Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/546039EEA9DB11F1919541F2CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/546039EEA9DB11F1919541F2CE1D38B0.roa
File:                     546039EEA9DB11F1919541F2CE1D38B0.roa (raw, json)
Hash identifier:          TMzLjzlTC799wydUfmKOfqgdViBKziLfT7eBMX8KqG8=
Subject key identifier:   9E:3E:40:A5:B5:6B:16:25:B9:4A:8C:B3:7F:38:DD:2C:9A:75:47:93
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/546039EEA9DB11F1919541F2CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 10:11:31 +0000
ROA not before:           Sun 06 Sep 2026 10:11:26 +0000
ROA not after:            Wed 14 Oct 2026 10:11:26 +0000
asID:                     152698
IP address blocks:        156.225.35.0/24 maxlen: 24
                          156.225.70.0/24 maxlen: 24
                          156.225.71.0/24 maxlen: 24
                          156.225.72.0/24 maxlen: 24
                          156.225.73.0/24 maxlen: 24
                          156.238.94.0/24 maxlen: 24
                          156.238.95.0/24 maxlen: 24
                          156.238.102.0/24 maxlen: 24
                          156.238.103.0/24 maxlen: 24
                          156.246.26.0/24 maxlen: 24
                          156.246.27.0/24 maxlen: 24
                          156.246.28.0/24 maxlen: 24
                          156.246.29.0/24 maxlen: 24
                          156.246.84.0/24 maxlen: 24
                          156.247.17.0/24 maxlen: 24
                          156.247.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119719 (0x1d3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  6 10:11:26 2026 GMT
            Not After : Oct 14 10:11:26 2026 GMT
        Subject: CN=6a9d3c53-1159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:b6:e0:97:c4:cc:43:4a:42:95:c5:cd:74:
                    89:d3:36:05:e9:fc:bb:37:81:79:35:aa:06:38:a0:
                    e8:54:65:b6:09:54:6c:46:5b:f0:7f:65:3c:47:0c:
                    8b:4c:e1:9c:f6:75:14:44:21:f0:71:7b:2b:82:ba:
                    54:0f:e8:a9:54:4e:6a:68:e2:61:2a:cd:2d:b3:bc:
                    e8:83:ee:95:19:9a:59:07:d9:5e:61:4a:20:19:66:
                    dd:10:49:48:c2:1b:33:0a:6a:97:00:03:d7:f0:06:
                    8c:59:cc:db:9c:2c:ee:ff:33:3f:df:d5:c1:58:70:
                    51:51:23:1d:b1:ee:92:3c:df:b0:b1:c9:47:e1:70:
                    fd:46:e5:46:70:43:8c:c4:08:d1:a1:50:17:6d:87:
                    02:c9:1f:b2:6e:f0:d6:c0:17:d4:48:11:e0:6d:9b:
                    28:58:66:e2:cc:6b:a9:81:e9:05:dd:2a:a6:0a:d2:
                    99:ae:05:d2:2a:38:13:d9:31:9d:97:21:ad:c5:6f:
                    c9:02:13:0a:63:b4:66:32:19:98:4c:3d:d0:5a:a8:
                    0b:2c:57:67:e0:b0:ed:9b:47:13:7c:df:d6:7e:0e:
                    3c:7c:8e:52:50:95:a3:d8:2b:8f:9d:d3:41:46:b9:
                    8d:f0:53:46:4d:63:78:07:58:bf:af:11:4a:74:16:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:40:A5:B5:6B:16:25:B9:4A:8C:B3:7F:38:DD:2C:9A:75:47:93
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/546039EEA9DB11F1919541F2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.35.0/24
                  156.225.70.0-156.225.73.255
                  156.238.94.0/23
                  156.238.102.0/23
                  156.246.26.0-156.246.29.255
                  156.246.84.0/24
                  156.247.17.0-156.247.18.255

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:9c:fe:08:76:a0:09:fd:21:bc:4b:0f:44:37:e9:da:94:
         bc:24:bc:4b:52:1d:7a:40:db:0d:71:9a:3d:c0:b3:ce:cb:f8:
         d4:a4:8e:58:c7:70:14:21:8b:9a:b9:e4:1e:0d:c0:ec:25:48:
         0f:bc:5d:e3:af:32:50:ae:a2:8d:75:0b:2b:9f:b5:d9:dd:bd:
         89:e7:40:40:34:c2:96:2b:c8:78:f7:9a:78:a1:70:c8:3f:bf:
         0b:77:7e:2e:e6:2e:ff:79:ee:88:4c:fe:59:f3:02:8e:88:99:
         8e:cd:4e:7f:2d:8a:90:75:f0:f8:02:fa:f5:61:35:71:79:98:
         d9:ca:4b:78:8a:21:32:41:23:93:31:45:5f:40:b4:76:94:6c:
         46:ba:bb:2e:14:71:fa:dd:85:bb:63:82:e0:f8:87:9c:10:7c:
         41:4e:6a:87:f6:d1:ca:5c:9e:64:47:c7:2b:66:5a:f6:93:cb:
         49:3e:6e:ab:b6:b1:6b:73:3f:a2:cb:c0:90:b2:33:79:f4:19:
         e3:5b:08:ff:24:49:c7:c7:1d:7e:dc:0f:c8:96:ff:20:60:0b:
         8b:cd:a9:03:ae:3d:ff:7b:25:44:79:86:84:82:ca:03:e2:af:
         dc:09:e7:08:4b:d3:2b:b1:ba:4b:10:0d:8f:31:15:4d:69:98:
         9b:92:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:18:31 2026 by rpki-client