Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912F56FCAD2311F1994552CFCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912F56FCAD2311F1994552CFCE1D38B0.roa
File: 912F56FCAD2311F1994552CFCE1D38B0.roa (raw, json)
Hash identifier: +fU46EGYa6UzFInkLfkztGIbZmh0Q9yng2gb+C5ZtIM=
Subject key identifier: E1:B5:76:0D:28:0B:3A:BB:0F:86:20:4E:05:77:E9:09:F7:34:BD:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E74B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912F56FCAD2311F1994552CFCE1D38B0.roa
Signing time: Thu 10 Sep 2026 14:26:10 +0000
ROA not before: Thu 10 Sep 2026 14:26:06 +0000
ROA not after: Sun 04 Oct 2026 14:26:06 +0000
asID: 17497
IP address blocks: 154.193.16.0/24 maxlen: 24
154.193.31.0/24 maxlen: 24
154.193.162.0/24 maxlen: 24
154.211.168.0/21 maxlen: 24
154.211.168.0/24 maxlen: 24
154.211.169.0/24 maxlen: 24
154.211.170.0/24 maxlen: 24
154.211.171.0/24 maxlen: 24
154.211.172.0/24 maxlen: 24
154.211.173.0/24 maxlen: 24
154.211.174.0/24 maxlen: 24
154.211.175.0/24 maxlen: 24
154.211.176.0/21 maxlen: 24
154.211.176.0/24 maxlen: 24
154.211.177.0/24 maxlen: 24
154.211.178.0/24 maxlen: 24
154.211.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124747 (0x1e74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 10 14:26:06 2026 GMT
Not After : Oct 4 14:26:06 2026 GMT
Subject: CN=6aa2be02-342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:a9:a7:7a:b5:0e:bf:9b:83:a6:8b:b7:88:
d6:d3:fd:9a:d2:4a:3a:ce:6c:09:72:75:d4:cd:9c:
4c:ab:6e:a0:e8:2d:e4:12:ae:f7:13:43:f8:cb:63:
71:e1:b6:56:97:fb:49:1a:c1:87:a9:ea:dc:d0:e7:
e2:c4:ca:2a:6d:69:83:07:95:a5:d0:e9:6b:3f:05:
a9:54:19:0c:91:e0:0c:2f:ff:ac:ee:13:e4:07:46:
49:a4:34:9b:0c:93:67:d1:7f:4f:ea:a2:c3:f9:40:
ae:d0:ef:d4:0f:92:5d:6b:ae:ff:9d:26:15:fe:28:
52:1f:da:bc:90:29:00:ed:83:5e:8a:e8:71:d5:9c:
90:f0:b9:b8:56:b9:af:a8:4f:db:e0:79:05:9a:2d:
66:cf:2d:5d:67:48:01:73:bf:e7:3e:e7:2e:cf:de:
13:bc:99:e7:7e:8e:66:0a:22:51:86:a2:76:c6:1e:
32:8b:8e:2e:2e:fd:0a:9c:db:38:fa:0f:8c:c5:3c:
c8:92:b0:38:76:24:6a:06:38:86:fb:81:11:29:7c:
d9:84:bb:8f:f7:83:b2:44:c1:18:1a:f4:44:85:f9:
29:13:69:73:e8:fb:08:29:ee:7a:94:32:45:b6:de:
0f:19:bd:ff:1f:d3:9b:a8:d9:78:3d:87:51:5a:54:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:76:0D:28:0B:3A:BB:0F:86:20:4E:05:77:E9:09:F7:34:BD:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912F56FCAD2311F1994552CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.16.0/24
