$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030343a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030343a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: GboVvCOD/RShhtQXg0s4XsSzOaVs197wtus4yNWAlI4= Subject key identifier: C1:54:6D:01:DF:8B:21:7A:A0:06:6A:00:35:4D:F9:0E:FB:33:FD:77 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 78AC23769474A920AC5834D58B1D5CBE0610245B Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030343a3a2f34382d3438203d3e203234333831.roa Signing time: Thu 18 Jun 2026 21:12:01 +0000 ROA not before: Thu 18 Jun 2026 21:07:01 +0000 ROA not after: Thu 17 Jun 2027 21:12:01 +0000 asID: 24381 IP address blocks: 2401:2060:b004::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ac:23:76:94:74:a9:20:ac:58:34:d5:8b:1d:5c:be:06:10:24:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 18 21:07:01 2026 GMT Not After : Jun 17 21:12:01 2027 GMT Subject: CN=C1546D01DF8B217AA0066A00354DF90EFB33FD77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:9d:ce:cf:18:f1:f5:37:a0:59:b1:20:21: 78:5f:3c:29:25:85:29:b5:31:45:6f:bf:c1:0b:ac: 55:90:3a:63:f0:58:b9:55:fa:08:73:d0:8c:13:1d: 61:dc:9f:00:fa:ff:05:aa:ad:0b:e0:47:e4:dd:c8: e0:82:15:89:56:d1:86:c1:dd:9d:b1:36:f6:a1:21: f2:53:a3:f7:d8:e5:69:b0:3a:a4:e8:a1:67:79:bc: 72:ea:3c:b5:53:07:35:3e:35:0c:70:a6:36:50:61: 34:ae:22:89:a0:09:d9:d5:51:08:fb:97:b2:7e:1d: ec:25:62:f3:7e:fa:70:72:1b:f3:e0:87:2d:ca:6e: af:a8:2f:6c:7a:79:99:39:bf:09:37:40:ad:a4:b9: 94:fd:6a:05:d3:43:f7:37:3c:56:ae:2f:e2:76:ef: 31:11:a9:ad:6e:44:fe:98:0d:44:cc:dd:2c:41:35: 61:e4:ef:a7:ee:e5:31:63:d2:1b:11:cc:3d:fe:d7: 33:b4:6b:0c:06:b4:40:10:53:61:65:8f:59:19:54: 65:15:42:3d:3e:f4:2a:87:6f:c9:86:a2:bb:25:eb: 32:06:70:2c:a6:7b:d0:98:d7:7c:15:b3:a7:b3:12: 43:90:58:29:cf:60:bd:c5:80:03:3f:28:2c:4b:e0: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:6D:01:DF:8B:21:7A:A0:06:6A:00:35:4D:F9:0E:FB:33:FD:77 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030343a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b004::/48 Signature Algorithm: sha256WithRSAEncryption 41:4e:3e:ca:63:13:8d:bb:01:11:cc:0e:28:1a:a2:67:e8:65: cd:10:b2:5e:ee:42:51:97:a3:9f:ed:ce:d2:54:09:b8:bd:ca: 23:e9:d3:75:cc:97:cf:f4:ef:99:74:a0:43:1a:d0:ea:4a:d7: 59:21:2f:fb:df:2a:7d:cf:26:2f:72:83:53:71:89:1d:45:3c: c5:dd:d4:13:3b:85:06:4d:93:9b:43:02:e3:77:f1:c1:79:01: 78:49:47:ba:f9:79:e2:b8:8a:22:b3:80:c1:24:90:61:f0:77: 48:63:e7:b8:a5:a5:69:88:5b:5c:a1:7b:4d:03:b7:a0:6b:62: e2:4f:68:01:79:24:94:c2:f3:35:06:f7:89:e1:c1:3a:4d:89: 82:fd:c4:a4:ad:9e:e8:28:8b:be:cb:85:3e:61:f0:ab:ab:5b: 00:0e:eb:93:1c:15:2e:30:ef:0d:91:e6:10:5c:97:6a:3e:49: 7f:55:6c:29:bc:fc:07:d1:90:b9:ca:83:74:d9:0e:34:b4:21: 3b:42:93:16:05:1b:53:e0:4f:86:5b:58:e6:19:4e:cf:c2:50: 8e:ca:ab:68:69:9f:65:cd:70:ef:85:52:35:17:63:33:30:11: ec:58:dd:6b:3d:8d:5c:2b:28:90:fb:10:c4:8d:d8:52:bd:e6: d3:40:ca:8a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUeKwjdpR0qSCsWDTVix1cvgYQJFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MTgyMTA3MDFaFw0yNzA2MTcyMTEyMDFaMDMxMTAvBgNV BAMTKEMxNTQ2RDAxREY4QjIxN0FBMDA2NkEwMDM1NERGOTBFRkIzM0ZENzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAp3Ozxjx9TegWbEgIXhfPCkl hSm1MUVvv8ELrFWQOmPwWLlV+ghz0IwTHWHcnwD6/wWqrQvgR+TdyOCCFYlW0YbB 3Z2xNvahIfJTo/fY5WmwOqTooWd5vHLqPLVTBzU+NQxwpjZQYTSuIomgCdnVUQj7 l7J+HewlYvN++nByG/Pghy3Kbq+oL2x6eZk5vwk3QK2kuZT9agXTQ/c3PFauL+J2 7zERqa1uRP6YDUTM3SxBNWHk76fu5TFj0hsRzD3+1zO0awwGtEAQU2Flj1kZVGUV Qj0+9CqHb8mGorsl6zIGcCyme9CY13wVs6ezEkOQWCnPYL3FgAM/KCxL4Nn9AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUwVRtAd+LIXqgBmoANU35Dvsz/XcwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzQzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAEMA0GCSqGSIb3 DQEBCwUAA4IBAQBBTj7KYxONuwERzA4oGqJn6GXNELJe7kJRl6Of7c7SVAm4vcoj 6dN1zJfP9O+ZdKBDGtDqStdZIS/73yp9zyYvcoNTcYkdRTzF3dQTO4UGTZObQwLj d/HBeQF4SUe6+XniuIois4DBJJBh8HdIY+e4paVpiFtcoXtNA7ega2LiT2gBeSSU wvM1BveJ4cE6TYmC/cSkrZ7oKIu+y4U+YfCrq1sADuuTHBUuMO8NkeYQXJdqPkl/ VWwpvPwH0ZC5yoN02Q40tCE7QpMWBRtT4E+GW1jmGU7PwlCOyqtoaZ9lzXDvhVI1 F2MzMBHsWN1rPY1cKyiQ+xDEjdhSvebTQMqK -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:24 2026 by rpki-client