Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3EBFE42A67211F1AB3823C4CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3EBFE42A67211F1AB3823C4CE1D38B0.roa
File: F3EBFE42A67211F1AB3823C4CE1D38B0.roa (raw, json)
Hash identifier: lfVHb6g8pOhwyYbuXfem8bVgceZxi0vra5SMrMWs6zk=
Subject key identifier: 98:99:87:29:A3:30:0A:47:FE:DC:C4:03:5D:8A:4F:DC:77:DF:04:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E468
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3EBFE42A67211F1AB3823C4CE1D38B0.roa
Signing time: Wed 02 Sep 2026 02:06:48 +0000
ROA not before: Wed 02 Sep 2026 02:06:44 +0000
ROA not after: Mon 07 May 2029 02:06:44 +0000
asID: 17561
IP address blocks: 154.208.0.0/24 maxlen: 24
154.208.115.0/24 maxlen: 24
154.208.116.0/24 maxlen: 24
154.208.117.0/24 maxlen: 24
154.208.118.0/24 maxlen: 24
154.208.119.0/24 maxlen: 24
154.208.120.0/24 maxlen: 24
154.208.121.0/24 maxlen: 24
154.208.122.0/24 maxlen: 24
154.208.123.0/24 maxlen: 24
154.208.124.0/24 maxlen: 24
154.208.125.0/24 maxlen: 24
154.208.126.0/24 maxlen: 24
154.208.127.0/24 maxlen: 24
154.208.128.0/24 maxlen: 24
154.208.129.0/24 maxlen: 24
154.208.132.0/24 maxlen: 24
154.208.133.0/24 maxlen: 24
154.208.134.0/24 maxlen: 24
154.208.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124008 (0x1e468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 02:06:44 2026 GMT
Not After : May 7 02:06:44 2029 GMT
Subject: CN=6a9784b8-946c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:24:78:4e:26:93:e8:4d:dd:41:b1:3f:4e:
24:a4:59:f6:89:1c:b4:19:37:5b:46:c8:54:ec:01:
fa:f3:04:5f:53:e1:a9:62:42:b2:8a:a7:10:90:01:
b7:5c:78:ef:86:c5:f0:59:23:bc:b2:d2:02:d3:48:
40:ce:6a:ba:ba:32:94:98:20:9f:d9:30:c1:e4:a0:
3d:c8:81:57:30:e9:f9:68:a9:58:f9:7b:33:8f:b0:
14:a3:72:8f:73:5b:6b:b2:ef:3f:15:f1:d6:0c:47:
81:80:bd:9e:51:b5:4a:ef:9e:a5:f0:6e:96:b2:5a:
84:f4:67:b0:9e:15:9d:90:cb:29:d1:72:5c:92:3f:
cd:c7:5d:0d:d5:27:8e:24:77:ad:77:7a:11:83:b6:
b1:31:01:25:36:0d:5b:a9:78:e6:8e:a3:51:2b:3e:
e3:33:f6:e7:b3:05:13:a5:43:05:95:2e:fd:88:65:
a3:0e:6f:fa:b2:b2:56:3b:58:2a:69:71:84:27:79:
7f:1e:be:05:c2:77:1c:3f:a5:a0:39:cf:05:ef:55:
31:ee:1f:f7:81:3c:3a:ac:7d:c1:58:5d:7e:2d:ca:
4a:7b:80:41:30:66:b2:4b:f5:00:e5:60:48:e0:50:
a0:08:f3:63:98:eb:63:9e:a8:54:dc:f7:a1:99:b0:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:99:87:29:A3:30:0A:47:FE:DC:C4:03:5D:8A:4F:DC:77:DF:04:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3EBFE42A67211F1AB3823C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.0.0/24
154.208.115.0-154.208.129.255
154.208.132.0/22
Signature Algorithm: sha256WithRSAEncryption
65:88:d4:ad:d9:e2:53:d8:7c:96:c1:72:4a:9c:42:c2:f8:b7:
88:74:a1:dc:24:9f:c1:3c:6a:8b:f6:ae:34:29:4a:c5:6d:fe:
88:ae:1f:6f:27:92:d3:c6:23:83:82:47:e7:3e:68:e4:a9:5a:
e9:6c:3c:48:39:98:4c:50:3f:f0:da:bf:a4:7e:d6:1f:f4:6c:
1b:11:aa:7a:19:aa:1a:1e:1c:fe:2c:91:de:ba:cb:c3:0f:a7:
42:4a:00:6f:cc:e7:2a:cb:72:49:02:ad:be:70:78:9e:22:c5:
2a:9d:84:9a:7a:91:d2:ec:f0:ef:26:7b:17:0c:b1:4c:54:31:
97:17:d4:b1:b1:cc:5c:5a:39:1f:ac:a7:f1:ee:95:35:9c:e7:
f4:cd:55:7a:bd:27:7a:0a:1b:39:38:91:c4:4b:ae:92:44:a4:
26:e4:f7:82:cf:03:bc:6a:3c:e3:e3:8a:0e:f8:7f:28:fc:55:
cb:3f:39:f8:c9:e7:3e:51:9f:95:90:17:53:98:ae:e4:4a:e6:
cd:7c:b9:54:9b:80:4e:3f:c1:d0:c5:ce:0c:7a:7d:29:4f:cb:
67:82:a9:e5:b2:4c:a6:1e:07:7c:3b:01:04:66:1b:33:fd:2b:
32:76:ce:18:2c:05:26:69:f9:cd:99:60:b9:a2:44:e2:40:59:
05:44:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:01 2026 by rpki-client