Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A44EBEC94D11F1A7AD34ECCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A44EBEC94D11F1A7AD34ECCE1D38B0.roa
File: C1A44EBEC94D11F1A7AD34ECCE1D38B0.roa (raw, json)
Hash identifier: 6lK06h8blpK7sg/qv/vLNFAY8AkTl5DHZAYiGUv/FPE=
Subject key identifier: 9C:F7:6B:5C:5D:BC:DA:85:39:10:5D:64:C9:7D:A4:34:2E:1E:E6:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EE64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A44EBEC94D11F1A7AD34ECCE1D38B0.roa
Signing time: Fri 16 Oct 2026 10:38:43 +0000
ROA not before: Fri 16 Oct 2026 10:38:38 +0000
ROA not after: Fri 23 Oct 2026 10:38:38 +0000
asID: 153517
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/21 maxlen: 24
154.86.16.0/22 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/22 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/21 maxlen: 24
154.86.24.0/22 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/22 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Oct 2026 00:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126564 (0x1ee64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 10:38:38 2026 GMT
Not After : Oct 23 10:38:38 2026 GMT
Subject: CN=6ad1feb3-23a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:03:c1:a2:57:85:aa:da:5c:3d:1a:91:1a:
07:98:89:34:ea:96:a3:e3:9e:2c:d9:0f:5b:35:69:
d6:6c:d2:f3:46:a7:06:4e:25:1a:3b:85:2f:77:7a:
1d:88:00:7a:1e:55:12:da:2e:44:5f:b9:9b:36:0e:
d8:64:68:d2:a2:3e:1f:14:5e:54:5f:fc:b9:6b:92:
14:d8:69:c5:82:bc:0b:86:00:52:49:f5:0d:b2:79:
5d:56:f8:72:0e:20:37:11:a5:23:b8:19:58:b7:6a:
de:15:84:44:ee:a1:e0:52:9b:86:55:f7:18:30:e2:
73:2d:3f:19:b0:90:e7:d5:98:a8:49:8a:d2:1e:e2:
b5:57:bf:a3:c8:fd:3b:93:ef:63:49:2d:47:e5:5d:
39:f1:30:e5:d8:04:7e:1c:e8:57:a9:99:f3:9b:52:
e5:b7:f5:6c:71:db:21:3f:d6:e7:f8:b5:61:c0:d2:
6a:2c:24:73:ee:85:21:16:a8:fb:6e:14:fa:5c:02:
58:91:b6:fb:cf:28:1f:a2:15:70:91:ba:ec:f4:53:
9e:d2:3c:85:c9:22:fb:27:3c:f5:ea:e4:52:2f:25:
63:12:e6:90:dc:47:bd:61:da:6f:e3:ba:54:99:aa:
93:18:1f:95:f1:46:a5:8e:49:48:7d:31:e3:5b:05:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:6B:5C:5D:BC:DA:85:39:10:5D:64:C9:7D:A4:34:2E:1E:E6:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A44EBEC94D11F1A7AD34ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
74:51:8b:ab:af:40:99:c7:76:e9:cf:0c:d7:86:83:35:14:c7:
4e:91:21:f6:2c:6e:0e:52:76:93:8f:94:1e:1e:f7:b7:1d:c6:
e2:32:98:8e:d3:ca:38:81:91:3c:eb:b5:29:5a:29:ca:f1:3f:
a8:69:f3:ad:bf:35:e3:f7:33:91:be:a5:ce:80:01:98:f7:32:
9b:bd:8f:d8:af:72:05:59:0f:3c:14:34:55:9f:6c:b3:f3:e2:
05:53:85:8f:4e:df:52:28:da:2e:59:91:b0:c6:67:46:ba:be:
6b:ef:8f:d8:bf:40:8a:28:82:e9:f8:14:f9:67:82:59:eb:58:
61:07:e1:b8:35:d1:d7:d4:d3:61:2b:1d:76:61:29:2b:4f:18:
00:e4:b6:d6:a4:28:e1:b5:18:80:36:14:54:11:51:d4:6a:b4:
4e:90:c9:08:99:39:3d:e8:36:88:f0:43:fe:83:23:01:e1:f6:
6c:83:b5:cb:45:ab:f2:2e:7e:4c:b5:fa:f4:06:04:2e:d3:77:
5d:8f:29:4c:70:cf:97:72:79:8c:85:f2:d1:b7:3e:4c:06:24:
9e:a3:54:53:d2:22:cd:39:7a:93:ad:78:6b:3b:6e:ee:7a:96:
bb:30:1b:34:5a:7b:6b:9c:77:df:34:27:95:22:0c:ef:10:60:
ed:4c:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 00:16:58 2026 by rpki-client