Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA213F32C94C11F1939DDAE7CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA213F32C94C11F1939DDAE7CE1D38B0.roa
File: FA213F32C94C11F1939DDAE7CE1D38B0.roa (raw, json)
Hash identifier: wwvawuRdg3GSis0V9ABOs4t8rdf8SKQV3h6SUUwYy+4=
Subject key identifier: 8C:02:B5:38:F2:8E:71:15:9C:C5:1D:F4:3A:6D:BC:9C:3D:93:EF:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01EE62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA213F32C94C11F1939DDAE7CE1D38B0.roa
Signing time: Fri 16 Oct 2026 10:33:08 +0000
ROA not before: Fri 16 Oct 2026 10:33:03 +0000
ROA not after: Fri 23 Oct 2026 10:33:03 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
154.86.16.0/23 maxlen: 24
154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/23 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
154.86.20.0/23 maxlen: 24
154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/23 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/23 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/23 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/23 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/23 maxlen: 24
154.86.30.0/24 maxlen: 24
154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Oct 2026 00:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126562 (0x1ee62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 10:33:03 2026 GMT
Not After : Oct 23 10:33:03 2026 GMT
Subject: CN=6ad1fd64-3334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:e2:58:42:15:b9:b0:7b:b2:71:91:7d:45:
78:11:3d:a5:18:e4:ed:fb:83:8d:0e:a2:ea:8f:f3:
4a:f0:5a:39:01:61:84:fd:b6:2b:9d:3b:4a:8b:c7:
d4:2d:c8:fe:cc:c4:f2:e9:69:5e:62:13:34:7f:60:
f3:e4:5a:b0:a5:76:03:3d:e9:6a:85:8c:d3:de:03:
b8:30:9c:62:4c:19:21:5a:70:4c:8a:84:e3:e4:d4:
68:7a:09:56:79:01:b7:8d:f3:a4:f9:ca:35:7c:c9:
e4:fe:ec:60:dc:3e:1b:a0:30:2a:07:05:d4:41:e5:
04:86:32:89:b1:d5:63:17:87:8d:9f:a7:4c:60:e6:
3b:5e:b2:77:41:16:6d:8b:e0:59:e6:42:22:c0:c6:
04:e3:a5:9e:ea:07:88:4b:86:7d:ba:b9:8b:77:e8:
2c:db:69:42:57:7c:fe:da:d6:88:f0:93:b0:79:72:
60:1f:8e:b5:c8:db:43:1e:0d:87:ce:29:9f:24:b1:
2e:ab:b6:d0:b7:6b:00:cb:c4:7c:80:13:6d:b1:84:
57:82:9d:b5:0a:8f:c7:d5:11:0b:f2:40:3b:aa:2c:
49:40:ef:85:1c:fc:c3:b7:5b:79:6c:28:65:e7:2e:
96:2e:92:eb:9c:d4:cd:79:48:2a:4d:88:ba:5b:d0:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:B5:38:F2:8E:71:15:9C:C5:1D:F4:3A:6D:BC:9C:3D:93:EF:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA213F32C94C11F1939DDAE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
56:43:76:c5:2e:c6:a3:74:b3:82:1e:75:4a:cb:dd:38:84:b0:
e4:61:b1:b7:76:7a:d6:51:fe:dc:27:46:22:77:e3:9f:56:4e:
ab:d6:cf:16:7c:e6:b9:b0:92:f6:fa:ea:3a:a4:e9:1e:b0:cb:
1f:7f:e8:b4:b3:18:fe:5c:23:e7:5d:85:38:3a:ba:75:e8:80:
e2:42:3f:12:76:83:18:35:ea:2e:fa:e6:c7:2a:60:63:fa:25:
ef:26:10:17:c8:b9:94:81:a7:5b:10:4c:39:11:5a:3c:9f:56:
c5:ab:63:0f:f6:48:6d:e6:50:e2:f7:6c:f9:7f:96:c3:0c:5f:
1f:cf:39:10:bd:5e:bd:f3:16:d8:cc:ba:d7:a2:47:34:8a:a1:
46:93:a8:c2:f3:f0:9f:64:b6:88:43:7b:22:8f:51:53:ad:fa:
cd:23:02:87:6a:60:a8:1f:a3:8d:00:d5:90:4e:74:44:b4:0d:
0a:99:95:74:ce:6b:1a:7d:1c:6a:62:92:c4:cb:9d:e1:04:93:
9f:3b:ba:f6:72:b6:6c:27:f8:02:4d:8b:ac:5d:3c:65:f1:79:
98:69:33:ab:90:e8:6d:a8:af:f6:4c:c9:74:99:24:29:8e:78:
12:dd:c5:64:07:43:e1:6a:c8:c4:53:a6:db:f4:3b:20:97:b1:
8a:2b:20:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe5iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDE2MTAzMzAzWhcNMjYxMDIzMTAzMzAzWjAYMRYw
FAYDVQQDEw02YWQxZmQ2NC0zMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq1biWEIVubB7snGRfUV4ET2lGOTt+4ONDqLqj/NK8Fo5AWGE/bYrnTtK
i8fULcj+zMTy6WleYhM0f2Dz5FqwpXYDPelqhYzT3gO4MJxiTBkhWnBMioTj5NRo
eglWeQG3jfOk+co1fMnk/uxg3D4boDAqBwXUQeUEhjKJsdVjF4eNn6dMYOY7XrJ3
QRZti+BZ5kIiwMYE46We6geIS4Z9urmLd+gs22lCV3z+2taI8JOweXJgH461yNtD
Hg2HzimfJLEuq7bQt2sAy8R8gBNtsYRXgp21Co/H1REL8kA7qixJQO+FHPzDt1t5
bChl5y6WLpLrnNTNeUgqTYi6W9AEmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIwC
tTjyjnEVnMUd9DptvJw9k+/qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQTIxM0YzMkM5NEMxMUYxOTM5RERBRTdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQBWQ3bFLsajdLOCHnVKy904hLDkYbG3dnrWUf7cJ0Yid+OfVk6r1s8W
fOa5sJL2+uo6pOkesMsff+i0sxj+XCPnXYU4Orp16IDiQj8SdoMYNeou+ubHKmBj
+iXvJhAXyLmUgadbEEw5EVo8n1bFq2MP9kht5lDi92z5f5bDDF8fzzkQvV698xbY
zLrXokc0iqFGk6jC8/CfZLaIQ3sij1FTrfrNIwKHamCoH6ONANWQTnREtA0KmZV0
zmsafRxqYpLEy53hBJOfO7r2crZsJ/gCTYusXTxl8XmYaTOrkOhtqK/2TMl0mSQp
jngS3cVkB0PhasjEU6bb9Dsgl7GKKyDk
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:41:27 2026 by rpki-client