Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E22DE4CB66211F19B9CDFE7CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E22DE4CB66211F19B9CDFE7CE1D38B0.roa
File: 2E22DE4CB66211F19B9CDFE7CE1D38B0.roa (raw, json)
Hash identifier: Nt0PkIjPnx2GX2HJ43KSTLl4+PDZkdREP/UupHaItgc=
Subject key identifier: 36:1E:8E:F8:8B:5B:B4:AA:A9:08:6C:00:40:5E:D2:0E:4A:E9:8E:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EA02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E22DE4CB66211F19B9CDFE7CE1D38B0.roa
Signing time: Tue 22 Sep 2026 08:47:02 +0000
ROA not before: Tue 22 Sep 2026 08:46:58 +0000
ROA not after: Sat 07 Nov 2026 08:46:58 +0000
asID: 401783
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
154.223.240.0/24 maxlen: 24
154.223.241.0/24 maxlen: 24
154.223.242.0/24 maxlen: 24
154.223.243.0/24 maxlen: 24
154.223.244.0/24 maxlen: 24
154.223.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 07:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125442 (0x1ea02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 22 08:46:58 2026 GMT
Not After : Nov 7 08:46:58 2026 GMT
Subject: CN=6ab24086-eb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:8e:08:3e:ea:9a:37:ee:32:9c:ca:b0:5b:
b2:87:87:cd:ae:88:4f:5e:5b:82:33:7f:32:f9:7d:
74:64:47:6a:be:c7:87:77:dd:9b:81:e4:3a:ba:79:
51:3c:88:ba:b8:b9:9c:cd:13:a7:fa:e1:93:13:52:
c2:bf:e1:d3:70:85:ed:d2:b6:51:21:90:97:dc:ac:
dd:ce:70:57:d8:80:dc:49:48:0c:27:41:1f:7a:98:
a8:41:d7:dc:f9:91:0a:eb:7e:97:79:73:6c:61:cd:
ce:b8:3b:25:92:4e:3e:a8:b5:7e:21:dc:ab:af:44:
d0:0d:d2:44:9b:83:52:9c:32:47:e6:54:32:39:06:
6a:64:3a:8c:79:cc:ab:b4:cf:1b:8d:4f:4d:53:48:
88:55:82:71:c2:be:6a:6d:45:df:25:84:07:bc:1c:
33:90:28:32:5d:c2:7f:a6:cc:82:51:fd:b8:64:d2:
03:f4:19:c3:a9:6b:81:d9:8c:17:98:11:24:e9:1b:
5d:40:f7:e2:ae:b4:02:de:56:59:23:5c:a4:5e:8b:
88:ee:aa:f5:a0:1d:49:22:c9:ed:99:24:69:7f:f2:
42:46:59:2b:0f:28:62:9b:7c:1d:76:40:9a:08:13:
e2:f4:0d:63:77:31:5d:3f:86:e3:3f:43:d7:db:63:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:8E:F8:8B:5B:B4:AA:A9:08:6C:00:40:5E:D2:0E:4A:E9:8E:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E22DE4CB66211F19B9CDFE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
154.223.240.0-154.223.245.255
Signature Algorithm: sha256WithRSAEncryption
19:2c:7f:d1:d4:fb:ca:4c:05:00:cc:13:4d:a0:02:19:3a:58:
3a:f1:6e:a4:43:07:e1:ed:3e:00:60:83:ec:9a:20:fd:54:ce:
37:d2:b0:7c:1d:03:1e:93:9a:7e:d9:26:13:98:cc:e3:ab:82:
fb:8c:db:79:ea:5b:3f:7a:49:2e:35:52:3c:b5:10:01:9f:10:
f5:2f:8d:e1:1c:ed:0c:1f:41:da:d6:1d:19:0e:ef:e4:60:b5:
7a:fd:e1:c2:e1:c4:fa:64:5f:ac:0c:13:09:58:34:ab:1f:af:
59:ed:f9:55:4b:16:88:3e:b4:21:f8:82:f6:82:c8:db:0a:cd:
51:40:38:95:a6:fb:50:69:ca:38:c3:98:64:ff:51:b6:4b:82:
7c:49:49:4f:b2:ec:a2:d0:fe:77:d2:8a:76:38:90:c5:4f:61:
90:1c:17:fe:33:e4:5a:59:93:18:9c:39:f7:0d:ad:c1:c7:91:
f1:10:d0:76:7e:06:3c:58:65:41:bd:5a:70:f5:2c:32:33:68:
f2:0a:51:bc:8b:7f:dc:fb:50:ff:46:a8:ec:53:52:4e:10:47:
c6:21:78:d1:45:ca:30:49:bf:c7:e2:a3:45:26:47:33:f5:30:
2b:75:83:77:a1:31:01:ca:c9:f7:49:ae:77:c1:68:fb:5b:01:
5b:76:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:58:53 2026 by rpki-client