Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA24F920B66311F1B96BB2F0CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA24F920B66311F1B96BB2F0CE1D38B0.roa
File: FA24F920B66311F1B96BB2F0CE1D38B0.roa (raw, json)
Hash identifier: +FPoiI0kAJYIB83tEaBTl6MJZjTQTbm+odWu3n/Oxp0=
Subject key identifier: 83:F3:56:EF:4A:01:93:C3:8C:3C:1E:84:0D:DC:8C:6D:B2:B3:6C:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D7E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA24F920B66311F1B96BB2F0CE1D38B0.roa
Signing time: Tue 22 Sep 2026 08:59:54 +0000
ROA not before: Tue 22 Sep 2026 08:59:50 +0000
ROA not after: Sat 07 Nov 2026 08:59:50 +0000
asID: 401783
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120806 (0x1d7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 22 08:59:50 2026 GMT
Not After : Nov 7 08:59:50 2026 GMT
Subject: CN=6ab2438a-9667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:ac:37:c8:b1:70:d3:34:b8:c1:c0:4e:75:
00:ed:23:01:8a:87:f6:a6:2d:a4:65:94:4a:af:c7:
8c:5f:b6:65:54:f5:06:1e:18:b9:2d:18:01:53:a9:
fc:4d:15:91:82:98:21:81:d3:86:96:5d:f5:1c:51:
2a:56:b2:ba:2c:3b:b0:7e:3e:a2:ea:4f:0f:9a:38:
e1:b4:f6:b7:d4:b1:bb:06:53:31:2a:4e:19:22:86:
89:66:d7:92:9c:2b:d9:30:90:b8:be:85:4e:e6:d1:
47:e1:21:99:15:b5:3f:1f:7f:09:b3:33:b1:89:fc:
d0:34:fe:55:de:3a:68:02:e0:ad:ad:3b:d6:83:55:
99:a8:1e:8e:43:b9:3e:33:64:d1:c5:e2:27:0b:f3:
11:3f:ef:5d:8c:ba:87:05:d3:41:3e:5d:ec:a2:ec:
d7:d5:55:e3:1b:05:91:4f:87:28:f4:ca:81:d2:62:
86:5e:d7:90:c5:56:0d:7d:6a:56:35:49:af:c4:d1:
31:0a:52:b2:f4:68:61:a8:3b:96:88:3d:39:dd:48:
7c:9b:72:fe:99:4c:46:cc:b1:72:b6:a5:a0:97:d5:
38:ad:7a:93:ba:59:57:f9:c4:f6:06:30:56:f4:3c:
b3:5f:db:ed:67:a0:0b:86:87:9d:db:53:9b:f2:25:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:56:EF:4A:01:93:C3:8C:3C:1E:84:0D:DC:8C:6D:B2:B3:6C:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA24F920B66311F1B96BB2F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0-156.231.6.255
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.233.66.0/24
156.249.154.0/24
156.249.162.0/24
156.249.166.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:47:3c:4e:95:78:dd:bc:20:5b:5c:b7:7f:f6:88:67:6c:11:
12:a5:8d:90:32:c2:e3:ff:5c:8e:af:78:2c:0c:bc:f2:a4:74:
9c:87:b1:23:3e:30:59:90:1c:a1:e2:1b:43:89:d7:e9:d1:4e:
2f:07:d3:30:1f:66:41:af:4f:75:61:f8:f3:9b:de:bb:43:5a:
5f:f1:3c:a5:4b:2b:d8:bb:31:14:f2:51:1d:23:5f:8b:4c:7c:
9e:b9:e8:8c:ff:15:0e:ef:f7:ff:c2:83:3b:ee:e3:74:ed:e1:
1c:c8:a3:6b:b3:11:60:e6:57:d1:1b:44:63:d1:bd:5f:44:88:
af:e4:1b:fd:a9:00:b7:ad:ca:e3:cf:9c:3e:57:c8:e5:11:a4:
b5:45:8f:d0:f1:b5:18:8e:ad:00:b2:ca:68:7b:79:25:a0:ed:
d8:dd:61:b9:02:bd:88:b5:26:af:51:65:5b:38:e8:9c:cf:c7:
3c:b7:04:ca:1d:d9:e7:5b:a6:37:6a:8c:00:85:a1:1b:6a:51:
11:c2:36:87:bd:6c:1e:1d:0c:2e:d9:6e:f2:1f:8d:a4:32:c6:
82:0f:c5:9b:17:af:9e:d6:7e:d6:2b:98:2a:8d:bf:5a:bc:96:
8b:50:29:ab:bf:f6:b9:60:7e:24:15:48:9b:ad:5b:61:a2:d8:
70:85:81:df
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIDAdfmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMDg1OTUwWhcNMjYxMTA3MDg1OTUwWjAYMRYw
FAYDVQQDEw02YWIyNDM4YS05NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqbOsN8ixcNM0uMHATnUA7SMBiof2pi2kZZRKr8eMX7ZlVPUGHhi5LRgB
U6n8TRWRgpghgdOGll31HFEqVrK6LDuwfj6i6k8PmjjhtPa31LG7BlMxKk4ZIoaJ
ZteSnCvZMJC4voVO5tFH4SGZFbU/H38JszOxifzQNP5V3jpoAuCtrTvWg1WZqB6O
Q7k+M2TRxeInC/MRP+9djLqHBdNBPl3souzX1VXjGwWRT4co9MqB0mKGXteQxVYN
fWpWNUmvxNExClKy9GhhqDuWiD053Uh8m3L+mUxGzLFytqWgl9U4rXqTullX+cT2
BjBW9DyzX9vtZ6ALhoed21Ob8iXjEQIDAQABo4IDADCCAvwwHQYDVR0OBBYEFIPz
Vu9KAZPDjDwehA3cjG2ys2ylMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQTI0RjkyMEI2NjMxMUYxQjk2QkIyRjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQAnOOEAwQAnOOIMAwDBACc44sD
BACc44wDBACc458wDAMEApznBAMEAJznBgMEAZznCAMEAJznPwMEAJznagMEAZzn
gAMEAJznhQMEAJzpQgMEAJz5mgMEAJz5ogMEAZz5pjANBgkqhkiG9w0BAQsFAAOC
AQEAHkc8TpV43bwgW1y3f/aIZ2wREqWNkDLC4/9cjq94LAy88qR0nIexIz4wWZAc
oeIbQ4nX6dFOLwfTMB9mQa9PdWH485veu0NaX/E8pUsr2LsxFPJRHSNfi0x8nrno
jP8VDu/3/8KDO+7jdO3hHMija7MRYOZX0RtEY9G9X0SIr+Qb/akAt63K48+cPlfI
5RGktUWP0PG1GI6tALLKaHt5JaDt2N1huQK9iLUmr1FlWzjonM/HPLcEyh3Z51um
N2qMAIWhG2pREcI2h71sHh0MLtlu8h+NpDLGgg/FmxevntZ+1iuYKo2/WryWi1Ap
q7/2uWB+JBVIm61bYaLYcIWB3w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:20:56 2026 by rpki-client