Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFD5D46B5A411F18746F00FCF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFD5D46B5A411F18746F00FCF1D38B0.roa
File: CFFD5D46B5A411F18746F00FCF1D38B0.roa (raw, json)
Hash identifier: 7Scfwl9IH8M0eg5L9O8nMX31iQhJkKz5II8VBAq4rek=
Subject key identifier: DB:D0:BD:7A:D4:40:7E:A7:DF:EB:C4:B0:4A:AB:80:44:46:D3:E9:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E996
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFD5D46B5A411F18746F00FCF1D38B0.roa
Signing time: Mon 21 Sep 2026 10:11:30 +0000
ROA not before: Mon 21 Sep 2026 10:11:26 +0000
ROA not after: Thu 20 Sep 2029 10:11:26 +0000
asID: 17561
IP address blocks: 154.204.180.0/24 maxlen: 24
154.204.181.0/24 maxlen: 24
154.204.182.0/24 maxlen: 24
154.204.183.0/24 maxlen: 24
154.204.184.0/24 maxlen: 24
154.204.185.0/24 maxlen: 24
154.204.186.0/24 maxlen: 24
154.204.187.0/24 maxlen: 24
154.204.188.0/24 maxlen: 24
154.204.189.0/24 maxlen: 24
154.204.190.0/24 maxlen: 24
154.204.191.0/24 maxlen: 24
154.206.32.0/24 maxlen: 24
154.206.35.0/24 maxlen: 24
154.206.37.0/24 maxlen: 24
154.206.38.0/24 maxlen: 24
154.206.39.0/24 maxlen: 24
154.206.40.0/24 maxlen: 24
154.206.41.0/24 maxlen: 24
154.206.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125334 (0x1e996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 21 10:11:26 2026 GMT
Not After : Sep 20 10:11:26 2029 GMT
Subject: CN=6ab102d2-c03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:fa:86:17:22:14:c7:d1:25:2a:6f:df:98:
29:ec:40:ec:49:f9:02:e9:d6:6f:4c:40:e3:b2:5f:
89:9c:61:14:ad:8d:27:1f:6a:d0:21:86:1a:85:b7:
a6:4b:87:d3:14:90:5a:57:90:f5:b9:1e:ce:b1:4f:
04:0c:64:67:fc:d0:59:97:d3:11:44:8b:fd:dd:08:
35:54:a8:2d:fe:1e:ea:a8:96:a7:3d:dd:c3:eb:54:
c0:82:04:c3:f5:4c:6b:d9:65:fa:4e:74:db:3b:19:
a5:09:0e:ce:8f:ab:85:d8:92:61:47:ef:0e:f9:60:
10:83:ec:f5:86:9a:87:7d:c2:0a:b3:64:48:ff:3b:
0c:d9:30:62:82:53:bc:c3:94:68:a4:fb:47:81:a3:
05:c8:76:b3:bf:88:26:37:5b:6e:85:4a:1a:a0:a3:
53:15:b9:58:7a:7c:40:a1:76:46:a8:f7:09:73:d9:
ee:63:2f:38:64:44:40:4e:64:b2:c3:11:18:ae:66:
63:ed:bf:62:4d:c1:9c:31:5c:c2:ab:7d:e5:39:eb:
f2:3d:10:59:49:e7:b1:ff:1e:db:c0:e2:fc:8d:9b:
04:97:d9:8f:33:4c:53:fc:ce:22:36:c0:74:8f:ed:
57:4b:ce:ba:ee:e3:0d:81:c2:75:f3:bb:3e:84:43:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:BD:7A:D4:40:7E:A7:DF:EB:C4:B0:4A:AB:80:44:46:D3:E9:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFFD5D46B5A411F18746F00FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.180.0-154.204.191.255
154.206.32.0/24
154.206.35.0/24
154.206.37.0-154.206.42.255
Signature Algorithm: sha256WithRSAEncryption
65:3d:de:f0:be:6e:8f:fc:ac:e5:f8:31:27:07:d6:b1:79:f0:
b2:32:b6:57:90:9d:a3:bf:a1:ca:3d:b2:fd:a4:ce:14:65:ef:
5d:88:53:ed:c0:90:45:ce:c3:a8:d1:49:46:6a:3f:aa:e2:20:
6a:63:e0:96:7b:ef:51:74:90:11:4d:4c:4a:10:4a:df:08:5d:
ab:b4:da:d8:be:cc:50:42:d6:a6:f9:39:3b:67:46:7b:60:0e:
49:48:98:71:ff:4f:14:b9:67:93:bb:00:80:33:8f:39:54:bb:
44:ba:4b:79:d2:0b:80:a8:4c:86:60:4e:3a:bd:e6:d7:58:dc:
61:a6:e4:7d:88:cb:d3:28:3b:8b:ed:96:75:3f:88:04:48:17:
b3:08:01:93:5b:b3:86:3c:0f:82:bf:c3:0b:4b:1f:0f:76:bf:
8d:18:56:02:34:a9:0f:69:6d:f5:9a:38:06:9c:bb:a2:e8:2c:
34:1e:e4:3b:78:cd:21:96:2e:e8:1c:08:21:14:71:89:a8:40:
ca:8d:1a:6b:a7:47:95:4c:a7:dd:4a:22:46:aa:55:40:ad:65:
d3:15:9b:15:a8:34:84:a4:35:1e:5b:e6:d7:97:d1:8b:9c:6d:
7d:80:11:81:cf:1a:f0:f5:fe:16:d8:bc:46:77:ca:c0:22:32:
f4:79:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:38 2026 by rpki-client