Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2F116D2B66511F19CD3DBFECE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2F116D2B66511F19CD3DBFECE1D38B0.roa
File: F2F116D2B66511F19CD3DBFECE1D38B0.roa (raw, json)
Hash identifier: RdCnKqCcIDpfmaWSXFMXPspHuFuV7kiQNm6+Zdc1VPA=
Subject key identifier: 47:B5:71:FE:E3:92:81:BA:B6:FF:D9:88:7A:ED:37:D6:C3:71:DB:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D7EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2F116D2B66511F19CD3DBFECE1D38B0.roa
Signing time: Tue 22 Sep 2026 09:14:01 +0000
ROA not before: Tue 22 Sep 2026 09:13:57 +0000
ROA not after: Sat 07 Nov 2026 09:13:57 +0000
asID: 32043
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
156.249.128.0/22 maxlen: 24
156.249.189.0/24 maxlen: 24
156.249.194.0/24 maxlen: 24
156.249.195.0/24 maxlen: 24
156.249.200.0/24 maxlen: 24
156.249.201.0/24 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120814 (0x1d7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 22 09:13:57 2026 GMT
Not After : Nov 7 09:13:57 2026 GMT
Subject: CN=6ab246d9-9612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:f1:a0:8e:e0:53:4c:72:20:ba:73:f0:56:
96:c5:6f:17:ef:65:7e:1f:5a:13:5e:18:ee:5d:b0:
5c:47:88:c1:1e:b1:52:ac:61:f2:22:9c:bf:64:ba:
a0:41:72:32:4a:0e:10:aa:61:fc:93:dc:ce:e2:8f:
ed:47:cd:37:0a:c6:51:b5:1c:b9:95:1e:c8:05:c5:
8b:dc:79:2f:29:27:80:b9:ae:e5:93:74:45:16:a5:
de:a6:4d:97:7d:3c:11:74:97:21:3f:6c:b4:8e:5e:
a8:09:49:c4:ee:d9:1c:bb:4a:03:56:91:42:fc:41:
bd:e5:d5:99:77:2e:cd:de:d2:a1:b5:1d:31:9c:90:
a0:4e:39:78:8e:be:1e:3a:e3:34:2d:57:25:3f:12:
ee:b9:08:58:ff:c8:f8:b4:f7:db:67:0a:ec:c0:7c:
bb:c5:7a:bf:dd:4b:1c:b9:7b:0e:15:01:9c:e4:0a:
d9:a9:48:63:ab:55:5c:93:48:60:44:b0:38:6c:cf:
4b:a8:44:90:27:8d:80:2c:da:36:14:76:10:50:d6:
47:82:b0:8b:61:dc:61:b9:03:8a:65:5d:f2:f2:00:
a2:e3:5d:32:24:46:14:2c:3a:2a:ae:23:e2:fc:ee:
c7:e4:25:54:5d:a9:19:e1:58:c8:83:9f:b7:23:a3:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:71:FE:E3:92:81:BA:B6:FF:D9:88:7A:ED:37:D6:C3:71:DB:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2F116D2B66511F19CD3DBFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
156.249.128.0/22
156.249.189.0/24
156.249.194.0/23
156.249.200.0/23
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
59:8b:18:a8:12:32:e4:ca:c7:ba:20:36:a8:86:4d:da:99:c2:
d2:c1:e3:0d:91:51:11:06:41:ba:a4:6f:9c:4b:9a:63:b9:0a:
44:95:33:65:8b:b6:fb:de:0f:97:f5:f5:17:03:93:ac:ec:fc:
50:99:49:89:9c:7e:66:1e:da:69:47:2e:0d:92:ce:e7:20:92:
78:7c:f1:c4:e4:9f:6b:29:91:b6:37:8a:0d:a3:d1:19:df:97:
67:c7:51:38:70:f6:bd:07:9c:b8:3f:48:7d:72:51:66:21:75:
59:12:d5:c3:0f:c4:20:0f:c8:f0:38:0d:ce:59:fc:71:d8:24:
68:39:83:7c:12:cd:e9:f1:aa:12:f0:98:54:1d:e6:f0:ec:54:
a2:59:58:51:49:4e:22:a3:6c:f5:33:c5:3f:03:ef:18:17:32:
66:15:58:d7:3c:ea:60:e1:28:b6:64:f2:b1:e3:58:1d:a2:eb:
a2:53:50:54:d3:9c:6b:d8:21:13:b5:dc:ad:b8:bc:47:3b:41:
bb:8d:48:d4:be:88:f4:f2:51:c7:ac:3e:00:29:e0:dc:75:8b:
2b:ef:85:3e:3a:2a:24:08:15:05:1c:af:e6:b7:1a:54:5e:e9:
d8:8e:89:1f:82:78:60:94:86:f9:e5:87:bc:08:95:2b:45:eb:
a1:be:bf:e0
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIDAdfuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMDkxMzU3WhcNMjYxMTA3MDkxMzU3WjAYMRYw
FAYDVQQDEw02YWIyNDZkOS05NjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1L3xoI7gU0xyILpz8FaWxW8X72V+H1oTXhjuXbBcR4jBHrFSrGHyIpy/
ZLqgQXIySg4QqmH8k9zO4o/tR803CsZRtRy5lR7IBcWL3HkvKSeAua7lk3RFFqXe
pk2XfTwRdJchP2y0jl6oCUnE7tkcu0oDVpFC/EG95dWZdy7N3tKhtR0xnJCgTjl4
jr4eOuM0LVclPxLuuQhY/8j4tPfbZwrswHy7xXq/3UscuXsOFQGc5ArZqUhjq1Vc
k0hgRLA4bM9LqESQJ42ALNo2FHYQUNZHgrCLYdxhuQOKZV3y8gCi410yJEYULDoq
riPi/O7H5CVUXakZ4VjIg5+3I6P/XQIDAQABo4IDBzCCAwMwHQYDVR0OBBYEFEe1
cf7jkoG6tv/ZiHrtN9bDcdv6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMkYxMTZEMkI2NjUxMUYxOUNEM0RCRkVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEApzmEAMEApzmNAMEAZzmhgME
AZzoAgMEA5zoMAMEApz5gAMEAJz5vQMEAZz5wgMEAZz5yAMEApz5zDAMAwQCnPnU
AwQFnPnAMAwDBAKc+fQDBAKc+fgDBAGc/AYDBACc/AoDBAGc/BAwDQYJKoZIhvcN
AQELBQADggEBAFmLGKgSMuTKx7ogNqiGTdqZwtLB4w2RUREGQbqkb5xLmmO5CkSV
M2WLtvveD5f19RcDk6zs/FCZSYmcfmYe2mlHLg2Szucgknh88cTkn2spkbY3ig2j
0Rnfl2fHUThw9r0HnLg/SH1yUWYhdVkS1cMPxCAPyPA4Dc5Z/HHYJGg5g3wSzenx
qhLwmFQd5vDsVKJZWFFJTiKjbPUzxT8D7xgXMmYVWNc86mDhKLZk8rHjWB2i66JT
UFTTnGvYIRO13K24vEc7QbuNSNS+iPTyUcesPgAp4Nx1iyvvhT46KiQIFQUcr+a3
GlRe6diOiR+CeGCUhvnlh7wIlStF66G+v+A=
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:57 2026 by rpki-client