
Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa
File: 08747F04AC1A11F1A4E9740DCF1D38B0.roa (raw, json)
Hash identifier: HmcuU29stwrD4x8qb8+PLw4iANMNZJHAHv+A7xHZw30=
Subject key identifier: 15:DC:5C:6F:04:91:48:36:EA:2F:15:83:44:B2:1D:2B:39:18:2F:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D430
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa
Signing time: Wed 09 Sep 2026 06:45:24 +0000
ROA not before: Wed 09 Sep 2026 06:45:20 +0000
ROA not after: Sun 08 Nov 2026 06:45:20 +0000
asID: 2914
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119856 (0x1d430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 06:45:20 2026 GMT
Not After : Nov 8 06:45:20 2026 GMT
Subject: CN=6aa10084-9bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:67:56:9b:71:60:70:76:b2:fa:8a:0b:a8:
21:22:81:41:cb:e5:37:0f:a9:6a:bd:5a:9c:ec:dd:
da:29:2f:c6:63:55:92:8e:e0:44:4b:94:f6:92:0a:
5d:66:db:de:3c:c5:44:f2:48:0c:7f:78:cd:fa:fc:
6e:a5:72:ef:0b:7d:6b:f8:f6:c8:0c:ee:58:e8:a2:
c0:8c:a7:03:97:8b:ec:65:37:1b:e5:81:15:32:e9:
70:8b:a4:6d:43:06:92:47:d3:69:7d:e5:50:52:72:
e1:a0:9e:91:a8:1f:2e:d7:75:7c:9b:3e:66:ed:4f:
b5:af:52:67:5b:20:83:d3:13:9d:b9:4f:dc:99:98:
da:e8:af:7f:ef:f7:2f:4a:b7:9c:2d:6f:f7:03:f2:
e9:a0:16:ad:55:83:12:05:4b:51:fe:94:4e:b2:64:
c8:10:ce:39:70:1a:50:6f:ed:d5:a9:8f:f1:a2:bb:
91:f0:39:cf:20:8a:81:7b:6e:f3:6b:72:4b:6f:eb:
09:68:60:5f:75:87:b6:e1:50:f9:8c:62:e2:5d:e1:
ba:0a:46:07:1f:63:63:db:fd:d9:a0:8d:c2:23:70:
09:24:62:79:6e:c8:a9:ee:d1:38:ef:cf:bf:30:2c:
ac:62:4c:e8:b4:99:04:62:80:f2:2f:fa:54:c9:6f:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:5C:6F:04:91:48:36:EA:2F:15:83:44:B2:1D:2B:39:18:2F:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:dd:fa:6f:78:42:5c:b6:03:0f:eb:5d:75:56:c2:78:89:f5:
4f:2f:ba:71:98:82:6f:0c:d1:e1:46:42:65:4f:92:21:1d:f4:
b7:d1:be:8b:89:0c:a2:de:b4:bc:65:71:f3:f6:c5:dc:93:76:
49:d2:7a:ba:f8:94:a5:45:ce:f3:88:e0:9b:53:1f:d5:ac:29:
8a:cf:03:88:28:c9:08:1e:fc:fe:a4:f1:95:da:2d:e0:d7:4d:
3f:9d:b4:ac:a9:69:7f:d9:ea:63:bb:de:0b:ff:1f:4c:5b:5c:
0d:3a:02:8a:4d:8f:c4:ac:b9:f6:e8:89:f9:fe:28:21:0a:3e:
7a:17:ff:64:13:2e:0f:52:bc:a6:c3:80:77:76:c1:61:05:5d:
d4:07:db:e4:72:bb:7e:e4:df:5e:de:be:08:6f:62:83:bc:c4:
d9:49:0c:06:7e:ad:3c:91:18:17:8d:f9:de:8c:cc:a9:aa:88:
fa:33:b1:c1:11:ac:b4:5e:54:e5:c8:57:b1:ed:4d:02:b2:58:
d6:63:4f:3e:98:0c:02:8b:14:a9:df:c6:e1:53:ba:5e:93:95:
32:85:17:9f:70:8c:ed:f4:cb:08:d7:6d:d1:e8:50:9c:1f:a8:
88:05:0a:a6:b4:9d:ec:78:27:34:34:4f:01:ab:6f:df:b7:20:
ba:f7:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:20:20 2026 by rpki-client