Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D1399EAC1811F1A4FFAC03CF1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D1399EAC1811F1A4FFAC03CF1D38B0.roa
File: 21D1399EAC1811F1A4FFAC03CF1D38B0.roa (raw, json)
Hash identifier: bfadm8xbPwLC2kJH0o3021p0eto9sNaVfubs2OOIqgo=
Subject key identifier: B2:96:5A:39:52:2C:71:F0:DB:4F:D2:BD:00:63:E5:D5:B7:6D:8C:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D42A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D1399EAC1811F1A4FFAC03CF1D38B0.roa
Signing time: Wed 09 Sep 2026 06:31:48 +0000
ROA not before: Wed 09 Sep 2026 06:31:43 +0000
ROA not after: Sun 08 Nov 2026 06:31:43 +0000
asID: 2914
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119850 (0x1d42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 9 06:31:43 2026 GMT
Not After : Nov 8 06:31:43 2026 GMT
Subject: CN=6aa0fd53-5bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:04:79:2c:a2:35:16:06:4e:0e:be:d7:b9:
0f:20:4d:ac:18:ce:1c:a5:e6:79:d6:6f:a5:47:e6:
86:53:81:9c:8c:9f:85:ce:a3:da:d6:78:29:02:ea:
52:38:8e:66:86:8f:79:49:60:aa:42:c1:ab:72:cb:
22:7b:13:19:03:8a:83:c5:e0:9d:b5:2e:b6:75:88:
71:6a:09:42:51:5f:9f:d4:b5:a6:95:62:90:dd:d2:
e7:86:99:ce:55:bf:4f:4b:ef:11:84:37:77:a3:bf:
1a:57:bd:7f:00:d5:fa:9d:3e:38:a5:3e:e3:2d:57:
f5:a5:41:e9:e8:c4:8e:43:70:9a:09:4d:4e:9b:5c:
8b:62:30:75:47:80:5c:d0:a5:87:4a:e5:89:ce:5d:
2f:4e:bc:0f:12:bd:9a:d5:14:81:b0:a3:2e:4b:f7:
67:03:a5:d5:87:82:f3:f3:51:68:9e:e1:08:8e:e1:
37:85:bb:30:24:f2:6a:44:c9:e5:c6:0a:c4:5c:e1:
cd:c5:7b:d1:6f:aa:99:2c:1c:3f:25:6a:b4:53:1c:
b8:ad:cc:aa:a0:cf:3e:f2:b2:37:df:4c:b7:9b:cf:
0a:fd:bf:28:ca:6c:22:87:84:e3:6a:8c:70:9e:cc:
21:bb:7f:8e:49:ce:85:e4:93:27:cd:65:18:be:ea:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:96:5A:39:52:2C:71:F0:DB:4F:D2:BD:00:63:E5:D5:B7:6D:8C:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21D1399EAC1811F1A4FFAC03CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:55:9d:e3:63:f8:af:d2:8c:62:ed:6d:b7:f4:00:2b:05:68:
62:cf:91:36:98:09:46:65:a5:b7:1a:89:ca:fc:6f:a3:98:25:
34:2d:38:0b:54:bc:b6:bf:81:93:2a:63:7a:dd:a3:6b:cf:93:
65:61:d5:1c:90:2b:5c:a3:2a:5c:4b:35:e6:c4:e3:38:eb:aa:
08:df:33:4b:58:0d:c0:99:6d:ae:7c:02:67:48:ca:d8:c7:5d:
46:16:38:87:43:4d:f3:11:3d:73:b1:0e:70:9f:fd:84:ea:b1:
cb:9b:9d:77:90:5b:f4:9c:0d:2d:ad:f4:58:86:ad:38:bb:77:
7a:39:47:11:56:64:e5:ce:49:3b:01:6c:a3:9d:dd:a1:33:15:
b5:9e:c7:0d:97:ca:4e:c9:d5:6e:c8:d2:63:13:8d:ad:a2:d5:
e5:c1:d2:ec:ad:46:80:f6:1f:d0:96:a1:d0:c3:8b:eb:3b:89:
24:af:68:c6:e9:45:f9:20:f5:6e:7a:3f:90:48:28:b7:15:7a:
11:fe:4b:7b:aa:a5:64:c6:c1:60:60:28:50:ec:cc:ca:c4:cf:
8a:5c:05:d0:84:22:cb:08:86:16:70:76:2c:b0:2b:17:a3:79:
05:a8:4f:8f:b8:3b:51:d6:96:94:c6:c3:92:e1:e0:1d:cd:b3:
55:78:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:32:01 2026 by rpki-client