Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E416E7AE9CDE11F193B32FFFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E416E7AE9CDE11F193B32FFFCE1D38B0.roa
File: E416E7AE9CDE11F193B32FFFCE1D38B0.roa (raw, json)
Hash identifier: WlE0ll9ED5QuaGRcCsmkUQc8WvtbWks3MJadRBhxYmk=
Subject key identifier: 32:A9:FC:D5:8F:5A:C8:08:24:E7:B2:C2:82:D0:DA:22:F7:C5:31:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CF08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E416E7AE9CDE11F193B32FFFCE1D38B0.roa
Signing time: Thu 20 Aug 2026 21:34:15 +0000
ROA not before: Thu 20 Aug 2026 21:34:11 +0000
ROA not after: Sat 10 Oct 2026 21:34:11 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
45.192.115.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.194.12.0/23 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
45.201.16.0/21 maxlen: 24
45.201.16.0/24 maxlen: 24
45.201.17.0/24 maxlen: 24
45.201.18.0/24 maxlen: 24
45.201.19.0/24 maxlen: 24
45.201.20.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
45.206.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118536 (0x1cf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 21:34:11 2026 GMT
Not After : Oct 10 21:34:11 2026 GMT
Subject: CN=6a8772d7-db04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:f1:61:5f:29:45:18:d4:2b:22:bb:93:1c:
22:97:bb:7c:85:cd:89:27:56:6d:7f:31:fa:00:7f:
02:7e:b7:bb:f5:41:47:2a:ca:eb:fc:fa:28:3f:1c:
ed:f9:20:75:87:04:eb:a1:41:0c:03:56:e4:1a:8e:
d3:75:39:46:d1:75:e2:3e:c2:66:f0:f1:15:c1:1c:
bc:a6:87:b8:28:e2:8f:be:e0:56:a4:70:99:26:9c:
49:28:cb:57:00:2e:d4:4e:2d:87:57:75:d0:95:67:
af:d4:a1:fd:14:b9:62:47:0c:38:41:56:53:ab:ec:
18:2f:dd:34:77:8d:bf:a6:64:96:7f:a9:ac:a3:58:
37:e1:b6:df:ae:4e:eb:5e:18:9d:8b:a1:b5:af:9f:
cc:b8:37:eb:d3:96:87:64:ab:c4:1f:9b:99:6b:40:
18:34:b1:28:48:6c:34:00:f0:9c:aa:78:d4:1c:b0:
cb:14:48:44:25:0d:25:97:8d:20:72:3a:80:07:15:
de:56:45:b4:45:c0:ef:c1:8e:b8:80:d1:50:d4:a1:
a5:64:92:34:92:1c:d3:8f:b7:f3:af:81:bd:43:04:
ce:30:5f:1a:11:6d:df:4b:d9:27:87:8b:6c:dd:6e:
80:ae:3e:fb:9d:a9:87:18:68:11:b9:9d:93:05:ac:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:FC:D5:8F:5A:C8:08:24:E7:B2:C2:82:D0:DA:22:F7:C5:31:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E416E7AE9CDE11F193B32FFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
45.192.115.0/24
45.194.0.0/24
45.194.12.0/23
45.194.24.0/24
45.195.133.0/24
45.195.255.0/24
45.198.184.0/24
45.201.16.0/21
45.201.28.0/23
45.204.149.0-45.204.151.255
45.206.65.0/24
Signature Algorithm: sha256WithRSAEncryption
77:78:ae:ed:79:44:70:cb:b3:04:d1:9f:7a:68:ef:3e:1a:d2:
6a:54:15:cd:77:a0:a1:85:ac:b7:d3:ec:71:54:c3:a0:86:67:
af:18:39:0e:d2:99:05:46:52:9f:b2:93:a0:7b:6e:9b:c0:26:
ed:d3:e1:ff:b4:ea:8d:77:2f:79:f5:c1:77:10:e0:5b:e3:8a:
9b:0b:aa:d9:bf:58:3d:ad:b0:73:e6:bd:f6:d7:a5:90:92:63:
b2:dd:8e:ec:6a:d5:82:07:b4:4b:a4:e5:bc:f9:4f:fe:33:ca:
51:1a:86:95:ca:44:57:ee:c8:7a:12:7b:02:18:c3:c3:3f:3a:
01:7a:1c:31:29:c5:08:5e:83:40:48:b4:a0:95:db:30:b6:ee:
84:8c:7c:7e:0e:4a:8f:c1:9b:68:c7:fd:19:53:cf:40:c9:17:
40:05:3f:70:02:d5:5e:fa:2a:84:a6:2e:28:40:84:fb:0f:66:
e8:d5:a3:23:78:f5:1a:0c:e8:fc:90:6f:bc:74:43:56:72:a8:
51:db:e4:95:99:40:3c:83:c9:9f:1f:bc:22:3e:f0:6b:ec:4b:
b1:fe:9b:30:51:37:9b:e2:7e:12:ff:ab:68:33:11:0b:a9:a1:
64:ba:1f:41:1c:ac:f5:d0:cb:6c:a8:ad:28:c2:e1:53:0c:4c:
4b:00:bc:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:04 2026 by rpki-client