Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6A23FA9CDF11F1885D6405CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6A23FA9CDF11F1885D6405CF1D38B0.roa
File: FD6A23FA9CDF11F1885D6405CF1D38B0.roa (raw, json)
Hash identifier: emI64VHnEHXTaTD/fFZykfxerWB63N6StXwnblwGTcY=
Subject key identifier: 64:65:25:D1:5E:46:87:D9:90:7F:EC:2C:4E:5B:4D:42:2A:24:1F:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CF0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6A23FA9CDF11F1885D6405CF1D38B0.roa
Signing time: Thu 20 Aug 2026 21:42:07 +0000
ROA not before: Thu 20 Aug 2026 21:42:03 +0000
ROA not after: Sat 10 Oct 2026 21:42:03 +0000
asID: 395793
IP address blocks: 45.192.165.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/22 maxlen: 24
45.194.1.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.5.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
45.196.194.0/23 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.198.230.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Sep 2026 11:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118538 (0x1cf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 21:42:03 2026 GMT
Not After : Oct 10 21:42:03 2026 GMT
Subject: CN=6a8774af-d070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:47:68:a6:00:0e:ac:09:5e:68:cd:1d:4f:
63:88:ec:6e:81:d6:82:e2:87:a7:c5:f3:11:63:d5:
7a:ae:a6:c3:93:ed:f9:7c:08:78:54:a5:e2:45:31:
15:e4:bc:34:0e:73:f1:34:f5:db:bb:02:e8:2b:9f:
57:10:57:96:ab:5e:99:24:57:bf:1f:72:1c:3c:57:
de:ed:9d:72:1e:ef:5d:52:f9:77:97:59:25:70:1a:
f2:ad:24:15:a9:66:a8:f6:28:9f:d9:2c:17:5f:db:
db:26:77:78:a5:c2:22:75:76:66:0c:0b:3a:50:d2:
2d:08:5d:9b:40:96:11:70:b8:0c:f4:62:e4:04:65:
b3:be:86:5c:10:dd:78:0d:9d:66:c5:e5:54:ea:42:
51:69:a9:d9:43:79:a8:e5:f0:43:cf:c8:94:f3:d8:
52:15:86:5d:c4:dd:76:ca:7e:7e:4b:9b:1d:15:0e:
15:84:3f:a4:ac:50:ec:71:c4:03:f0:2f:22:95:a4:
f4:00:60:c5:4f:1a:3d:41:2b:d0:d6:4e:26:98:5e:
2f:d0:8a:89:b5:9e:54:8c:5d:04:06:2f:8a:f1:d0:
84:dc:ca:23:b7:c9:41:3c:4b:12:5e:35:1e:d6:76:
e1:69:95:2b:1d:de:69:56:26:15:e1:42:3f:d1:57:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:25:D1:5E:46:87:D9:90:7F:EC:2C:4E:5B:4D:42:2A:24:1F:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6A23FA9CDF11F1885D6405CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0-45.192.166.255
45.192.227.0-45.192.231.255
45.194.1.0/24
45.194.4.0/23
45.195.63.0/24
45.196.194.0/23
45.196.225.0-45.196.227.255
45.198.228.0/22
45.201.30.0/24
45.201.32.0/24
45.204.147.0-45.204.148.255
Signature Algorithm: sha256WithRSAEncryption
11:f8:e9:3c:23:9c:14:ac:ed:14:f0:c2:1e:d8:bc:7f:d8:79:
98:d0:3e:14:9e:c5:9c:f2:1b:2a:25:a4:9d:00:83:79:5e:39:
c2:dc:18:cc:7d:2e:96:a0:80:8e:06:81:28:f0:04:86:2b:13:
f1:1c:54:2d:b2:09:3c:f3:c8:2f:f6:03:87:d3:f1:f2:d0:50:
25:af:08:34:ab:19:a8:e8:be:68:32:18:3c:7a:4b:0d:ba:b6:
4d:f0:26:eb:aa:87:73:35:bb:b5:4a:f0:6b:2e:d2:40:55:a1:
27:05:f8:77:3b:8b:0d:13:9f:3a:c7:28:d6:d9:ff:19:19:b7:
3f:a4:8a:21:eb:b1:b2:10:80:31:14:2c:b8:f4:c5:61:cf:83:
58:7c:86:77:94:13:b9:42:98:36:98:ba:da:3f:43:47:8a:be:
a0:88:d4:80:f0:a6:4e:2c:a6:cd:be:ef:29:dc:bf:96:e7:38:
85:f0:66:06:cf:cd:38:53:d7:1e:0e:b0:dd:de:28:e9:95:3c:
21:fd:22:61:ee:66:bb:d2:50:b1:cc:69:89:3c:95:a7:a2:3a:
3f:d4:9b:b8:8a:e5:93:b0:43:62:21:62:06:8e:8a:30:ed:c2:
28:a4:1d:34:5e:08:be:51:f6:ff:d5:55:8c:8f:ad:d1:ec:12:
44:9d:9a:b1
-----BEGIN CERTIFICATE-----
MIIF3TCCBMWgAwIBAgIDAc8KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIwMjE0MjAzWhcNMjYxMDEwMjE0MjAzWjAYMRYw
FAYDVQQDEw02YTg3NzRhZi1kMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAthVHaKYADqwJXmjNHU9jiOxugdaC4oenxfMRY9V6rqbDk+35fAh4VKXi
RTEV5Lw0DnPxNPXbuwLoK59XEFeWq16ZJFe/H3IcPFfe7Z1yHu9dUvl3l1klcBry
rSQVqWao9iif2SwXX9vbJnd4pcIidXZmDAs6UNItCF2bQJYRcLgM9GLkBGWzvoZc
EN14DZ1mxeVU6kJRaanZQ3mo5fBDz8iU89hSFYZdxN12yn5+S5sdFQ4VhD+krFDs
ccQD8C8ilaT0AGDFTxo9QSvQ1k4mmF4v0IqJtZ5UjF0EBi+K8dCE3Mojt8lBPEsS
XjUe1nbhaZUrHd5pViYV4UI/0VfQFwIDAQABo4IC/jCCAvowHQYDVR0OBBYEFGRl
JdFeRofZkH/sLE5bTUIqJB8hMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRDZBMjNGQTlDREYxMUYxODg1RDY0MDVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiMAwDBAAtwKUDBAAtwKYwDAMEAC3A
4wMEAy3A4AMEAC3CAQMEAS3CBAMEAC3DPwMEAS3EwjAMAwQALcThAwQCLcTgAwQC
LcbkAwQALckeAwQALckgMAwDBAAtzJMDBAAtzJQwDQYJKoZIhvcNAQELBQADggEB
ABH46TwjnBSs7RTwwh7YvH/YeZjQPhSexZzyGyolpJ0Ag3leOcLcGMx9LpaggI4G
gSjwBIYrE/EcVC2yCTzzyC/2A4fT8fLQUCWvCDSrGajovmgyGDx6Sw26tk3wJuuq
h3M1u7VK8Gsu0kBVoScF+Hc7iw0TnzrHKNbZ/xkZtz+kiiHrsbIQgDEULLj0xWHP
g1h8hneUE7lCmDaYuto/Q0eKvqCI1IDwpk4sps2+7yncv5bnOIXwZgbPzThT1x4O
sN3eKOmVPCH9ImHuZrvSULHMaYk8laeiOj/Um7iK5ZOwQ2IhYgaOijDtwiikHTRe
CL5R9v/VVYyPrdHsEkSdmrE=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:32 2026 by rpki-client