Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD2252CACF111F18A90EFA8CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD2252CACF111F18A90EFA8CE1D38B0.roa
File: EFD2252CACF111F18A90EFA8CE1D38B0.roa (raw, json)
Hash identifier: XsU6MUGABqquwpK/QHIkd2ICTjSogfDERwtUwiNdcWw=
Subject key identifier: 87:20:13:C2:6A:1B:74:43:08:C9:2E:38:DE:9F:BE:55:4E:2D:4A:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E70C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD2252CACF111F18A90EFA8CE1D38B0.roa
Signing time: Thu 10 Sep 2026 08:30:54 +0000
ROA not before: Thu 10 Sep 2026 08:30:50 +0000
ROA not after: Sat 10 Oct 2026 08:30:50 +0000
asID: 17497
IP address blocks: 154.193.16.0/20 maxlen: 24
154.193.17.0/24 maxlen: 24
154.193.18.0/24 maxlen: 24
154.193.19.0/24 maxlen: 24
154.193.20.0/24 maxlen: 24
154.193.21.0/24 maxlen: 24
154.193.22.0/24 maxlen: 24
154.193.23.0/24 maxlen: 24
154.193.24.0/24 maxlen: 24
154.193.25.0/24 maxlen: 24
154.193.26.0/24 maxlen: 24
154.193.27.0/24 maxlen: 24
154.196.135.0/24 maxlen: 24
154.196.142.0/24 maxlen: 24
154.196.143.0/24 maxlen: 24
154.196.184.0/21 maxlen: 24
154.211.128.0/19 maxlen: 24
154.217.232.0/23 maxlen: 24
154.217.232.0/24 maxlen: 24
154.217.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124684 (0x1e70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 10 08:30:50 2026 GMT
Not After : Oct 10 08:30:50 2026 GMT
Subject: CN=6aa26abe-0b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:18:a8:f6:7c:04:dc:a8:e0:4a:40:87:a0:
77:65:83:81:93:38:c1:17:66:1e:6a:5d:2f:a2:21:
73:bb:c4:f0:89:b3:9d:00:3a:69:06:ad:6a:9f:a6:
12:e8:31:6d:02:f6:38:2a:8d:43:6a:06:57:c7:a5:
72:c3:9b:1d:88:3b:91:3f:43:42:ab:6c:63:ee:9a:
e0:ca:1b:b1:65:8f:25:2a:1b:18:d1:d4:d8:05:f9:
8c:23:f1:80:18:45:81:76:16:fd:93:63:d2:b2:d2:
ec:6c:e9:a6:89:a5:14:87:90:f7:7f:7b:dc:df:56:
28:fb:f3:3d:b4:1e:c4:4b:80:44:b7:3d:b1:7b:6e:
cc:60:bb:72:75:0b:6b:ba:be:da:8c:b2:26:f3:bd:
07:9a:df:25:5c:02:cc:18:75:5c:c3:2d:c6:15:8b:
22:b4:e4:a6:05:bd:1d:3f:25:66:d4:99:34:9a:c2:
59:d1:75:f0:0c:70:13:9f:78:a9:3f:37:e5:b1:00:
de:88:fd:a6:ce:d7:39:61:56:68:ee:aa:5a:b5:cf:
92:7d:66:b6:79:c2:12:46:70:70:7b:c0:b6:6e:e5:
98:4b:17:e4:d4:8e:df:38:1e:80:5e:ca:9d:1c:1c:
bb:ad:92:f4:c9:3f:5a:60:a5:85:1b:a6:7c:ec:cf:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:20:13:C2:6A:1B:74:43:08:C9:2E:38:DE:9F:BE:55:4E:2D:4A:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD2252CACF111F18A90EFA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.16.0/20
154.196.135.0/24
154.196.142.0/23
154.196.184.0/21
154.211.128.0/19
154.217.232.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:cc:76:82:a8:d9:95:96:90:59:75:22:dc:bb:b5:43:42:d7:
31:dd:0c:3c:10:a4:57:12:df:1b:06:a8:4b:e0:9b:7a:8c:6a:
25:0e:c3:0a:ea:37:3d:f5:a4:30:d4:85:3c:3e:09:51:55:fd:
0c:2a:13:32:c3:96:48:d9:74:07:22:89:94:7f:08:41:ae:92:
3a:c9:a6:0e:7c:20:fa:a4:38:a9:19:d4:2f:1a:9e:ac:0d:10:
65:19:ed:ae:d1:6a:ee:19:4e:3a:11:b2:52:2f:6d:94:67:73:
c6:4b:06:06:73:c2:9f:ac:81:a2:0a:0a:00:11:35:3d:4c:05:
ea:04:6b:2c:86:ba:61:14:29:6e:5c:b1:e0:8a:33:29:0c:cb:
22:89:73:8c:41:09:f2:3d:4d:fa:80:b9:61:15:11:23:2c:20:
fb:85:f4:2d:8f:ef:0f:cf:0f:51:49:0a:ce:0a:8c:87:d3:60:
15:79:62:ac:75:07:44:84:14:ee:f5:53:1e:47:83:2b:31:a3:
42:0c:f0:4e:bb:9d:42:3a:d5:8e:0c:f4:60:6f:7f:08:38:b1:
54:bb:bb:27:97:80:98:76:a6:6f:6a:35:bb:af:9d:9c:60:35:
d6:1c:4f:f5:fb:8d:5b:4f:06:a3:5d:2f:ee:a8:ca:87:00:c1:
9b:33:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:58:52 2026 by rpki-client