Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3C79C94A05711F1ABF674DBCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3C79C94A05711F1ABF674DBCE1D38B0.roa
File: F3C79C94A05711F1ABF674DBCE1D38B0.roa (raw, json)
Hash identifier: 5Tbgr8U+LcD+RyW+zHyc/5rSa7H26DSrhA03gGCPMCk=
Subject key identifier: 71:CE:74:97:EA:28:B7:58:70:EF:14:69:35:A1:85:29:08:73:DB:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D0C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3C79C94A05711F1ABF674DBCE1D38B0.roa
Signing time: Tue 25 Aug 2026 07:38:24 +0000
ROA not before: Tue 25 Aug 2026 07:38:20 +0000
ROA not after: Fri 04 Sep 2026 07:38:20 +0000
asID: 984
IP address blocks: 45.196.101.0/24 maxlen: 24
45.196.102.0/24 maxlen: 24
45.196.103.0/24 maxlen: 24
45.196.105.0/24 maxlen: 24
45.196.108.0/24 maxlen: 24
45.196.113.0/24 maxlen: 24
45.196.120.0/24 maxlen: 24
45.202.103.0/24 maxlen: 24
45.202.104.0/24 maxlen: 24
45.203.137.0/24 maxlen: 24
45.203.138.0/24 maxlen: 24
45.203.248.0/24 maxlen: 24
45.203.249.0/24 maxlen: 24
45.203.251.0/24 maxlen: 24
45.206.53.0/24 maxlen: 24
45.206.56.0/24 maxlen: 24
45.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118981 (0x1d0c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 25 07:38:20 2026 GMT
Not After : Sep 4 07:38:20 2026 GMT
Subject: CN=6a8d4670-6ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:d1:56:87:87:f3:ca:c0:84:55:a4:c6:62:
cf:68:10:90:7b:46:2c:27:36:d8:99:73:35:db:07:
3f:e9:ac:e7:5b:cf:17:da:0d:d5:e4:8e:31:5a:01:
29:7c:59:0c:28:fc:79:ff:02:ab:39:45:14:07:de:
90:fc:c2:e0:6f:43:6a:32:33:be:81:ea:27:81:5c:
00:38:c2:4c:17:83:ef:b4:78:5d:1e:7a:46:de:bd:
6c:7b:b1:c4:f3:10:c3:b1:b2:10:7b:db:d6:07:23:
25:34:39:04:1a:7d:ac:14:9e:ad:8f:f7:5e:ac:9a:
e4:f8:9e:b2:0c:47:a1:4c:c4:b7:dd:f5:97:aa:70:
b2:1a:7d:a3:cb:4c:30:14:30:62:ac:ff:c3:36:ec:
9e:cd:3b:44:1a:7c:8e:6a:bb:54:69:b1:11:41:53:
f1:f9:41:5a:af:53:2d:ec:bc:4c:cb:6d:39:95:27:
81:e6:fa:3d:28:d8:2f:f2:69:6c:d8:8e:02:b0:0e:
80:0f:22:a1:25:f3:da:85:32:fe:59:b6:23:a0:bf:
0b:19:03:e2:af:b4:87:3f:d8:6f:2f:e8:d3:8a:1f:
38:96:04:c1:12:2d:2b:04:5c:5c:f3:9e:bc:9c:c6:
a3:36:4d:8b:41:17:d7:1d:d6:5f:71:d6:23:29:fe:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CE:74:97:EA:28:B7:58:70:EF:14:69:35:A1:85:29:08:73:DB:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3C79C94A05711F1ABF674DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.101.0-45.196.103.255
45.196.105.0/24
45.196.108.0/24
45.196.113.0/24
45.196.120.0/24
45.202.103.0-45.202.104.255
45.203.137.0-45.203.138.255
45.203.248.0/23
45.203.251.0/24
45.206.53.0/24
45.206.56.0/24
45.206.59.0/24
Signature Algorithm: sha256WithRSAEncryption
13:74:79:df:57:c8:1a:56:1d:aa:07:86:ea:7e:c9:68:18:b6:
18:ef:a5:60:10:e1:aa:d2:49:fd:0d:f9:50:e3:35:a8:78:de:
d2:72:54:b0:18:b2:dc:0c:5f:5c:6e:3b:25:8c:6f:9f:fd:2c:
a2:87:30:a6:90:b6:fb:33:1a:f9:46:02:fd:0c:45:e9:f8:dd:
2e:b4:5c:20:d2:bb:67:1a:a7:6c:25:ba:11:a1:4d:4d:51:5e:
06:f3:7f:ac:ca:27:e8:b0:94:b0:9d:f8:2c:1a:a4:58:3f:78:
af:0d:f0:43:a4:0d:9e:70:84:19:d3:53:09:79:62:0d:98:24:
fe:9c:ce:bd:f2:47:ff:be:ca:ea:1b:c6:20:05:f4:ad:7a:2c:
f0:1d:06:86:99:c2:27:fd:2f:d3:c0:79:60:e9:c7:af:3b:85:
7f:8c:f4:7a:1a:b4:75:b9:2b:01:36:d1:51:81:20:75:28:d4:
65:21:e2:02:d7:52:cc:93:3e:d7:0c:71:88:2b:5b:2e:8e:52:
bd:51:a3:1e:46:f1:f0:3f:71:91:9c:de:a5:b3:61:f2:1b:3c:
33:5f:03:82:07:dd:6a:b2:c0:26:9a:09:e8:1e:03:0c:79:98:
3c:c5:3c:15:16:ed:97:b4:e6:a2:f7:26:55:49:14:b8:01:27:
8e:5e:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:01:52 2026 by rpki-client