Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5164AC00A92E11F1A969CBD7CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5164AC00A92E11F1A969CBD7CE1D38B0.roa
File: 5164AC00A92E11F1A969CBD7CE1D38B0.roa (raw, json)
Hash identifier: Oh5lmgW8C4n5CyiNh1pctb8DNTCXDSHHmMx7cMtdDkI=
Subject key identifier: 75:4B:A3:BE:19:14:DB:3C:57:4C:86:A9:05:F6:C5:A4:27:EE:E4:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E5B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5164AC00A92E11F1A969CBD7CE1D38B0.roa
Signing time: Sat 05 Sep 2026 13:33:03 +0000
ROA not before: Sat 05 Sep 2026 13:32:58 +0000
ROA not after: Tue 13 Oct 2026 13:32:58 +0000
asID: 152698
IP address blocks: 154.203.249.0/24 maxlen: 24
154.204.38.0/24 maxlen: 24
154.204.39.0/24 maxlen: 24
154.204.44.0/24 maxlen: 24
154.204.45.0/24 maxlen: 24
154.204.48.0/24 maxlen: 24
154.204.49.0/24 maxlen: 24
154.204.60.0/24 maxlen: 24
154.204.61.0/24 maxlen: 24
154.205.30.0/24 maxlen: 24
154.205.31.0/24 maxlen: 24
154.205.174.0/24 maxlen: 24
154.205.175.0/24 maxlen: 24
154.205.184.0/24 maxlen: 24
154.205.185.0/24 maxlen: 24
154.206.9.0/24 maxlen: 24
154.210.120.0/24 maxlen: 24
154.210.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124339 (0x1e5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 13:32:58 2026 GMT
Not After : Oct 13 13:32:58 2026 GMT
Subject: CN=6a9c1a0f-4d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:cb:e2:ea:26:3b:b6:f6:a1:80:55:55:ec:
97:16:4b:c4:0a:9b:84:e3:8d:a6:44:a0:6c:07:bb:
f9:c6:52:cd:2f:7b:57:c2:09:a3:72:33:08:7b:da:
92:b9:a8:dd:20:35:f9:ce:39:92:1d:ab:0f:9a:82:
a9:9b:a5:8b:25:7d:7b:ec:b8:1d:9c:57:86:71:f6:
ca:93:57:2b:a8:d4:03:4c:c0:a1:d3:b5:e0:18:a4:
89:1b:d9:06:d9:e0:38:d1:44:17:9b:4a:68:95:28:
59:73:21:2f:e8:be:5f:86:c4:9f:6c:24:bd:15:6e:
f0:9e:76:c9:f9:07:64:24:e2:49:4a:18:3c:bd:e7:
f6:64:f4:ee:eb:48:d0:c8:dd:32:d8:58:b1:cb:b6:
39:29:4d:69:92:24:13:a4:f4:e7:a2:83:fc:b4:8c:
26:0f:fa:97:84:a8:04:85:f4:bd:d3:74:13:cc:bb:
f4:80:74:aa:81:86:c1:df:8b:b8:b7:71:f3:33:fa:
a3:88:4e:b6:cb:d4:5f:17:69:d3:6f:04:c3:a1:13:
82:9a:45:b7:1f:01:b8:f7:4d:ee:b3:1e:59:d3:29:
96:3a:0c:6a:7d:99:7c:22:af:58:8a:c0:f2:bb:da:
bf:01:c1:b5:4b:d9:db:99:b8:61:b2:3c:61:8c:a7:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:A3:BE:19:14:DB:3C:57:4C:86:A9:05:F6:C5:A4:27:EE:E4:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5164AC00A92E11F1A969CBD7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.249.0/24
