Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA59B46B65F11F1BA122BD2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA59B46B65F11F1BA122BD2CE1D38B0.roa
File: 0BA59B46B65F11F1BA122BD2CE1D38B0.roa (raw, json)
Hash identifier: fX1QQ2iHQsLyAcAIRK6fj9HW7oiIr8RyG4IpMe0KzfE=
Subject key identifier: DE:E1:82:8B:F8:E3:AB:45:EA:88:4A:EF:4D:F9:97:C1:77:4A:16:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E9FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA59B46B65F11F1BA122BD2CE1D38B0.roa
Signing time: Tue 22 Sep 2026 08:24:36 +0000
ROA not before: Tue 22 Sep 2026 08:24:32 +0000
ROA not after: Sat 07 Nov 2026 08:24:32 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 14:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125434 (0x1e9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 22 08:24:32 2026 GMT
Not After : Nov 7 08:24:32 2026 GMT
Subject: CN=6ab23b44-5d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:55:ac:b0:1d:1e:d8:2b:c5:31:fc:4e:0e:
2a:ea:9b:83:eb:aa:5a:e5:80:42:2c:32:03:a3:e4:
c3:dc:cf:6d:45:e7:03:7f:00:2b:2a:e0:dc:67:19:
73:1d:58:82:d5:07:69:82:9c:6f:cc:22:d3:b2:9b:
b5:bc:ee:df:fa:02:6f:b2:74:70:68:a9:03:90:d5:
47:e4:48:ec:3b:b2:5e:fd:24:4d:46:6d:c5:ad:b2:
0c:6f:eb:d3:b8:5b:d6:94:bd:a0:2f:f0:4e:ce:3e:
27:35:29:e6:f1:99:54:74:dd:ac:f4:48:a5:51:27:
bc:3b:da:0a:1b:39:71:19:6f:da:a5:51:b5:83:15:
d6:02:a0:62:d0:82:1b:d7:9f:d6:9c:ce:e6:18:8a:
b6:61:1d:a1:4d:07:1e:cd:b6:49:1c:de:1e:8e:19:
1a:1d:e5:87:61:7c:73:85:1a:19:05:10:c0:21:50:
4c:ca:0a:8b:39:70:a8:c2:1c:f1:70:38:7f:8c:1f:
ba:bd:56:de:b2:e2:1e:78:fc:d3:1a:a9:29:d3:e7:
6b:ae:d2:54:2c:bd:de:a2:3b:ff:9f:90:97:23:a4:
26:c5:ba:9b:57:53:36:47:13:7a:b5:40:97:c0:33:
15:ff:79:38:ee:6f:c7:ae:0a:92:78:6a:3b:b5:42:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:82:8B:F8:E3:AB:45:EA:88:4A:EF:4D:F9:97:C1:77:4A:16:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA59B46B65F11F1BA122BD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6e:94:55:b9:3d:c1:d4:0a:93:aa:25:88:a8:4b:c4:83:61:
b7:c6:91:32:5b:ed:1b:54:63:f7:5c:0c:9f:c6:2e:ea:2c:a0:
ad:28:36:2a:3f:d6:40:2b:98:30:1d:8a:bb:61:e4:30:1e:b0:
24:97:da:94:20:df:a7:eb:dc:aa:ef:9e:0e:04:b5:14:96:6a:
95:ec:86:a7:6b:5d:0d:2c:e5:6f:a5:da:ef:ae:fd:4e:ba:7e:
05:44:31:6a:00:d5:4b:18:81:51:55:b9:54:21:2d:93:b6:04:
00:b1:ab:38:bc:34:e7:7b:81:77:72:99:4b:6b:5a:42:5e:50:
10:77:c3:80:ed:10:c7:6f:42:fa:bc:72:30:ba:46:20:8d:79:
1e:33:28:51:52:ce:93:c1:c5:07:a4:e0:a0:0f:15:ac:1f:ea:
ee:fd:1d:b0:2b:7e:70:4b:01:65:f3:1c:22:b2:bf:30:e5:d0:
c3:27:b3:bd:22:8d:dc:b9:ae:1a:48:35:b1:d3:b6:75:d9:dd:
7b:40:1f:62:9d:fe:f2:ac:87:36:16:44:8d:1d:db:81:32:e2:
94:c1:77:84:e0:8b:2f:d4:f3:ca:34:88:e4:73:16:81:d5:90:
e2:e7:93:0d:1a:1b:ce:5c:28:b6:ed:4b:e9:e1:a6:88:37:3b:
80:90:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:49:59 2026 by rpki-client