Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E0FAACB36311F18497B2A5CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E0FAACB36311F18497B2A5CE1D38B0.roa
File:                     27E0FAACB36311F18497B2A5CE1D38B0.roa (raw, json)
Hash identifier:          t3ICkF5D30PN80cZYH2jncthYgVq7z8xOgIu706tosc=
Subject key identifier:   E0:E6:0D:71:D7:83:67:EF:41:73:CD:70:B9:95:CB:25:21:C7:B8:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E0FAACB36311F18497B2A5CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 13:16:28 +0000
ROA not before:           Fri 18 Sep 2026 13:16:24 +0000
ROA not after:            Sat 17 Jul 2027 13:16:24 +0000
asID:                     328888
IP address blocks:        45.200.133.0/24 maxlen: 24
                          156.235.88.0/24 maxlen: 24
                          156.235.122.0/24 maxlen: 24
                          156.235.123.0/24 maxlen: 24
                          156.238.116.0/24 maxlen: 24
                          156.238.117.0/24 maxlen: 24
                          156.239.23.0/24 maxlen: 24
                          156.239.54.0/24 maxlen: 24
                          156.239.55.0/24 maxlen: 24
                          156.239.60.0/24 maxlen: 24
                          156.239.134.0/24 maxlen: 24
                          156.239.156.0/24 maxlen: 24
                          156.239.157.0/24 maxlen: 24
                          156.245.0.0/24 maxlen: 24
                          156.245.1.0/24 maxlen: 24
                          156.245.3.0/24 maxlen: 24
                          156.245.4.0/24 maxlen: 24
                          156.245.5.0/24 maxlen: 24
                          156.245.6.0/24 maxlen: 24
                          156.245.12.0/24 maxlen: 24
                          156.245.13.0/24 maxlen: 24
                          156.245.14.0/24 maxlen: 24
                          156.245.16.0/24 maxlen: 24
                          156.245.18.0/24 maxlen: 24
                          156.245.19.0/24 maxlen: 24
                          156.245.28.0/24 maxlen: 24
                          156.245.29.0/24 maxlen: 24
                          156.245.31.0/24 maxlen: 24
                          156.245.138.0/24 maxlen: 24
                          156.245.141.0/24 maxlen: 24
                          156.245.142.0/24 maxlen: 24
                          156.245.143.0/24 maxlen: 24
                          156.245.161.0/24 maxlen: 24
                          156.245.162.0/24 maxlen: 24
                          156.245.169.0/24 maxlen: 24
                          156.245.170.0/24 maxlen: 24
                          156.245.171.0/24 maxlen: 24
                          156.245.195.0/24 maxlen: 24
                          156.245.208.0/24 maxlen: 24
                          156.245.209.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 28 Sep 2026 09:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120541 (0x1d6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 18 13:16:24 2026 GMT
            Not After : Jul 17 13:16:24 2027 GMT
        Subject: CN=6aad39ac-53b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:ca:a3:0b:cf:16:14:c3:2c:37:a9:42:2d:
                    89:31:a2:11:a5:d8:90:ea:3e:23:03:2c:08:ec:c8:
                    bf:7a:ff:47:01:24:7a:99:78:e1:9f:ea:1b:6a:11:
                    9c:c6:04:fc:77:b5:2d:75:5a:be:fb:0f:b0:d2:c9:
                    e9:bf:b4:34:84:31:0d:04:53:d3:ff:5a:92:75:bb:
                    2a:f1:ba:8f:e8:42:cf:70:90:73:7b:e1:df:96:dc:
                    56:70:17:ff:1d:b3:96:a4:2e:27:90:0e:c0:6c:22:
                    58:1b:d4:6d:45:e7:58:ff:66:5c:67:96:2d:30:c9:
                    bc:68:0e:6b:03:e0:ff:d4:77:7a:c2:cc:8c:d5:7c:
                    6c:40:f6:54:7f:d8:1a:e5:cd:6b:99:95:b3:fa:59:
                    9a:e1:36:c3:85:76:66:c7:a5:fd:03:12:61:30:ef:
                    05:b9:c3:dc:85:72:e0:dd:a6:1b:a9:d7:3f:0b:b1:
                    75:eb:f4:69:e7:ef:4a:9a:ba:89:8d:1b:a3:da:cf:
                    c1:6b:29:c0:07:27:a0:f4:ee:e8:33:0d:ac:3c:a0:
                    79:76:5f:97:7d:6e:a8:82:27:b8:3e:2d:4f:56:bb:
                    17:42:b8:25:3e:ec:dc:1f:59:11:3c:c7:ef:45:5f:
                    c5:f0:ee:7c:92:6d:9e:ac:71:d9:03:ac:80:4e:90:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E6:0D:71:D7:83:67:EF:41:73:CD:70:B9:95:CB:25:21:C7:B8:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E0FAACB36311F18497B2A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.133.0/24
                  156.235.88.0/24
                  156.235.122.0/23
                  156.238.116.0/23
                  156.239.23.0/24
                  156.239.54.0/23
                  156.239.60.0/24
                  156.239.134.0/24
                  156.239.156.0/23
                  156.245.0.0/23
                  156.245.3.0-156.245.6.255
                  156.245.12.0-156.245.14.255
                  156.245.16.0/24
                  156.245.18.0/23
                  156.245.28.0/23
                  156.245.31.0/24
                  156.245.138.0/24
                  156.245.141.0-156.245.143.255
                  156.245.161.0-156.245.162.255
                  156.245.169.0-156.245.171.255
                  156.245.195.0/24
                  156.245.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:89:17:64:2f:f1:c0:93:d5:22:2a:76:a9:fe:43:29:43:37:
         d4:d4:b4:1e:51:98:8d:ed:ad:73:1d:69:b5:89:2d:69:5c:ca:
         9a:56:78:d3:03:94:8d:b2:cb:f4:72:76:0f:af:ad:a1:15:2b:
         84:38:93:94:38:66:dc:fe:af:0b:22:19:38:97:99:6c:5f:d8:
         0a:79:df:2b:70:07:1d:a7:6e:0a:f6:6e:ed:4c:0c:cd:5c:42:
         28:c0:dc:86:80:4b:4b:b3:57:76:e2:2d:2b:b7:ff:34:ee:41:
         6b:44:c8:70:fb:6f:ae:9f:81:c5:0e:36:29:34:15:31:67:df:
         21:8c:01:48:4d:f9:b3:f1:c1:86:e4:64:d7:b6:45:78:07:f0:
         4b:7b:f2:33:7f:c5:4b:34:b6:49:bc:52:8e:39:e3:2b:17:b2:
         19:c6:c4:4a:21:00:f5:8f:78:c1:2b:7e:18:37:ec:a7:db:a5:
         72:24:b3:1a:ed:fa:a3:4e:53:49:d3:00:73:16:16:81:5d:83:
         b9:2e:ac:59:87:c8:91:48:21:e1:1a:31:b9:1c:4e:85:20:45:
         ac:b4:92:e4:76:39:f1:1c:bf:e9:97:81:8f:19:40:b3:66:41:
         9a:5c:dc:67:fe:e7:23:b0:0b:4f:9e:9d:08:91:e3:c3:f3:fd:
         85:52:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:32:33 2026 by rpki-client