Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CDF9D48B66B11F1914260A1CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CDF9D48B66B11F1914260A1CE1D38B0.roa
File: 5CDF9D48B66B11F1914260A1CE1D38B0.roa (raw, json)
Hash identifier: Jj6gtA2dNg1WCnzzO5Hn/8f38yZH45H7ImOjylweSmA=
Subject key identifier: 9C:02:9A:FD:03:7C:30:CB:CE:57:95:53:46:46:95:70:3A:F2:36:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D800
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CDF9D48B66B11F1914260A1CE1D38B0.roa
Signing time: Tue 22 Sep 2026 09:52:46 +0000
ROA not before: Tue 22 Sep 2026 09:52:42 +0000
ROA not after: Sat 07 Nov 2026 09:52:42 +0000
asID: 401783
IP address blocks: 45.197.3.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.197.24.0/24 maxlen: 24
45.198.5.0/24 maxlen: 24
45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120832 (0x1d800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 22 09:52:42 2026 GMT
Not After : Nov 7 09:52:42 2026 GMT
Subject: CN=6ab24fee-272d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:3f:bf:95:5a:85:f1:51:e9:ca:56:27:2c:
c4:9d:a1:db:e4:96:8e:0c:f8:40:56:10:34:f4:4d:
68:55:fa:f5:84:5a:de:ed:62:ca:3e:86:0f:c3:c2:
51:65:a2:e4:3b:32:34:40:8d:c6:9d:d5:49:b6:e5:
56:34:0f:01:31:4c:b1:eb:27:34:63:1f:1d:0d:2f:
de:0b:17:a5:fb:e5:19:cd:d8:6b:31:f3:d4:b9:cf:
52:52:70:a5:11:4a:1d:62:48:90:92:01:8c:84:d8:
05:ff:d7:f8:c4:1d:aa:7a:75:36:de:ba:e5:91:20:
38:e2:63:c0:58:20:cb:af:6a:6b:4a:fb:da:eb:cb:
9f:54:e1:22:49:fc:a7:12:46:3d:c7:02:4c:c2:38:
5c:b0:9e:8c:a6:d7:23:7a:f9:c4:13:7a:78:e6:6e:
2a:c6:69:42:5c:89:ea:54:7d:56:da:02:b5:0f:59:
87:3a:d0:88:c6:02:e1:cb:e6:a4:c3:93:f5:a9:4a:
1b:9f:d8:46:2e:db:8f:c9:a4:6a:ca:90:29:07:4a:
3c:9c:f5:92:c3:6e:05:1d:91:7e:d7:56:86:4a:3a:
f8:ce:81:ae:9b:7b:66:ff:a5:aa:b6:f1:e9:3e:68:
1f:59:ac:c4:63:c6:63:e2:03:40:9c:ad:df:75:6f:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:9A:FD:03:7C:30:CB:CE:57:95:53:46:46:95:70:3A:F2:36:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CDF9D48B66B11F1914260A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.3.0/24
45.197.8.0/24
45.197.10.0/23
45.197.24.0/24
45.198.5.0/24
45.198.16.0-45.198.18.255
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4a:26:25:ce:71:67:62:9c:a0:29:b7:fa:ee:4e:7a:5e:e6:
d0:df:3a:d7:a0:74:7f:47:80:d8:fc:ae:ef:e2:28:bd:b4:a9:
65:07:e2:0b:c7:b2:ee:21:a7:45:ad:c1:16:17:73:a0:6c:dd:
e8:bd:74:37:33:45:7c:d9:c0:98:5e:bb:78:c4:dd:4e:34:eb:
56:a7:2c:e3:26:ad:f2:74:77:6a:aa:f6:09:0e:cc:f5:98:18:
f3:ef:32:a2:b5:a6:85:99:65:8f:6e:a9:20:49:61:cc:ac:63:
d2:0c:e3:18:4f:1b:15:38:8d:45:bc:ec:93:ed:c6:81:45:b0:
58:9a:dc:8b:b7:fa:c0:b6:28:d7:33:82:02:36:d6:e5:64:ca:
69:42:fc:1a:97:17:fb:6e:13:c7:ce:84:2a:01:6c:6b:97:a8:
8a:fc:44:a9:66:49:dc:76:0d:3e:1c:9b:f0:e2:2b:30:0e:27:
51:a6:5b:5c:3e:1f:ca:3b:05:fd:91:e0:d2:6e:24:79:db:4f:
78:c9:0f:83:6a:fe:4c:44:ac:95:27:ce:d1:8d:d7:31:de:9b:
5f:0d:22:b7:53:46:c0:f2:e7:60:58:dc:fe:ec:ed:7b:cf:30:
9e:4a:aa:d5:15:5d:82:9e:30:70:38:f5:61:8d:6d:f1:b2:53:
fd:87:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:10:38 2026 by rpki-client