154.204.38.0/23
154.204.44.0/23
154.204.48.0/23
154.204.60.0/23
154.205.30.0/23
154.205.174.0/23
154.205.184.0/23
154.206.9.0/24
154.210.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:86:a4:19:9e:8f:08:5b:4d:10:40:61:73:a7:6d:0f:2b:c0:
73:28:ae:0f:55:7e:ea:99:9c:e9:12:7d:61:85:a2:4e:97:01:
6a:e3:0b:e4:4b:89:d5:47:d4:65:89:a8:c5:99:3d:e8:d5:56:
72:f5:b5:2e:91:49:ba:45:a2:7b:63:1b:b9:e7:15:10:42:32:
bc:18:16:7a:a4:d5:fb:fb:8b:89:31:e6:5c:9a:6f:7a:fe:dc:
a2:12:0e:47:e9:90:17:e0:c1:d8:6a:61:fb:eb:f9:da:22:8e:
87:5a:b9:7a:33:44:2e:c1:a3:32:f1:9f:9a:ab:66:02:ad:21:
a2:b2:05:f7:ba:28:91:49:de:b4:71:d6:4c:bd:8d:56:25:cc:
41:a0:42:20:af:70:f9:c7:39:36:6b:4c:de:1f:f5:9c:c6:30:
3e:5a:87:39:73:40:7b:e2:48:1b:09:99:c5:99:6c:49:e3:70:
c8:eb:4f:55:15:0a:cb:c6:4e:63:c2:10:c9:9a:9f:66:b7:50:
fe:22:95:88:d8:4c:18:55:38:52:3d:17:e6:36:5c:5d:2d:8a:
7c:fa:4e:25:fd:47:c5:cb:c6:8e:93:30:e2:6e:fd:69:2d:77:
1e:0e:b1:f2:30:10:87:1d:5f:0d:9c:ca:ce:06:8a:19:a4:11:
b0:66:d5:78
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAeWzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA1MTMzMjU4WhcNMjYxMDEzMTMzMjU4WjAYMRYw
FAYDVQQDEw02YTljMWEwZi00ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq4HL4uomO7b2oYBVVeyXFkvECpuE442mRKBsB7v5xlLNL3tXwgmjcjMI
e9qSuajdIDX5zjmSHasPmoKpm6WLJX177LgdnFeGcfbKk1crqNQDTMCh07XgGKSJ
G9kG2eA40UQXm0polShZcyEv6L5fhsSfbCS9FW7wnnbJ+QdkJOJJShg8vef2ZPTu
60jQyN0y2Fixy7Y5KU1pkiQTpPTnooP8tIwmD/qXhKgEhfS903QTzLv0gHSqgYbB
34u4t3HzM/qjiE62y9RfF2nTbwTDoROCmkW3HwG4903usx5Z0ymWOgxqfZl8Iq9Y
isDyu9q/AcG1S9nbmbhhsjxhjKfQ+wIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFHVL
o74ZFNs8V0yGqQX2xaQn7uS7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTY0QUMwMEE5MkUxMUYxQTk2OUNCRDdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmsv5AwQBmswmAwQBmsws
AwQBmswwAwQBmsw8AwQBms0eAwQBms2uAwQBms24AwQAms4JAwQBmtJ4MA0GCSqG
SIb3DQEBCwUAA4IBAQCjhqQZno8IW00QQGFzp20PK8BzKK4PVX7qmZzpEn1hhaJO
lwFq4wvkS4nVR9RliajFmT3o1VZy9bUukUm6RaJ7Yxu55xUQQjK8GBZ6pNX7+4uJ
MeZcmm96/tyiEg5H6ZAX4MHYamH76/naIo6HWrl6M0QuwaMy8Z+aq2YCrSGisgX3
uiiRSd60cdZMvY1WJcxBoEIgr3D5xzk2a0zeH/WcxjA+Woc5c0B74kgbCZnFmWxJ
43DI609VFQrLxk5jwhDJmp9mt1D+IpWI2EwYVThSPRfmNlxdLYp8+k4l/UfFy8aO
kzDibv1pLXceDrHyMBCHHV8NnMrOBooZpBGwZtV4
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:29:31 2026 by rpki-client