Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB312BC69D4611F1B25E2908CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB312BC69D4611F1B25E2908CF1D38B0.roa
File: FB312BC69D4611F1B25E2908CF1D38B0.roa (raw, json)
Hash identifier: W0Vy49ei4K6+rkRmg5rA+iTs9PQwuf9+QOxdNBtU7OM=
Subject key identifier: 26:AD:A7:FD:AA:27:16:43:49:99:A1:B8:B1:38:50:0A:F5:C1:11:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CF93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB312BC69D4611F1B25E2908CF1D38B0.roa
Signing time: Fri 21 Aug 2026 09:59:22 +0000
ROA not before: Fri 21 Aug 2026 09:59:18 +0000
ROA not after: Thu 08 Oct 2026 09:59:18 +0000
asID: 32043
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
156.249.128.0/22 maxlen: 24
156.249.189.0/24 maxlen: 24
156.249.194.0/24 maxlen: 24
156.249.195.0/24 maxlen: 24
156.249.200.0/24 maxlen: 24
156.249.201.0/24 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118675 (0x1cf93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 09:59:18 2026 GMT
Not After : Oct 8 09:59:18 2026 GMT
Subject: CN=6a882179-32b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:8b:f5:cc:8a:72:1a:6a:e8:a7:3d:44:e6:
83:0d:da:f9:a5:4a:31:af:bf:9c:bc:3f:a2:c6:cd:
0c:bb:0c:2a:60:e4:6d:f5:c9:ae:4e:a7:7a:5c:fb:
22:47:51:42:53:48:3a:88:75:cf:89:56:c4:b2:92:
0a:26:d9:11:ea:7c:b4:0e:f4:40:d9:93:06:f7:b1:
48:a0:f9:3f:5a:8b:39:82:0a:ad:a8:30:20:7a:af:
7c:1e:a6:5f:c0:55:7b:71:b3:3b:f4:26:c0:aa:49:
76:8d:c3:47:81:f2:0d:5e:f4:d6:c7:01:9b:d9:e3:
61:81:cd:08:8b:d9:33:0c:b0:3f:6b:71:a0:63:ce:
56:a3:9d:e5:71:26:19:dd:96:dc:8e:f4:0e:7e:94:
c8:ce:16:f9:cd:af:73:46:0a:28:80:e4:07:c9:bd:
e2:37:96:a6:fc:a4:46:28:b9:07:8e:e8:4a:a1:71:
5d:ea:30:9e:7a:a2:03:13:7b:d3:5d:2a:a8:f7:5d:
b5:c9:de:30:11:35:57:d0:cf:20:6e:ea:db:2b:8f:
1d:d6:ec:51:ee:22:07:e1:66:d9:67:03:f3:84:c8:
1e:8c:22:27:dc:00:69:cb:26:ed:4c:1a:ee:c4:60:
72:63:eb:bc:dc:6c:e0:74:84:3f:31:68:de:4a:3b:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AD:A7:FD:AA:27:16:43:49:99:A1:B8:B1:38:50:0A:F5:C1:11:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB312BC69D4611F1B25E2908CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
156.249.128.0/22
156.249.189.0/24
156.249.194.0/23
156.249.200.0/23
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:79:29:91:54:90:f8:ec:71:aa:9e:db:18:05:05:de:cd:46:
95:b0:c1:5f:81:67:0e:bb:4e:e8:0b:02:06:e6:7a:e4:e3:cc:
2d:87:ae:79:d7:c0:54:b0:3c:d7:3d:30:4f:49:52:12:38:54:
6e:3e:83:14:ad:c2:bd:ff:4b:9e:75:bf:a4:3b:71:b3:bd:a9:
6c:bc:77:e5:1d:74:10:61:4a:43:ce:5b:81:6f:49:71:27:ac:
3e:d5:c5:c3:fe:34:cb:19:3d:2d:d5:42:fd:06:32:95:1c:08:
fa:a3:83:0e:ab:c7:f8:c4:96:e7:78:8e:cb:77:10:b3:b9:1f:
d5:45:07:08:9b:0f:0a:eb:a9:3e:5e:8c:46:2b:21:81:d9:05:
6e:73:33:68:7f:2c:b6:0c:a0:e1:f0:b6:fb:49:f3:65:0f:18:
e9:73:5f:de:c1:dc:71:68:e2:9d:9b:c3:e8:ca:65:9e:8b:f8:
6d:70:dc:56:83:b7:36:ea:a6:b9:91:35:8e:d6:0e:49:70:03:
1d:ad:37:a3:54:ff:63:6c:4c:f3:57:80:d2:ce:31:74:57:12:
e0:19:2f:ef:32:69:89:39:6d:af:b0:97:2a:00:7b:a3:01:a4:
37:2d:05:de:d0:76:80:b7:8c:30:59:61:76:1f:be:00:70:c8:
4e:48:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:32 2026 by rpki-client