154.193.31.0/24
154.193.162.0/24
154.211.168.0-154.211.183.255
Signature Algorithm: sha256WithRSAEncryption
8b:a9:b6:69:d3:a5:6d:cb:ad:39:f3:6e:10:43:0b:78:24:14:
80:08:ff:d5:cb:cd:77:ac:d1:84:9c:d4:fd:18:9b:23:f7:c4:
fc:b5:60:d2:37:4f:e7:c3:53:78:9f:f6:d9:76:05:51:6c:c3:
c1:a5:9f:cc:bd:b2:01:50:bd:05:b6:a3:ef:4a:01:be:96:d3:
da:74:12:d2:06:ee:4b:00:e5:d8:e5:ce:5e:7d:6f:bf:b5:05:
89:6c:78:a8:55:95:a8:fd:5c:91:f5:0c:96:0f:43:62:36:b2:
df:19:b6:75:1d:50:d1:48:a8:ce:01:8b:81:1f:14:18:76:4d:
4e:ca:80:4c:73:a5:7b:6e:65:4b:35:3d:ae:6c:d7:0f:be:a0:
7b:48:0a:de:97:30:54:b1:08:8b:14:e0:5e:e1:75:d7:90:19:
5f:e9:07:e1:6e:77:29:a4:3f:d9:4f:98:b1:aa:ec:7f:55:1b:
0e:10:98:3b:2f:6b:4a:80:0c:27:3b:cc:f5:d5:3b:48:cc:42:
76:52:aa:0e:ce:ad:6d:c7:f9:fd:95:1a:c7:e9:73:aa:c0:00:
e4:d4:8a:e0:29:c4:ba:07:7f:65:00:f1:17:9e:5f:66:eb:1e:
83:f4:3c:8d:14:58:5a:2d:e4:c7:03:98:4e:6b:90:6a:12:bf:
b0:f9:6a:c9
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAedLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTEwMTQyNjA2WhcNMjYxMDA0MTQyNjA2WjAYMRYw
FAYDVQQDEw02YWEyYmUwMi0zNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn5Spp3q1Dr+bg6aLt4jW0/2a0ko6zmwJcnXUzZxMq26g6C3kEq73E0P4
y2Nx4bZWl/tJGsGHqerc0OfixMoqbWmDB5Wl0OlrPwWpVBkMkeAML/+s7hPkB0ZJ
pDSbDJNn0X9P6qLD+UCu0O/UD5Jda67/nSYV/ihSH9q8kCkA7YNeiuhx1ZyQ8Lm4
VrmvqE/b4HkFmi1mzy1dZ0gBc7/nPucuz94TvJnnfo5mCiJRhqJ2xh4yi44uLv0K
nNs4+g+MxTzIkrA4diRqBjiG+4ERKXzZhLuP94OyRMEYGvREhfkpE2lz6PsIKe56
lDJFtt4PGb3/H9ObqNl4PYdRWlR7+QIDAQABo4ICvzCCArswHQYDVR0OBBYEFOG1
dg0oCzq7D4YgTgV36Qn3NL1/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTJGNTZGQ0FEMjMxMUYxOTk0NTUyQ0ZDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsEQAwQAmsEfAwQAmsGi
MAwDBAOa06gDBAOa07AwDQYJKoZIhvcNAQELBQADggEBAIuptmnTpW3LrTnzbhBD
C3gkFIAI/9XLzXes0YSc1P0YmyP3xPy1YNI3T+fDU3if9tl2BVFsw8Gln8y9sgFQ
vQW2o+9KAb6W09p0EtIG7ksA5djlzl59b7+1BYlseKhVlaj9XJH1DJYPQ2I2st8Z
tnUdUNFIqM4Bi4EfFBh2TU7KgExzpXtuZUs1Pa5s1w++oHtICt6XMFSxCIsU4F7h
ddeQGV/pB+FudymkP9lPmLGq7H9VGw4QmDsva0qADCc7zPXVO0jMQnZSqg7OrW3H
+f2VGsfpc6rAAOTUiuApxLoHf2UA8ReeX2brHoP0PI0UWFot5McDmE5rkGoSv7D5
ask=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:29:40 2026 by rpki-client