Error: rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/E98217BCA6B711F1BCB809F1CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/E98217BCA6B711F1BCB809F1CE1D38B0.roa
File: E98217BCA6B711F1BCB809F1CE1D38B0.roa (raw, json)
Hash identifier: H05c3iJckwPKplJSHMZZ/f0htlgOBZ8SGY638Y0/+qM=
Subject key identifier: D0:33:2B:6F:E6:36:B8:01:75:39:88:F9:1A:88:E0:6A:DC:42:9F:02
Certificate issuer: /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial: 07DD
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/E98217BCA6B711F1BCB809F1CE1D38B0.roa
Signing time: Wed 02 Sep 2026 10:20:25 +0000
ROA not before: Wed 02 Sep 2026 10:20:11 +0000
ROA not after: Sun 02 Sep 2029 10:20:11 +0000
asID: 36925
IP address blocks: 41.87.128.0/19 maxlen: 24
41.92.0.0/17 maxlen: 24
41.205.192.0/19 maxlen: 24
41.214.128.0/17 maxlen: 24
102.96.0.0/13 maxlen: 24
102.216.12.0/22 maxlen: 24
105.188.0.0/14 maxlen: 24
196.112.0.0/12 maxlen: 24
197.153.0.0/16 maxlen: 24
197.230.0.0/16 maxlen: 24
197.247.0.0/16 maxlen: 24
197.253.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Validity
Not Before: Sep 2 10:20:11 2026 GMT
Not After : Sep 2 10:20:11 2029 GMT
Subject: CN=6a97f869-fb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:1d:c2:96:43:38:35:ba:ce:f4:4e:18:4a:
55:5e:e4:33:54:1b:2a:9a:9c:b3:da:f4:a8:d6:4d:
76:5e:ff:70:67:61:bd:8c:a8:eb:41:2b:3a:50:51:
fd:2d:1f:40:83:6f:25:c1:fa:85:ed:94:eb:2c:32:
fb:61:b3:c1:10:ce:56:bf:a9:d5:17:f1:31:f5:62:
10:41:67:2d:09:49:74:b4:dd:90:2f:85:c3:ce:78:
52:8e:7c:51:2c:ba:48:5b:b1:0e:4b:a5:2c:2c:c7:
8a:49:46:07:a8:85:0d:75:d8:b4:87:06:47:66:26:
15:d6:23:1d:34:fe:f8:7e:69:93:66:4e:87:85:53:
92:28:4d:1d:a3:88:35:96:53:b0:aa:60:1f:8d:ed:
fc:0d:7b:1a:ec:cb:ea:3b:77:67:52:4e:cb:4f:0b:
cb:01:be:82:06:65:80:ac:a1:cd:a6:b2:41:f6:ab:
21:5a:bc:b8:fb:5f:cb:54:1e:af:b4:16:db:f8:23:
a4:09:f6:a5:33:3b:58:c0:bf:97:58:6f:fa:28:8d:
41:0a:68:8e:77:a4:c9:6a:6d:2f:76:1b:fe:bc:58:
df:d6:90:c6:90:e2:3b:1c:0c:2d:3c:02:66:d6:33:
8b:f9:e3:a1:61:ba:ac:89:44:db:fc:35:e1:d5:1e:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:33:2B:6F:E6:36:B8:01:75:39:88:F9:1A:88:E0:6A:DC:42:9F:02
X509v3 Authority Key Identifier:
keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/E98217BCA6B711F1BCB809F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.87.128.0/19
41.92.0.0/17
41.205.192.0/19
41.214.128.0/17
102.96.0.0/13
102.216.12.0/22
105.188.0.0/14
196.112.0.0/12
197.153.0.0/16
197.230.0.0/16
197.247.0.0/16
197.253.128.0/17
Signature Algorithm: sha256WithRSAEncryption
17:c4:e2:7e:8d:94:c1:5c:84:41:38:1d:70:b1:6a:b8:6a:25:
3b:01:c1:19:d8:f7:13:00:8f:33:73:93:37:c0:ad:2f:e8:53:
94:52:3b:8f:60:e4:7e:81:9d:81:bc:8d:46:50:32:76:58:9b:
b1:03:3e:de:6b:c3:d5:4e:78:0a:3c:4c:b9:70:8b:9f:9b:c1:
87:72:3d:f7:90:26:73:93:bc:c5:6a:ef:19:91:15:e0:d7:3d:
a1:5a:28:e6:42:f8:19:b6:9e:5a:f6:e9:1d:45:6b:98:98:1b:
7d:06:87:8d:95:05:69:9f:aa:c1:e2:20:34:d6:48:be:c3:b7:
85:48:cc:a3:ba:4f:75:96:0c:29:c6:3e:0a:67:b9:11:e7:d2:
4f:cc:09:a9:a2:84:52:67:d2:7b:eb:cb:20:84:15:76:01:d3:
0d:9d:7a:a2:35:a1:e0:4f:05:69:93:a4:35:be:47:93:9f:30:
11:de:36:63:a3:3f:74:4f:81:b7:03:6c:9a:66:b8:0a:0a:c7:
78:4c:8c:95:b2:c8:8e:77:e5:bf:1f:ba:84:ab:59:4d:42:65:
26:0b:fb:a7:ae:1e:f7:37:db:41:fe:9b:e2:66:78:87:34:5f:
74:99:dd:bc:4b:18:3d:ba:0a:07:bc:87:1f:61:8f:6c:8c:b1:
96:e3:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:40 2026 by rpki-client