Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8702E272A83A11F1AC1CB619CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8702E272A83A11F1AC1CB619CF1D38B0.roa
File: 8702E272A83A11F1AC1CB619CF1D38B0.roa (raw, json)
Hash identifier: CHtdEtXHw85VJ8FbSUlCpdJZXvkNJXWryeB3fNKgdKo=
Subject key identifier: 53:44:92:84:FD:C3:50:69:1C:3C:6F:43:CB:EB:CC:18:9A:55:5C:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E55D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8702E272A83A11F1AC1CB619CF1D38B0.roa
Signing time: Fri 04 Sep 2026 08:27:55 +0000
ROA not before: Fri 04 Sep 2026 08:27:51 +0000
ROA not after: Tue 06 Oct 2026 08:27:51 +0000
asID: 151347
IP address blocks: 154.84.194.0/24 maxlen: 24
154.84.211.0/24 maxlen: 24
154.84.212.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.234.0/24 maxlen: 24
154.84.236.0/24 maxlen: 24
154.84.238.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
154.84.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124253 (0x1e55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 08:27:51 2026 GMT
Not After : Oct 6 08:27:51 2026 GMT
Subject: CN=6a9a810b-8f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:e4:02:1c:ff:56:4e:53:b9:51:4f:9a:cc:
40:3b:27:d2:a5:14:1e:a5:02:cf:ce:f8:98:9c:ce:
87:9a:6c:62:f4:a9:c1:b0:70:3e:e0:34:c7:fb:50:
2b:00:77:d1:8c:40:66:29:8d:f3:23:9e:bb:a5:09:
5d:ed:b0:dc:50:9c:f2:97:1c:67:37:84:c6:c2:32:
27:e9:6c:15:01:b5:14:30:ec:a8:41:46:e6:e5:af:
85:bf:e6:fa:98:ad:6a:c2:31:5f:95:25:bd:c9:46:
7c:38:5a:99:69:cd:0a:87:66:ec:08:a0:9e:50:5d:
6b:04:98:1f:c4:22:30:cb:2f:60:fd:8f:00:0e:db:
18:fa:f5:3a:5d:a4:de:c8:3a:5e:a6:a1:f2:50:c0:
f5:db:32:58:6e:b2:2a:d0:0f:8c:55:73:c5:f5:f6:
60:21:dc:a2:e7:37:f4:2a:56:20:6b:a5:25:f4:17:
c1:ee:ce:a4:7a:42:d3:77:d4:d3:06:00:37:e0:ff:
15:c5:cf:30:a6:6d:f6:39:04:32:e5:94:1e:95:d0:
2d:a2:46:47:4c:bc:78:4a:ba:02:ec:91:40:3a:79:
db:c6:bb:68:17:2a:bf:ca:8e:c5:0e:43:6f:9f:7f:
32:fd:69:92:3a:5c:ea:34:ff:ed:08:bb:64:a3:24:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:92:84:FD:C3:50:69:1C:3C:6F:43:CB:EB:CC:18:9A:55:5C:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8702E272A83A11F1AC1CB619CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.194.0/24
154.84.211.0-154.84.222.255
154.84.224.0/23
154.84.234.0/24
154.84.236.0/24
154.84.238.0/24
154.84.240.0/23
Signature Algorithm: sha256WithRSAEncryption
55:49:63:17:a4:d5:d5:cd:da:04:7c:c2:68:79:9c:8e:7c:01:
6f:b8:a5:ff:ef:50:02:2f:0f:1f:20:92:bc:bf:17:95:6c:b8:
ee:85:cb:43:17:51:e0:c0:1a:20:89:b3:96:9c:85:f7:57:95:
b1:ce:76:6d:9b:0d:c2:1a:d6:94:57:7a:ab:97:00:2a:22:27:
9b:cd:e5:11:7f:c6:08:08:80:3a:84:92:7b:15:b3:1d:f1:81:
8e:0e:96:c7:6f:66:2f:12:06:e2:2f:64:1a:ce:0d:04:c1:57:
ff:82:3b:ba:d0:44:14:38:50:cc:14:84:66:7e:d6:7a:e0:d6:
bf:48:35:2c:26:38:be:65:27:22:46:55:fb:09:51:49:de:75:
e5:cd:0a:89:82:00:98:57:ac:bf:c6:82:2d:cf:18:3c:dc:cf:
06:e1:8a:82:bb:52:01:fb:b8:c1:2d:0c:6b:25:b1:76:b5:a5:
30:35:a8:dc:a1:cc:c8:bf:95:8b:09:d8:49:b5:4f:1c:e0:83:
dc:02:35:c0:13:ee:5d:00:22:97:6f:20:c8:ae:7c:ff:73:7f:
70:ba:18:3d:c2:a3:1a:46:47:79:f1:58:63:62:8e:ea:60:05:
6b:3a:55:ce:ed:62:37:5e:0b:10:a2:f2:a8:e9:45:e4:b7:42:
4e:c9:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:00:49 2026 by rpki-client