$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030353a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030353a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: 8tEZaUjgm5DLia5hXb8KEqEOWQHfCpfWvX/mXpbgFWw= Subject key identifier: F2:40:85:C0:E6:BB:EE:06:9E:83:0A:40:12:B8:8B:DB:28:43:37:4F Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 75DECB26C8513E36B5A59C9D8FE636E324774ABC Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030353a3a2f34382d3438203d3e203234333831.roa Signing time: Thu 18 Jun 2026 21:12:26 +0000 ROA not before: Thu 18 Jun 2026 21:07:26 +0000 ROA not after: Thu 17 Jun 2027 21:12:26 +0000 asID: 24381 IP address blocks: 2401:2060:b005::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:de:cb:26:c8:51:3e:36:b5:a5:9c:9d:8f:e6:36:e3:24:77:4a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 18 21:07:26 2026 GMT Not After : Jun 17 21:12:26 2027 GMT Subject: CN=F24085C0E6BBEE069E830A4012B88BDB2843374F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:b7:98:31:b5:11:b8:43:69:b0:b1:8f:71: 1f:8d:3b:d8:32:58:50:fd:2d:a2:54:65:75:14:18: b3:aa:28:72:cd:0a:b2:86:02:e1:b5:b4:f4:69:53: 89:c9:7e:3e:5c:18:ec:4d:5a:f1:f2:0c:e7:71:a3: 5e:86:77:44:75:7e:6b:b4:4e:36:1c:d3:a3:82:2e: 92:88:e5:26:65:9d:e2:7c:78:4c:44:e8:0f:57:33: e1:05:74:a7:e8:2c:53:2e:55:f9:44:00:4b:14:3f: 20:8b:11:17:76:13:d6:09:00:54:1b:cd:8e:ed:05: 46:e7:1d:1f:44:02:48:b8:1c:65:92:87:ad:5d:54: f9:60:a4:24:d5:fb:9a:08:cc:28:c9:4d:80:5c:48: 5e:fa:ce:1b:69:37:8f:84:43:98:be:b8:24:f2:78: bc:5e:59:bd:7a:f2:98:d6:bb:4b:62:0f:6c:16:7b: 46:0e:68:3a:e8:62:81:64:55:a6:07:11:a4:79:7b: cf:b6:25:8c:37:39:81:88:cb:07:5b:04:b2:48:06: 86:ca:ff:f7:17:00:50:bd:f1:0c:47:ac:9e:78:bc: 08:19:47:00:34:67:bc:1c:c9:81:e0:63:04:a6:f7: 06:6d:f2:94:21:c7:7c:a9:87:0e:07:56:22:32:86: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:40:85:C0:E6:BB:EE:06:9E:83:0A:40:12:B8:8B:DB:28:43:37:4F X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030353a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b005::/48 Signature Algorithm: sha256WithRSAEncryption a2:57:96:78:73:7f:ad:7b:23:93:dc:d2:a2:11:9e:ab:c4:7f: fc:42:2e:f9:0b:64:3c:de:df:c0:c2:06:cb:ee:77:0a:d3:87: b6:10:4d:6e:ee:31:47:24:a4:98:44:58:44:f4:32:e6:9d:a6: 47:fd:2e:7b:68:85:fb:b9:6d:4e:f7:65:ef:72:8c:45:af:0f: 43:87:6e:dd:56:c8:66:4b:e4:d4:20:61:a3:10:b5:29:8d:ab: 1f:c5:79:ac:87:01:64:3e:67:45:bf:6d:bb:0b:d5:fb:0e:54: 5a:79:a5:7a:be:25:cc:63:58:3d:13:f4:70:28:d2:7d:68:15: 53:0a:48:29:67:62:35:7d:94:d0:81:2b:f7:e2:75:c0:aa:7a: 1c:e2:f4:49:c3:54:91:da:54:da:91:26:a1:89:ad:14:e4:f0: fb:59:dd:df:0d:de:bf:20:ee:7d:e6:b8:b8:34:4f:bd:69:5b: 80:ec:91:7f:b7:4c:15:9c:bd:be:af:cd:58:59:25:2b:4d:60: c0:20:bc:f4:8c:9e:16:95:1e:db:6b:f5:4d:3b:7a:0b:bd:18: a4:32:bb:14:76:98:db:a8:bb:b7:05:22:a1:e0:65:96:78:f9: 7c:02:e8:97:4a:9b:4a:e9:f7:30:de:c5:9a:14:06:c8:08:20: 35:28:15:95 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUdd7LJshRPja1pZydj+Y24yR3SrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MTgyMTA3MjZaFw0yNzA2MTcyMTEyMjZaMDMxMTAvBgNV BAMTKEYyNDA4NUMwRTZCQkVFMDY5RTgzMEE0MDEyQjg4QkRCMjg0MzM3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2LeYMbURuENpsLGPcR+NO9gy WFD9LaJUZXUUGLOqKHLNCrKGAuG1tPRpU4nJfj5cGOxNWvHyDOdxo16Gd0R1fmu0 TjYc06OCLpKI5SZlneJ8eExE6A9XM+EFdKfoLFMuVflEAEsUPyCLERd2E9YJAFQb zY7tBUbnHR9EAki4HGWSh61dVPlgpCTV+5oIzCjJTYBcSF76zhtpN4+EQ5i+uCTy eLxeWb168pjWu0tiD2wWe0YOaDroYoFkVaYHEaR5e8+2JYw3OYGIywdbBLJIBobK //cXAFC98QxHrJ54vAgZRwA0Z7wcyYHgYwSm9wZt8pQhx3yphw4HViIyhhvbAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU8kCFwOa77gaegwpAEriL2yhDN08wHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzUzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAFMA0GCSqGSIb3 DQEBCwUAA4IBAQCiV5Z4c3+teyOT3NKiEZ6rxH/8Qi75C2Q83t/AwgbL7ncK04e2 EE1u7jFHJKSYRFhE9DLmnaZH/S57aIX7uW1O92XvcoxFrw9Dh27dVshmS+TUIGGj ELUpjasfxXmshwFkPmdFv227C9X7DlRaeaV6viXMY1g9E/RwKNJ9aBVTCkgpZ2I1 fZTQgSv34nXAqnoc4vRJw1SR2lTakSahia0U5PD7Wd3fDd6/IO595ri4NE+9aVuA 7JF/t0wVnL2+r81YWSUrTWDAILz0jJ4WlR7ba/VNO3oLvRikMrsUdpjbqLu3BSKh 4GWWePl8AuiXSptK6fcw3sWaFAbICCA1KBWV -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:24 2026 by rpki-client