Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E4709D6AD2211F1BDECE7CACE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E4709D6AD2211F1BDECE7CACE1D38B0.roa
File: 8E4709D6AD2211F1BDECE7CACE1D38B0.roa (raw, json)
Hash identifier: aJe9YBpgguSMBr5Du23qyZP0J2x+A5OB3VMnPbEtE7Y=
Subject key identifier: 7A:3F:DA:8C:5B:E4:1C:72:2A:92:F2:46:84:9D:C4:4F:38:2F:A9:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E749
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E4709D6AD2211F1BDECE7CACE1D38B0.roa
Signing time: Thu 10 Sep 2026 14:18:56 +0000
ROA not before: Thu 10 Sep 2026 14:18:51 +0000
ROA not after: Sat 10 Oct 2026 14:18:51 +0000
asID: 17497
IP address blocks: 154.193.28.0/24 maxlen: 24
154.193.29.0/24 maxlen: 24
154.193.30.0/24 maxlen: 24
154.196.140.0/23 maxlen: 24
154.196.140.0/24 maxlen: 24
154.196.141.0/24 maxlen: 24
154.196.142.0/24 maxlen: 24
154.196.143.0/24 maxlen: 24
154.196.184.0/21 maxlen: 24
154.211.128.0/19 maxlen: 24
154.222.128.0/22 maxlen: 24
154.222.128.0/24 maxlen: 24
154.222.129.0/24 maxlen: 24
154.222.130.0/24 maxlen: 24
154.222.131.0/24 maxlen: 24
154.222.140.0/22 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.141.0/24 maxlen: 24
154.222.142.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124745 (0x1e749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 10 14:18:51 2026 GMT
Not After : Oct 10 14:18:51 2026 GMT
Subject: CN=6aa2bc4f-75f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:1f:df:73:40:ce:cb:7d:a9:33:56:9f:35:
f5:6a:18:3a:71:6d:ac:60:48:9b:8e:40:6d:76:a1:
73:67:44:d8:6f:a9:07:70:a7:99:15:77:a7:c7:9a:
66:a3:cf:49:03:34:a8:6a:e0:0b:1f:86:b9:b0:97:
15:dc:2d:e1:4d:6b:7c:5b:0d:94:58:8e:18:36:4c:
6d:8b:1a:53:9d:69:d6:5e:46:2d:d8:ed:85:10:48:
ef:22:09:63:29:01:e9:c5:85:f8:51:34:9b:a4:f2:
db:a0:fc:8d:69:50:a3:e8:6a:b5:fc:23:f6:fd:f8:
34:14:8e:97:44:82:84:b0:e7:3d:c4:17:58:db:f8:
b1:74:5e:10:d7:10:51:52:9f:de:ba:6c:8f:19:40:
ed:81:5b:c7:2f:58:69:c8:82:dd:2d:db:84:8b:df:
79:7f:0c:15:09:59:88:8f:57:4b:84:4e:af:cb:1a:
20:e6:85:ea:f2:ad:c7:79:b2:48:53:a2:1e:6e:07:
82:bd:75:d3:4d:ba:8a:11:4a:e9:52:55:20:56:d4:
67:b3:6e:e5:45:58:96:bd:2e:8e:10:22:f8:49:59:
94:b4:98:49:5d:e9:c6:3d:7d:54:ac:c8:06:ac:52:
f3:b9:fe:99:e6:80:7a:5f:55:f7:cc:0e:d0:9a:2c:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:DA:8C:5B:E4:1C:72:2A:92:F2:46:84:9D:C4:4F:38:2F:A9:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E4709D6AD2211F1BDECE7CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.28.0-154.193.30.255
154.196.140.0/22
154.196.184.0/21
154.211.128.0/19
154.222.128.0/22
154.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:65:a0:4a:61:0a:f6:31:b3:e8:d7:0e:08:89:75:7a:bd:9b:
16:74:d5:db:5f:7a:52:07:43:fa:10:23:3c:74:34:3a:aa:d0:
22:1d:70:93:ed:60:61:ab:d5:a0:14:cc:08:c2:57:4b:da:8a:
01:87:bf:7c:20:d5:2c:f5:4e:17:7d:22:b6:94:68:1c:22:9a:
c1:fb:85:ad:64:99:70:1e:53:fd:50:5d:7c:07:fb:58:6e:d5:
00:b9:3f:4d:c7:7e:7f:6a:3f:d5:4e:56:8e:6e:ea:81:2f:86:
4a:87:0d:b4:6e:ae:43:d5:cc:50:43:19:30:9c:ea:f9:76:0a:
30:18:a9:64:a5:aa:3d:e7:2f:d2:7d:02:6e:eb:14:c2:61:9b:
d1:43:ee:d8:9d:6f:94:61:88:78:47:43:a6:ef:e4:36:0f:05:
ae:b8:56:4e:66:5b:1c:77:02:fb:14:27:e3:12:00:05:63:ed:
e3:b7:c5:be:67:53:29:1d:ae:7d:8c:ee:71:9a:fd:e9:67:aa:
c3:7c:d5:65:11:51:92:45:6e:04:5a:30:2a:d1:95:0c:b2:c5:
3b:2a:e2:e4:a2:43:ad:64:35:9b:d3:48:c2:b8:48:67:76:a5:
82:db:1a:67:4a:17:91:a0:25:27:da:3f:3e:95:e0:67:46:cb:
5f:9b:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:27:28 2026 by rpki-client