Error: rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEB022AA77111F189BBF6DCCE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEB022AA77111F189BBF6DCCE1D38B0.roa
File:                     FEEB022AA77111F189BBF6DCCE1D38B0.roa (raw, json)
Hash identifier:          ieBhU9SQrI4XoK1EU7RuREo8Lj2fF1ztTj5GbAXRu58=
Subject key identifier:   C6:A5:E3:D8:3F:A6:FE:F0:49:B0:E7:CA:A2:C1:4D:03:36:92:F3:1E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEB022AA77111F189BBF6DCCE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:32:28 +0000
ROA not before:           Thu 03 Sep 2026 08:32:24 +0000
ROA not after:            Sat 10 Oct 2026 08:32:24 +0000
asID:                     63139
IP address blocks:        45.197.71.0/24 maxlen: 24
                          45.197.72.0/24 maxlen: 24
                          45.197.73.0/24 maxlen: 24
                          45.197.74.0/24 maxlen: 24
                          45.197.75.0/24 maxlen: 24
                          45.197.76.0/24 maxlen: 24
                          45.197.77.0/24 maxlen: 24
                          45.197.78.0/24 maxlen: 24
                          45.197.79.0/24 maxlen: 24
                          45.197.80.0/24 maxlen: 24
                          45.197.81.0/24 maxlen: 24
                          45.197.82.0/24 maxlen: 24
                          45.197.83.0/24 maxlen: 24
                          45.197.84.0/24 maxlen: 24
                          45.197.85.0/24 maxlen: 24
                          45.197.86.0/24 maxlen: 24
                          45.197.87.0/24 maxlen: 24
                          45.197.88.0/24 maxlen: 24
                          45.197.89.0/24 maxlen: 24
                          45.197.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119504 (0x1d2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 08:32:24 2026 GMT
            Not After : Oct 10 08:32:24 2026 GMT
        Subject: CN=6a99309c-b01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:48:df:44:53:e4:75:bd:28:8e:47:d5:57:
                    53:23:39:a4:f2:b9:a6:02:96:5d:b4:27:be:eb:94:
                    36:5e:fa:6c:f8:85:fc:64:2d:b4:a6:db:e1:e5:ae:
                    de:38:c8:95:05:ab:1c:2a:25:cc:bd:82:64:63:71:
                    70:90:7e:62:3e:05:4c:36:7f:5a:8b:fe:ff:e3:0f:
                    e9:4f:78:ba:f9:d8:db:ef:18:4c:2c:2a:f2:ec:20:
                    0e:c1:c3:71:33:7b:d5:22:1a:72:74:d1:39:5e:73:
                    3f:2a:dd:b0:24:95:58:16:2b:7e:b7:95:b3:48:8d:
                    29:9e:16:87:1b:16:2c:d0:9e:46:be:95:ca:2f:2c:
                    db:8a:90:85:ee:cb:8b:3e:4d:40:6a:3b:64:8a:d9:
                    3a:bc:c3:9a:9d:d7:9f:bb:c5:eb:c9:8d:23:85:a8:
                    93:7a:51:a6:ea:af:e9:9e:58:b1:ce:a4:d4:f6:7d:
                    a1:05:33:8a:49:33:25:36:58:53:44:d9:9a:74:9f:
                    40:b5:87:58:47:d9:d6:73:24:c4:13:fe:c7:6e:a6:
                    a3:22:30:5f:2f:74:26:35:8f:ac:89:5e:b8:a7:9c:
                    89:dc:ba:fa:77:9f:24:ec:81:aa:e1:00:88:db:2e:
                    9d:4c:d4:8f:66:b1:8f:d5:96:ff:68:9e:8c:be:8e:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A5:E3:D8:3F:A6:FE:F0:49:B0:E7:CA:A2:C1:4D:03:36:92:F3:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEEB022AA77111F189BBF6DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.71.0-45.197.90.255

    Signature Algorithm: sha256WithRSAEncryption
         12:67:70:8b:18:c1:12:3f:e8:b6:45:50:22:63:5e:a6:f1:fe:
         12:c8:bc:7b:62:99:87:ab:4f:f8:db:e7:ee:f3:2f:9a:d4:06:
         d5:2d:de:b7:1e:d9:22:f7:ac:5d:84:44:2e:45:6d:ad:e2:2a:
         c1:1c:dd:45:3e:8b:da:d7:e8:4a:4d:14:4a:79:c2:a5:ea:94:
         f1:1d:a0:a8:19:63:39:30:e9:f2:12:87:02:bc:9b:a5:c1:6b:
         df:93:c6:e4:d7:b6:2b:0d:b9:c2:7c:2d:cc:cd:a9:1d:41:e4:
         a8:04:e9:0f:f3:fa:ef:5b:e0:6a:57:51:83:b5:7c:bd:fe:89:
         3c:bc:65:d8:f9:2b:3a:1a:0f:1e:21:36:4f:94:c7:af:23:9c:
         c3:71:51:5e:57:d3:cc:c6:b8:25:5f:fd:b0:b1:2d:48:6a:32:
         ee:13:14:e6:09:2d:3c:9b:99:f7:16:9c:b9:ec:91:56:97:26:
         d1:99:fb:a4:87:6e:46:1a:45:85:f5:26:2d:0f:97:3a:c4:ff:
         55:1c:ff:69:90:d6:2c:f3:ac:a6:12:f7:2c:ab:28:48:ed:45:
         24:8e:23:dc:72:22:89:0a:90:f9:25:21:8c:90:71:18:70:70:
         85:e7:f2:6d:dc:1a:e2:a0:dd:87:c5:5e:b9:1e:2a:76:ff:b5:
         83:17:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:51:25 2026 by rpki-client