Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa
File:                     08747F04AC1A11F1A4E9740DCF1D38B0.roa (raw, json)
Hash identifier:          HmcuU29stwrD4x8qb8+PLw4iANMNZJHAHv+A7xHZw30=
Subject key identifier:   15:DC:5C:6F:04:91:48:36:EA:2F:15:83:44:B2:1D:2B:39:18:2F:0B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D430
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa
Signing time:             Wed 09 Sep 2026 06:45:24 +0000
ROA not before:           Wed 09 Sep 2026 06:45:20 +0000
ROA not after:            Sun 08 Nov 2026 06:45:20 +0000
asID:                     2914
IP address blocks:        156.236.96.0/24 maxlen: 24
                          156.236.97.0/24 maxlen: 24
                          156.236.98.0/24 maxlen: 24
                          156.236.99.0/24 maxlen: 24
                          156.236.108.0/24 maxlen: 24
                          156.236.109.0/24 maxlen: 24
                          156.236.110.0/24 maxlen: 24
                          156.236.111.0/24 maxlen: 24
                          156.236.112.0/24 maxlen: 24
                          156.236.113.0/24 maxlen: 24
                          156.236.114.0/24 maxlen: 24
                          156.236.115.0/24 maxlen: 24
                          156.236.116.0/24 maxlen: 24
                          156.236.117.0/24 maxlen: 24
                          156.236.118.0/24 maxlen: 24
                          156.236.119.0/24 maxlen: 24
                          156.236.124.0/24 maxlen: 24
                          156.236.125.0/24 maxlen: 24
                          156.236.126.0/24 maxlen: 24
                          156.236.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119856 (0x1d430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 06:45:20 2026 GMT
            Not After : Nov  8 06:45:20 2026 GMT
        Subject: CN=6aa10084-9bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:67:56:9b:71:60:70:76:b2:fa:8a:0b:a8:
                    21:22:81:41:cb:e5:37:0f:a9:6a:bd:5a:9c:ec:dd:
                    da:29:2f:c6:63:55:92:8e:e0:44:4b:94:f6:92:0a:
                    5d:66:db:de:3c:c5:44:f2:48:0c:7f:78:cd:fa:fc:
                    6e:a5:72:ef:0b:7d:6b:f8:f6:c8:0c:ee:58:e8:a2:
                    c0:8c:a7:03:97:8b:ec:65:37:1b:e5:81:15:32:e9:
                    70:8b:a4:6d:43:06:92:47:d3:69:7d:e5:50:52:72:
                    e1:a0:9e:91:a8:1f:2e:d7:75:7c:9b:3e:66:ed:4f:
                    b5:af:52:67:5b:20:83:d3:13:9d:b9:4f:dc:99:98:
                    da:e8:af:7f:ef:f7:2f:4a:b7:9c:2d:6f:f7:03:f2:
                    e9:a0:16:ad:55:83:12:05:4b:51:fe:94:4e:b2:64:
                    c8:10:ce:39:70:1a:50:6f:ed:d5:a9:8f:f1:a2:bb:
                    91:f0:39:cf:20:8a:81:7b:6e:f3:6b:72:4b:6f:eb:
                    09:68:60:5f:75:87:b6:e1:50:f9:8c:62:e2:5d:e1:
                    ba:0a:46:07:1f:63:63:db:fd:d9:a0:8d:c2:23:70:
                    09:24:62:79:6e:c8:a9:ee:d1:38:ef:cf:bf:30:2c:
                    ac:62:4c:e8:b4:99:04:62:80:f2:2f:fa:54:c9:6f:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DC:5C:6F:04:91:48:36:EA:2F:15:83:44:B2:1D:2B:39:18:2F:0B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08747F04AC1A11F1A4E9740DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.96.0/22
                  156.236.108.0-156.236.119.255
                  156.236.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:dd:fa:6f:78:42:5c:b6:03:0f:eb:5d:75:56:c2:78:89:f5:
         4f:2f:ba:71:98:82:6f:0c:d1:e1:46:42:65:4f:92:21:1d:f4:
         b7:d1:be:8b:89:0c:a2:de:b4:bc:65:71:f3:f6:c5:dc:93:76:
         49:d2:7a:ba:f8:94:a5:45:ce:f3:88:e0:9b:53:1f:d5:ac:29:
         8a:cf:03:88:28:c9:08:1e:fc:fe:a4:f1:95:da:2d:e0:d7:4d:
         3f:9d:b4:ac:a9:69:7f:d9:ea:63:bb:de:0b:ff:1f:4c:5b:5c:
         0d:3a:02:8a:4d:8f:c4:ac:b9:f6:e8:89:f9:fe:28:21:0a:3e:
         7a:17:ff:64:13:2e:0f:52:bc:a6:c3:80:77:76:c1:61:05:5d:
         d4:07:db:e4:72:bb:7e:e4:df:5e:de:be:08:6f:62:83:bc:c4:
         d9:49:0c:06:7e:ad:3c:91:18:17:8d:f9:de:8c:cc:a9:aa:88:
         fa:33:b1:c1:11:ac:b4:5e:54:e5:c8:57:b1:ed:4d:02:b2:58:
         d6:63:4f:3e:98:0c:02:8b:14:a9:df:c6:e1:53:ba:5e:93:95:
         32:85:17:9f:70:8c:ed:f4:cb:08:d7:6d:d1:e8:50:9c:1f:a8:
         88:05:0a:a6:b4:9d:ec:78:27:34:34:4f:01:ab:6f:df:b7:20:
         ba:f7:cd:c9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAdQwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA5MDY0NTIwWhcNMjYxMTA4MDY0NTIwWjAYMRYw
FAYDVQQDEw02YWExMDA4NC05YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzpBnVptxYHB2svqKC6ghIoFBy+U3D6lqvVqc7N3aKS/GY1WSjuBES5T2
kgpdZtvePMVE8kgMf3jN+vxupXLvC31r+PbIDO5Y6KLAjKcDl4vsZTcb5YEVMulw
i6RtQwaSR9NpfeVQUnLhoJ6RqB8u13V8mz5m7U+1r1JnWyCD0xOduU/cmZja6K9/
7/cvSrecLW/3A/LpoBatVYMSBUtR/pROsmTIEM45cBpQb+3VqY/xoruR8DnPIIqB
e27za3JLb+sJaGBfdYe24VD5jGLiXeG6CkYHH2Nj2/3ZoI3CI3AJJGJ5bsip7tE4
78+/MCysYkzotJkEYoDyL/pUyW88PwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBXc
XG8EkUg26i8Vg0SyHSs5GC8LMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wODc0N0YwNEFDMUExMUYxQTRFOTc0MERDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAI/d+m94Qly2Aw/rXXVWwniJ9U8vunGY
gm8M0eFGQmVPkiEd9LfRvouJDKLetLxlcfP2xdyTdknSerr4lKVFzvOI4JtTH9Ws
KYrPA4goyQge/P6k8ZXaLeDXTT+dtKypaX/Z6mO73gv/H0xbXA06AopNj8Ssufbo
ifn+KCEKPnoX/2QTLg9SvKbDgHd2wWEFXdQH2+Ryu37k317evghvYoO8xNlJDAZ+
rTyRGBeN+d6MzKmqiPozscERrLReVOXIV7HtTQKyWNZjTz6YDAKLFKnfxuFTul6T
lTKFF59wjO30ywjXbdHoUJwfqIgFCqa0nex4JzQ0TwGrb9+3ILr3zck=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:20:20 2026 by rpki-client