Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DCA1622B65D11F1B0F044C7CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DCA1622B65D11F1B0F044C7CE1D38B0.roa
File: 2DCA1622B65D11F1B0F044C7CE1D38B0.roa (raw, json)
Hash identifier: gTtLUMiTboHQz1B8EqRBljvAjjV8mMzO2FyJCoC0ae0=
Subject key identifier: 67:63:81:8D:BA:F5:54:BF:CC:8F:E8:92:97:37:C0:E0:99:DF:1D:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E9F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DCA1622B65D11F1B0F044C7CE1D38B0.roa
Signing time: Tue 22 Sep 2026 08:11:14 +0000
ROA not before: Tue 22 Sep 2026 08:11:10 +0000
ROA not after: Sat 07 Nov 2026 08:11:10 +0000
asID: 401783
IP address blocks: 154.81.160.0/24 maxlen: 24
154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 07:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125430 (0x1e9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 22 08:11:10 2026 GMT
Not After : Nov 7 08:11:10 2026 GMT
Subject: CN=6ab23822-31cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:47:cb:46:4f:46:89:15:76:de:4a:32:b8:26:
8f:9a:ba:e2:e0:6b:b1:5d:da:b3:62:e7:40:b1:33:
47:ea:a9:d5:c1:4e:f8:ae:53:0b:8c:a1:93:4a:4b:
c5:a9:71:70:20:57:9f:aa:57:7d:7c:54:63:ff:b0:
6b:93:1c:8b:a2:0b:2a:9d:ae:aa:0f:79:91:55:8f:
1c:f9:ca:9c:b9:9f:49:1b:e2:6b:bb:7e:73:4d:41:
ea:0b:9e:da:34:b1:d0:0a:01:dd:3f:ca:a5:ca:0a:
e6:14:94:7c:66:96:fb:54:ab:6d:97:81:52:71:2b:
6f:b7:77:78:2c:71:21:87:f8:c9:06:78:87:64:40:
10:db:d3:78:be:e8:51:6f:99:82:41:9b:d2:f3:4c:
29:04:0f:84:72:be:95:db:5a:f3:e7:86:e3:1d:0e:
3e:f5:ba:d0:36:e3:90:2c:c7:b6:e8:ef:df:55:e9:
06:e4:2d:e7:17:4c:14:2f:57:a8:bc:c6:99:07:07:
5a:92:c9:55:71:c9:86:17:35:46:5f:d8:7c:62:53:
f7:e3:c6:29:d0:df:09:43:3a:e2:3d:c1:8a:83:6f:
1d:f9:9e:16:94:b8:d3:70:9d:34:03:88:db:e7:6d:
fc:02:f2:c1:05:4d:95:f5:7b:db:ff:18:b7:fd:8b:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:81:8D:BA:F5:54:BF:CC:8F:E8:92:97:37:C0:E0:99:DF:1D:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DCA1622B65D11F1B0F044C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/24
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:35:8f:90:a0:78:2a:f4:01:54:a2:1a:4a:45:18:05:35:15:
c2:7c:ff:e6:62:d5:f4:bf:f9:1a:8b:88:6e:5e:93:c4:0e:a3:
11:e5:6f:68:74:e8:64:e7:c6:79:f8:13:2d:e2:3b:e8:00:45:
fa:0c:cd:3e:1c:60:d1:7b:5e:3e:30:60:f8:24:4d:31:06:4c:
59:64:dd:4b:46:a2:0f:7f:13:61:8b:c3:16:c3:df:54:a3:9b:
ac:24:ab:a6:5b:db:5e:ed:ca:ce:b3:91:6d:bc:6d:91:07:2d:
a2:a6:f3:ef:13:88:18:45:65:a1:88:d9:ae:d6:62:32:f2:b8:
d2:0f:28:6f:52:9a:ce:0f:7c:da:da:1e:b3:68:64:b4:ca:6f:
1f:65:c3:01:d8:df:9f:0f:b3:9a:c5:03:20:b6:ea:b4:f8:88:
b5:1b:7a:0f:e6:85:d6:0e:04:86:da:b2:4e:79:96:6b:3c:92:
f7:51:23:75:a7:76:00:40:42:5f:aa:12:a1:4e:f4:30:46:0c:
68:fb:b2:19:02:47:8e:0c:8a:47:a8:fa:13:8b:36:a3:65:30:
a0:ba:3e:88:7e:80:e0:de:1d:06:48:a9:93:8b:4a:23:03:90:
9a:2d:23:3b:8b:73:77:d9:14:79:f5:44:c5:56:16:9d:f4:20:
25:9b:45:68
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIDAen2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTIyMDgxMTEwWhcNMjYxMTA3MDgxMTEwWjAYMRYw
FAYDVQQDEw02YWIyMzgyMi0zMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9kfLRk9GiRV23koyuCaPmrri4GuxXdqzYudAsTNH6qnVwU74rlMLjKGT
SkvFqXFwIFefqld9fFRj/7BrkxyLogsqna6qD3mRVY8c+cqcuZ9JG+Jru35zTUHq
C57aNLHQCgHdP8qlygrmFJR8Zpb7VKttl4FScStvt3d4LHEhh/jJBniHZEAQ29N4
vuhRb5mCQZvS80wpBA+Ecr6V21rz54bjHQ4+9brQNuOQLMe26O/fVekG5C3nF0wU
L1eovMaZBwdakslVccmGFzVGX9h8YlP348Yp0N8JQzriPcGKg28d+Z4WlLjTcJ00
A4jb5238AvLBBU2V9Xvb/xi3/YvpdQIDAQABo4IC/zCCAvswHQYDVR0OBBYEFGdj
gY269VS/zI/okpc3wOCZ3x0TMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRENBMTYyMkI2NUQxMUYxQjBGMDQ0QzdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAmlGgAwQAmlKGAwQAmlKU
AwQAmlKZAwQAmlKeAwQCmlLEAwQAmlNBAwQAmlNDAwQAmlmEAwQAmlpBAwQAmlpD
AwQAmlqAAwQAmlqGAwQBmlqIAwQAmlqMAwQAmlq9MA0GCSqGSIb3DQEBCwUAA4IB
AQDSNY+QoHgq9AFUohpKRRgFNRXCfP/mYtX0v/kai4huXpPEDqMR5W9odOhk58Z5
+BMt4jvoAEX6DM0+HGDRe14+MGD4JE0xBkxZZN1LRqIPfxNhi8MWw99Uo5usJKum
W9te7crOs5FtvG2RBy2ipvPvE4gYRWWhiNmu1mIy8rjSDyhvUprOD3za2h6zaGS0
ym8fZcMB2N+fD7OaxQMgtuq0+Ii1G3oP5oXWDgSG2rJOeZZrPJL3USN1p3YAQEJf
qhKhTvQwRgxo+7IZAkeODIpHqPoTizajZTCguj6IfoDg3h0GSKmTi0ojA5CaLSM7
i3N32RR59UTFVhad9CAlm0Vo
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:28:48 2026 by rpki-client