$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030363a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030363a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: m1Gcp+R8nr3xEv+up7SFJUQQ3EyfHTUVAPFIPU8h9bw= Subject key identifier: 33:64:7D:E1:9B:D9:E8:73:52:5B:AF:9A:65:2D:2F:F8:1F:AE:50:A5 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 1270546DB2CBA4CA1DBC303B4155540A9C5B60D3 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030363a3a2f34382d3438203d3e203234333831.roa Signing time: Thu 18 Jun 2026 21:12:50 +0000 ROA not before: Thu 18 Jun 2026 21:07:50 +0000 ROA not after: Thu 17 Jun 2027 21:12:50 +0000 asID: 24381 IP address blocks: 2401:2060:b006::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:70:54:6d:b2:cb:a4:ca:1d:bc:30:3b:41:55:54:0a:9c:5b:60:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 18 21:07:50 2026 GMT Not After : Jun 17 21:12:50 2027 GMT Subject: CN=33647DE19BD9E873525BAF9A652D2FF81FAE50A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:2a:a5:8c:25:9d:d7:2f:e6:da:e5:5e:4e: 9e:59:a6:5b:f1:c8:7d:74:b2:7c:56:b9:38:d3:e8: 05:79:f7:97:9c:d6:42:49:d5:b3:8c:c1:91:63:00: d3:2e:aa:7e:11:9f:ea:68:a0:fe:3c:d4:2d:7b:4d: 33:07:07:28:37:72:7a:dc:c0:28:90:41:1e:e4:f7: 0c:6f:36:9c:e1:9d:5f:ff:10:a6:7b:df:d7:2a:c9: 51:19:63:90:49:3a:f8:8c:b7:61:28:75:b1:d4:6a: 26:5b:b5:5b:7e:8f:6f:a9:65:48:59:d7:a5:04:f2: 6c:68:bc:0a:f6:5d:31:7e:8b:1d:4a:e7:2a:0d:00: 3d:95:4d:f5:02:1e:29:b2:c5:54:d2:92:db:46:c5: 89:f8:e8:c6:f7:f2:88:75:e0:76:85:19:7f:c9:5f: c1:59:c6:91:a3:e4:af:ac:06:ed:d0:a6:a8:65:7e: 7b:53:74:4f:99:e2:ea:79:35:62:c2:17:f4:fa:b7: c4:e0:c2:95:1c:ee:89:5c:52:53:28:d9:22:db:07: 44:7f:cc:80:ca:97:cb:97:ef:c7:b2:12:b8:36:60: da:70:ae:8f:95:4a:8d:b5:b0:13:3b:84:01:22:77: e4:98:27:5f:68:f6:93:77:9f:70:f3:8b:12:0d:13: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:64:7D:E1:9B:D9:E8:73:52:5B:AF:9A:65:2D:2F:F8:1F:AE:50:A5 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030363a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b006::/48 Signature Algorithm: sha256WithRSAEncryption 1a:4a:a0:f5:6a:fb:ca:70:6e:f4:a4:eb:a9:95:34:65:a8:84: f3:4d:53:1c:37:09:e5:c6:bb:3b:78:31:df:f1:6a:37:9f:96: d5:2b:a1:d2:23:31:18:b5:ea:d2:55:2b:3d:96:3b:de:69:5a: ee:8e:81:b9:a3:4f:f9:08:a3:db:8d:ad:47:b2:8b:95:40:f0: 5b:23:8a:3f:43:c8:49:85:f6:6d:0b:c1:41:67:75:b0:e0:3d: 81:4f:f0:cf:a7:a5:63:b6:3a:c8:c0:3c:34:5e:c1:f8:35:9c: b4:73:5d:7f:92:08:55:8b:71:7e:d7:be:99:a2:b2:7f:1f:72: d9:ef:47:16:0b:1c:1c:48:6d:6c:ab:78:19:ae:15:95:a0:af: 45:93:a7:5c:b6:4c:d6:23:58:14:8b:8b:87:12:7e:8f:fb:aa: a2:1a:ce:09:a0:2a:27:e8:8a:0d:0b:3e:72:a7:44:8e:65:e6: 06:15:62:3f:42:ec:9c:18:2c:40:3a:60:2f:03:ed:d1:b9:93: ce:63:c2:e1:17:c9:fb:68:c1:15:3c:05:f9:38:b2:bc:84:03: 12:01:2e:dc:ad:b3:26:46:81:95:64:b5:63:a3:8f:2d:4a:99: c9:06:05:05:17:fb:95:45:fa:39:29:4c:14:72:1a:d6:08:df: 1f:10:19:4c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUEnBUbbLLpModvDA7QVVUCpxbYNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MTgyMTA3NTBaFw0yNzA2MTcyMTEyNTBaMDMxMTAvBgNV BAMTKDMzNjQ3REUxOUJEOUU4NzM1MjVCQUY5QTY1MkQyRkY4MUZBRTUwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFayqljCWd1y/m2uVeTp5Zplvx yH10snxWuTjT6AV595ec1kJJ1bOMwZFjANMuqn4Rn+pooP481C17TTMHByg3cnrc wCiQQR7k9wxvNpzhnV//EKZ739cqyVEZY5BJOviMt2EodbHUaiZbtVt+j2+pZUhZ 16UE8mxovAr2XTF+ix1K5yoNAD2VTfUCHimyxVTSkttGxYn46Mb38oh14HaFGX/J X8FZxpGj5K+sBu3QpqhlfntTdE+Z4up5NWLCF/T6t8TgwpUc7olcUlMo2SLbB0R/ zIDKl8uX78eyErg2YNpwro+VSo21sBM7hAEid+SYJ19o9pN3n3DzixINE4R5AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUM2R94ZvZ6HNSW6+aZS0v+B+uUKUwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzYzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAGMA0GCSqGSIb3 DQEBCwUAA4IBAQAaSqD1avvKcG70pOuplTRlqITzTVMcNwnlxrs7eDHf8Wo3n5bV K6HSIzEYterSVSs9ljveaVrujoG5o0/5CKPbja1HsouVQPBbI4o/Q8hJhfZtC8FB Z3Ww4D2BT/DPp6VjtjrIwDw0XsH4NZy0c11/kghVi3F+176ZorJ/H3LZ70cWCxwc SG1sq3gZrhWVoK9Fk6dctkzWI1gUi4uHEn6P+6qiGs4JoCon6IoNCz5yp0SOZeYG FWI/QuycGCxAOmAvA+3RuZPOY8LhF8n7aMEVPAX5OLK8hAMSAS7crbMmRoGVZLVj o48tSpnJBgUFF/uVRfo5KUwUchrWCN8fEBlM -----END CERTIFICATE-----Generated at Wed Jul 15 13:30:49 2026 by rpki-client