Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB41E268A77D11F1AC54F8A3CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB41E268A77D11F1AC54F8A3CE1D38B0.roa
File: FB41E268A77D11F1AC54F8A3CE1D38B0.roa (raw, json)
Hash identifier: P8DAX8YyjicY7zvobL8dIeLbb5qsvh3aVFP5Y4djJrE=
Subject key identifier: 24:89:91:E1:EE:05:13:0B:02:C6:4C:92:24:A4:15:7B:D7:5D:20:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01D2F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB41E268A77D11F1AC54F8A3CE1D38B0.roa
Signing time: Thu 03 Sep 2026 09:58:16 +0000
ROA not before: Thu 03 Sep 2026 09:58:12 +0000
ROA not after: Mon 06 Nov 2028 09:58:12 +0000
asID: 17561
IP address blocks: 45.198.36.0/24 maxlen: 24
45.198.37.0/24 maxlen: 24
45.198.38.0/24 maxlen: 24
45.198.39.0/24 maxlen: 24
45.198.40.0/24 maxlen: 24
45.198.41.0/24 maxlen: 24
45.198.42.0/24 maxlen: 24
45.198.43.0/24 maxlen: 24
45.198.44.0/24 maxlen: 24
45.198.45.0/24 maxlen: 24
45.198.46.0/24 maxlen: 24
45.198.47.0/24 maxlen: 24
45.198.48.0/24 maxlen: 24
45.198.49.0/24 maxlen: 24
45.198.50.0/24 maxlen: 24
45.198.51.0/24 maxlen: 24
45.198.52.0/24 maxlen: 24
45.198.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119540 (0x1d2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 3 09:58:12 2026 GMT
Not After : Nov 6 09:58:12 2028 GMT
Subject: CN=6a9944b7-d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:0d:c9:87:65:4b:3a:f6:f1:64:cc:2f:94:
ee:81:a4:d0:22:56:da:0a:3a:fb:de:f3:39:c2:12:
b1:51:8b:4d:cd:d3:b6:ec:ca:81:b9:db:87:ab:c6:
a9:ce:dd:38:dc:f0:ff:46:eb:5b:06:74:be:e3:b5:
49:3a:af:48:e8:0f:b8:41:43:16:19:1c:49:ec:93:
e0:a8:96:e2:aa:ef:d0:80:57:ff:03:b6:68:8e:9a:
c4:2f:9d:a7:7c:3d:11:6a:6b:6a:00:75:66:c0:fb:
68:ab:68:c8:ce:bf:77:41:4c:b3:29:2e:13:14:8c:
85:55:94:3e:61:98:d6:ce:c4:b1:40:ea:52:e9:d7:
33:36:fd:86:0b:12:d4:dd:42:bb:9f:25:68:2d:fd:
c3:b2:0e:9c:72:94:c9:dd:35:0a:27:8a:a9:31:bc:
24:76:a4:d7:33:02:f9:e6:df:75:00:70:a6:11:dd:
60:18:50:30:00:23:d3:62:f3:8d:65:6b:bd:bd:67:
9e:e7:9e:26:6d:07:57:28:e5:90:dd:fa:84:a7:a9:
d7:f3:4d:ea:b6:d2:ef:0b:d8:5c:96:51:4d:75:b3:
ca:d7:0e:94:a3:92:05:f2:d5:f1:55:30:a8:12:76:
da:22:b6:95:00:f7:a0:34:c5:8e:04:f2:d0:e5:ee:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:89:91:E1:EE:05:13:0B:02:C6:4C:92:24:A4:15:7B:D7:5D:20:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB41E268A77D11F1AC54F8A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.36.0-45.198.53.255
Signature Algorithm: sha256WithRSAEncryption
ae:62:8a:02:19:ea:e3:c3:e5:46:a2:41:50:9a:d2:34:b0:21:
3f:d5:63:37:4f:92:7e:3f:aa:07:9e:b1:38:11:2d:36:37:08:
dc:8b:3e:cf:e2:0a:e5:87:8c:fb:4f:d2:ae:0a:56:89:51:7f:
bd:8d:12:eb:d8:ab:b9:32:0b:5e:c0:74:09:bf:4f:da:13:87:
cb:85:96:63:03:5e:d5:bd:4d:ba:df:46:91:8d:ad:01:17:2f:
ae:59:6c:84:7e:40:2b:b4:d1:8d:34:67:45:02:13:b5:33:94:
fc:7e:05:bd:93:17:8e:71:82:07:0d:9b:d3:8a:aa:b6:5c:4b:
3d:36:7f:c1:70:df:70:38:b9:55:49:cd:c1:0e:4b:76:91:28:
3a:48:2b:2c:dc:30:10:5c:7d:41:d2:d5:b2:c1:9e:5c:f2:49:
eb:8c:b8:22:72:2e:73:a2:78:4e:e3:3c:6b:24:88:00:c5:5d:
af:82:b2:1b:c1:a6:a8:37:ea:cc:1c:97:4f:1d:df:dc:04:be:
d1:7a:d2:6b:e9:f2:fa:75:65:a3:c9:a8:03:c0:3c:62:16:3c:
cc:8c:f5:18:d4:18:7f:f7:0e:10:07:5c:5a:72:18:e6:87:de:
93:f0:2c:67:cd:8b:4b:12:fb:56:6a:37:55:e5:ed:34:85:5d:
a7:f6:4c:76
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdL0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTAzMDk1ODEyWhcNMjgxMTA2MDk1ODEyWjAYMRYw
FAYDVQQDEw02YTk5NDRiNy1kNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5nYNyYdlSzr28WTML5TugaTQIlbaCjr73vM5whKxUYtNzdO27MqBuduH
q8apzt043PD/RutbBnS+47VJOq9I6A+4QUMWGRxJ7JPgqJbiqu/QgFf/A7ZojprE
L52nfD0RamtqAHVmwPtoq2jIzr93QUyzKS4TFIyFVZQ+YZjWzsSxQOpS6dczNv2G
CxLU3UK7nyVoLf3Dsg6ccpTJ3TUKJ4qpMbwkdqTXMwL55t91AHCmEd1gGFAwACPT
YvONZWu9vWee554mbQdXKOWQ3fqEp6nX803qttLvC9hcllFNdbPK1w6Uo5IF8tXx
VTCoEnbaIraVAPegNMWOBPLQ5e5x1wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCSJ
keHuBRMLAsZMkiSkFXvXXSB0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQjQxRTI2OEE3N0QxMUYxQUM1NEY4QTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItxiQDBAEtxjQwDQYJKoZI
hvcNAQELBQADggEBAK5iigIZ6uPD5UaiQVCa0jSwIT/VYzdPkn4/qgeesTgRLTY3
CNyLPs/iCuWHjPtP0q4KVolRf72NEuvYq7kyC17AdAm/T9oTh8uFlmMDXtW9Tbrf
RpGNrQEXL65ZbIR+QCu00Y00Z0UCE7UzlPx+Bb2TF45xggcNm9OKqrZcSz02f8Fw
33A4uVVJzcEOS3aRKDpIKyzcMBBcfUHS1bLBnlzySeuMuCJyLnOieE7jPGskiADF
Xa+CshvBpqg36swcl08d39wEvtF60mvp8vp1ZaPJqAPAPGIWPMyM9RjUGH/3DhAH
XFpyGOaH3pPwLGfNi0sS+1ZqN1Xl7TSFXaf2THY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:46 2026 by rpki-client