Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1794B3F4B66111F18BDC36DFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1794B3F4B66111F18BDC36DFCE1D38B0.roa
File: 1794B3F4B66111F18BDC36DFCE1D38B0.roa (raw, json)
Hash identifier: J1g6MUHIhE6rc355zMcR4QI8kycKGmCVee9PCZ3b1NI=
Subject key identifier: 81:08:E6:87:F7:C2:73:CA:FA:92:FB:DA:E6:00:F0:01:48:A7:C3:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EA00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1794B3F4B66111F18BDC36DFCE1D38B0.roa
Signing time: Tue 22 Sep 2026 08:39:15 +0000
ROA not before: Tue 22 Sep 2026 08:39:11 +0000
ROA not after: Sat 07 Nov 2026 08:39:11 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 11:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125440 (0x1ea00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 22 08:39:11 2026 GMT
Not After : Nov 7 08:39:11 2026 GMT
Subject: CN=6ab23eb3-aa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:cb:74:c9:09:8b:c6:b5:a0:33:05:98:29:
d0:9a:08:3f:ce:fd:0a:e9:ec:18:94:ad:f2:17:9b:
06:19:80:eb:e8:99:fb:cd:ac:85:73:c7:6f:93:a7:
f5:15:8a:7d:54:c2:9d:cb:a4:6f:60:22:8d:97:e8:
f6:cd:56:d1:4b:0a:c4:df:70:f8:45:9e:e4:66:38:
dd:2b:e2:20:40:f0:e3:56:a0:ae:a7:b5:b6:b4:37:
7a:56:46:a2:4d:f9:ba:32:8c:98:65:a7:c4:12:8c:
be:67:d6:98:c9:3d:26:e3:97:c5:5b:55:54:6b:d9:
c2:b7:62:3d:7c:6d:a1:85:0a:c1:bc:67:e6:0f:67:
1b:cd:40:c7:1e:45:0f:56:bd:9d:c3:8b:50:68:50:
2b:e5:cf:df:be:3e:57:e0:00:51:7c:c7:15:5a:1a:
7b:b0:16:93:80:1f:d5:55:0c:a5:4f:aa:ad:2f:ab:
c3:27:2c:59:19:82:0a:ce:44:ef:23:9c:bb:2c:b4:
a7:b8:7a:33:48:23:e3:c6:0d:aa:56:c7:5d:e6:b2:
67:88:3c:a5:15:1c:30:39:d0:a6:08:50:57:16:5a:
da:87:00:2d:97:f1:4f:a6:b1:ff:40:8f:30:6d:65:
b9:06:fa:e0:19:c4:e6:7d:e8:ce:aa:54:6d:fd:30:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:08:E6:87:F7:C2:73:CA:FA:92:FB:DA:E6:00:F0:01:48:A7:C3:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1794B3F4B66111F18BDC36DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cc:8f:d0:ea:26:73:d7:59:db:e5:7b:a9:10:8b:89:19:87:
fa:72:9d:91:6d:03:5b:93:f2:9e:d2:d5:88:3b:4f:d2:ab:f6:
00:0a:51:71:58:8c:60:34:55:e1:1f:b4:05:73:97:f1:81:ae:
e0:a1:d2:7e:ce:95:49:61:87:56:d7:54:03:8d:4d:da:66:44:
72:da:7c:b9:e2:e5:6d:2e:32:02:8f:d6:15:e6:d5:32:e3:9b:
a6:1e:32:29:9b:86:47:97:b7:aa:ed:8f:34:44:37:ef:3f:77:
94:0b:3e:8a:db:18:78:1e:67:3e:51:f2:6f:0a:88:10:ad:f3:
1b:ff:5f:cb:ab:ce:cd:2f:f1:5e:10:15:8d:8f:5c:c4:48:bb:
f3:08:b5:6d:e1:99:46:14:df:fc:c0:43:d5:7b:20:26:d6:0e:
1e:94:51:14:ef:21:59:59:cb:5c:48:e7:53:b4:d0:ab:2e:5d:
41:1a:e0:f7:89:dd:04:df:36:65:69:4c:20:5a:bf:52:62:d5:
bc:4d:3d:22:fd:b1:81:21:9c:26:fd:ef:44:63:ec:22:ca:b2:
f9:33:1b:5b:7a:01:65:f4:50:d1:01:39:55:27:7c:91:09:51:
f8:79:3b:08:4f:04:bf:90:a2:2e:85:5d:d3:e9:ec:e7:25:62:
fa:81:ac:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:04:14 2026 by rpki-client