x1cc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 12 13:15:08 2026 GMT
Not After : Aug 12 13:15:08 2029 GMT
Subject: CN=6a7c71e0-de96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:4c:b0:29:05:3d:b9:74:f2:d9:eb:21:74:
6d:f8:ad:7a:7c:9a:19:63:fc:4c:ba:ff:a4:c6:25:
e2:cf:1e:b3:76:ab:b0:ce:7d:88:b4:ea:4f:cb:65:
1d:bc:33:89:06:58:4b:85:bb:16:1d:79:f4:05:2b:
f2:f4:45:6f:b0:89:19:2b:cb:d9:fe:5c:51:60:9f:
57:40:66:d6:10:37:8b:3c:b8:64:ea:25:38:e9:54:
48:bc:e6:d9:0e:0d:98:26:af:27:bf:62:76:19:af:
d1:97:cf:be:f0:1f:a7:82:06:3b:b8:28:b1:ee:9a:
85:74:6a:a9:f0:b0:cf:6b:b0:0d:0f:06:71:69:e5:
f0:ca:f8:57:cb:a6:d2:85:e3:bb:76:01:6e:5d:30:
bc:7b:09:a5:28:51:fc:5d:27:28:3b:5f:9f:c2:d9:
dd:ef:41:a9:d8:c5:e6:85:aa:44:a6:17:8a:1b:e6:
6c:06:d9:99:f5:04:ba:2b:09:43:db:dd:6e:11:70:
57:e4:6d:64:89:d3:c6:9b:2d:91:7d:5c:41:71:91:
0e:b0:7e:16:4c:af:19:fe:e9:8b:93:d6:00:67:c4:
75:eb:ff:63:b2:d1:2d:01:50:3b:6e:71:af:79:df:
d9:6f:74:b2:fe:bc:2a:2d:62:02:24:2c:6e:d6:18:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7E:44:FC:BB:4B:01:12:B8:28:39:D3:38:27:B0:A1:AD:67:E6:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D98C0502964F11F1A636BEC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.156.0/22
45.204.176.0-45.204.180.255
45.204.182.0-45.204.192.255
Signature Algorithm: sha256WithRSAEncryption
2d:d8:b3:54:5d:cd:1c:18:24:1d:52:5d:94:75:aa:0a:7a:3f:
dd:46:16:eb:9d:5e:83:ef:15:f0:78:32:a8:0e:23:3c:e1:83:
8e:f5:a1:f6:b1:8e:0c:5d:b5:8b:e6:e1:2b:c2:4b:35:27:a2:
52:03:52:da:9e:7a:06:76:96:76:91:87:c0:04:9a:9a:e6:2e:
7e:89:de:99:3b:06:61:49:62:81:a0:44:09:e5:a6:8d:d8:23:
7d:0a:89:7b:36:51:fd:b5:a5:af:16:34:a5:f6:5a:21:95:2d:
9a:dc:8f:9f:24:2d:ee:04:5f:98:3a:31:1c:f7:7e:94:42:b1:
02:f8:e4:4e:b4:bb:14:28:71:5d:35:4d:29:ef:9b:5d:8d:cc:
43:ad:cf:16:91:58:43:c5:88:ac:ba:8e:5e:a2:1a:c2:6f:88:
ca:3c:79:4d:7d:7c:e7:b2:37:2e:90:ab:86:b9:db:5c:55:67:
49:4d:d2:52:06:42:ac:0d:25:37:6a:f5:da:ce:9e:4c:c4:86:
5c:ac:0a:1f:0d:bf:ad:e9:46:e3:4c:d5:6a:22:b5:f3:d1:4e:
cd:1f:03:3f:2b:7b:c3:1a:d0:ad:88:9f:47:00:3c:00:32:75:
b6:14:cc:bb:86:19:2d:08:5f:be:73:c0:ff:11:ad:c5:5c:5e:
3c:27:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:29 2026 by rpki-client