Route Origin Authorization

$ rpki-client -vvvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/3130332e3234382e35302e302f32342d3234203d3e203234333831.roa
File:                     3130332e3234382e35302e302f32342d3234203d3e203234333831.roa (raw, json)
Hash identifier:          FF+urME/9fsDClM6Eb/kpNDShOotNVIwO3/pSw6yoTM=
Subject key identifier:   99:07:14:16:84:D8:BC:46:79:DC:99:36:17:83:E1:CC:0E:CC:69:68
Certificate issuer:       /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial:       5D139B7039CD2C1377A717771FC8C63583FB9160
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Authority info access:    rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access:      rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/3130332e3234382e35302e302f32342d3234203d3e203234333831.roa
Signing time:             Tue 04 Aug 2026 15:13:13 +0000
ROA not before:           Tue 04 Aug 2026 15:08:13 +0000
ROA not after:            Tue 03 Aug 2027 15:13:13 +0000
asID:                     24381
IP address blocks:        103.248.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
                          rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Aug 2026 11:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:13:9b:70:39:cd:2c:13:77:a7:17:77:1f:c8:c6:35:83:fb:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
        Validity
            Not Before: Aug  4 15:08:13 2026 GMT
            Not After : Aug  3 15:13:13 2027 GMT
        Subject: CN=9907141684D8BC4679DC99361783E1CC0ECC6968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:5a:b9:78:8b:c7:e0:9d:eb:3e:be:8e:db:
                    8a:b3:90:4c:fd:dd:57:95:fa:e3:f7:4c:ab:8f:53:
                    d5:8b:a0:ac:1c:3e:c5:bc:b8:be:00:4d:ee:ee:55:
                    f3:7c:79:aa:3c:62:84:75:5e:c0:af:a0:17:01:79:
                    26:a0:43:19:ff:24:73:6b:4e:a2:c6:8c:f8:8e:e6:
                    a0:3e:49:c6:c5:cd:53:7c:67:93:22:c6:bb:22:25:
                    bf:3d:13:0d:59:30:dc:f4:0b:4c:0a:54:99:96:36:
                    f1:21:d1:1f:95:50:35:17:25:92:c5:7b:05:32:e9:
                    2c:e0:37:e6:49:1e:9b:2d:0e:e5:27:cc:c2:65:d7:
                    a6:e8:49:9f:c9:50:a9:3c:40:13:36:75:b5:bc:c2:
                    64:94:8a:c7:48:dc:b3:9f:25:fc:5b:6a:80:89:cd:
                    30:9f:e1:33:df:b0:dc:eb:95:88:0a:7f:0b:af:a0:
                    89:1b:89:04:78:aa:32:3b:54:4d:5e:87:5f:33:a6:
                    d3:cf:20:5d:03:37:ba:32:7b:ec:ac:d4:7e:58:b1:
                    7a:cf:69:d7:ce:a4:28:25:be:f6:37:fd:61:6f:cf:
                    c8:fb:db:bc:f8:e4:e0:06:6c:c2:5b:2e:96:30:28:
                    a0:0d:1d:3f:3f:a6:42:28:18:f4:66:66:dc:35:26:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:14:16:84:D8:BC:46:79:DC:99:36:17:83:E1:CC:0E:CC:69:68
            X509v3 Authority Key Identifier:
                keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/3130332e3234382e35302e302f32342d3234203d3e203234333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:49:e0:59:90:2d:95:f1:14:5e:ef:4a:50:03:a1:d1:4f:
         58:cf:6f:3d:d0:8b:9e:b8:45:dc:32:1b:54:82:95:88:f8:8b:
         a2:91:b9:a1:03:22:20:67:15:5b:9c:21:d4:21:4f:14:87:f1:
         69:7f:1a:eb:75:d0:90:83:15:55:af:fb:5d:f8:18:e8:57:75:
         92:5e:4e:15:3f:1d:0d:05:88:0e:c4:1e:92:9f:0a:9e:1e:da:
         af:21:c9:87:62:b3:ca:2c:6c:61:f7:06:06:02:cd:b7:26:10:
         13:1f:dd:08:4a:12:bd:20:2a:25:20:ce:f6:e2:6e:75:3c:b8:
         bc:20:4f:e0:6c:2d:a4:15:da:36:81:3f:06:d6:47:77:76:83:
         30:32:ea:50:39:96:7d:a3:1b:f4:94:2e:c0:92:1c:61:cd:0a:
         f5:5d:b2:8b:65:21:58:4c:e6:73:a4:ab:89:da:f8:d6:0d:c5:
         84:21:6d:da:be:33:54:f7:52:5d:2d:9d:69:4a:98:aa:24:c9:
         8e:63:40:b9:85:60:eb:68:13:82:97:c9:99:c8:9f:2e:54:66:
         d5:2a:65:b2:c8:8e:0b:49:c9:f1:65:26:98:0d:64:84:81:bc:
         ed:cf:fd:28:ee:83:4b:70:b3:4b:63:5b:03:54:ca:eb:6e:0a:
         ff:55:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:36:08 2026 by rpki-client