$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030383a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030383a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: DNcWD3YeRnAIVEjA1gKvnP/zzDYEsAWsr/+ngFplLxo= Subject key identifier: 32:75:A9:27:CA:68:02:CF:5B:30:B5:E1:19:6B:5B:FB:1B:EC:B4:A3 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 1F3D764593421293DCEEBADFA8AFF9C419B8C26B Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030383a3a2f34382d3438203d3e203234333831.roa Signing time: Thu 18 Jun 2026 21:13:23 +0000 ROA not before: Thu 18 Jun 2026 21:08:23 +0000 ROA not after: Thu 17 Jun 2027 21:13:23 +0000 asID: 24381 IP address blocks: 2401:2060:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3d:76:45:93:42:12:93:dc:ee:ba:df:a8:af:f9:c4:19:b8:c2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 18 21:08:23 2026 GMT Not After : Jun 17 21:13:23 2027 GMT Subject: CN=3275A927CA6802CF5B30B5E1196B5BFB1BECB4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6e:6b:c2:f7:63:b9:38:5e:ec:53:19:72:25: a1:df:ef:59:9b:fc:c4:f3:29:22:20:b6:22:85:4a: 67:98:6b:49:b3:6a:2c:0a:77:cb:bc:1d:df:e0:53: 2e:7f:b7:fd:a6:18:cd:b5:93:8f:19:49:ea:5f:53: 39:21:18:b7:a2:b2:75:cf:91:cc:48:26:ce:eb:01: 34:77:df:e8:da:2c:25:76:25:91:e3:88:b9:99:20: ba:3e:97:ab:bd:39:aa:85:c5:db:a2:98:b7:c1:8e: 94:04:bf:c7:2d:07:24:8b:b9:fc:a3:57:78:a0:61: 01:8b:c5:fc:c3:46:ea:97:4c:7b:0b:0e:d3:f8:9b: 59:db:46:a9:23:86:92:fe:cf:f2:ef:86:14:a5:5a: a5:35:9a:35:ba:ff:bf:26:f8:71:13:3a:79:08:21: f4:ea:0e:a7:b5:c2:1c:00:7c:80:09:fa:aa:50:44: 8e:d2:b0:bd:05:3d:01:b4:77:a8:b9:6a:c2:8d:b7: ca:09:81:2d:21:51:1d:ec:d2:c6:30:c0:e3:f6:04: 1c:e3:b8:60:d8:40:da:8e:e5:20:8f:a2:f4:60:4f: 52:7c:cf:f6:3e:d3:45:cf:31:24:9a:ca:01:f0:46: 62:a7:86:2c:af:8d:7e:01:a9:e6:fe:29:df:3a:c1: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:75:A9:27:CA:68:02:CF:5B:30:B5:E1:19:6B:5B:FB:1B:EC:B4:A3 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030383a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b008::/48 Signature Algorithm: sha256WithRSAEncryption 22:f9:86:40:98:59:57:94:97:8b:c3:4a:84:4f:de:c5:f3:3b: 6a:33:82:c6:fd:82:5b:75:65:31:3f:28:41:6b:c1:90:ef:5f: 2b:87:54:32:b5:c8:29:72:71:81:bb:7d:5e:d6:95:f9:94:63: e0:53:53:4f:44:c2:62:ce:de:94:cb:d3:2c:ac:c2:a6:a4:ec: 82:45:4b:09:ae:51:9c:b8:b0:e8:a2:37:09:31:f4:c6:ce:e0: 48:0a:87:5c:33:42:a8:45:65:37:0f:12:ea:d5:36:87:91:56: d9:91:2c:7d:07:c5:45:18:a8:bb:e8:67:5e:69:db:f7:57:8d: 45:85:4a:57:8c:0e:e7:fc:8d:d3:23:55:b7:dd:f3:4f:73:cc: e8:f3:bd:54:2d:df:71:db:ff:d1:ec:f7:05:88:80:0b:cb:59: 3b:a5:67:1b:01:6b:de:cc:68:ea:9d:0d:cb:17:73:30:da:71: 56:e2:3a:bc:52:41:8c:b2:c1:9c:d3:5a:c4:8b:dd:52:b1:a6: cb:7b:2e:78:f4:2e:6f:e0:2e:16:e5:eb:fe:b1:86:64:e5:ea: c6:e7:16:d2:b1:cd:25:c3:05:e8:c6:98:21:39:64:2d:03:79: f8:c7:ea:0b:ac:62:73:3e:cd:88:45:68:30:11:22:f3:dd:ec: 10:0f:f3:42 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUHz12RZNCEpPc7rrfqK/5xBm4wmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MTgyMTA4MjNaFw0yNzA2MTcyMTEzMjNaMDMxMTAvBgNV BAMTKDMyNzVBOTI3Q0E2ODAyQ0Y1QjMwQjVFMTE5NkI1QkZCMUJFQ0I0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbmvC92O5OF7sUxlyJaHf71mb /MTzKSIgtiKFSmeYa0mzaiwKd8u8Hd/gUy5/t/2mGM21k48ZSepfUzkhGLeisnXP kcxIJs7rATR33+jaLCV2JZHjiLmZILo+l6u9OaqFxduimLfBjpQEv8ctBySLufyj V3igYQGLxfzDRuqXTHsLDtP4m1nbRqkjhpL+z/LvhhSlWqU1mjW6/78m+HETOnkI IfTqDqe1whwAfIAJ+qpQRI7SsL0FPQG0d6i5asKNt8oJgS0hUR3s0sYwwOP2BBzj uGDYQNqO5SCPovRgT1J8z/Y+00XPMSSaygHwRmKnhiyvjX4Bqeb+Kd86wTW3AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUMnWpJ8poAs9bMLXhGWtb+xvstKMwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzgzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAIMA0GCSqGSIb3 DQEBCwUAA4IBAQAi+YZAmFlXlJeLw0qET97F8ztqM4LG/YJbdWUxPyhBa8GQ718r h1QytcgpcnGBu31e1pX5lGPgU1NPRMJizt6Uy9MsrMKmpOyCRUsJrlGcuLDoojcJ MfTGzuBICodcM0KoRWU3DxLq1TaHkVbZkSx9B8VFGKi76Gdeadv3V41FhUpXjA7n /I3TI1W33fNPc8zo871ULd9x2//R7PcFiIALy1k7pWcbAWvezGjqnQ3LF3Mw2nFW 4jq8UkGMssGc01rEi91SsabLey549C5v4C4W5ev+sYZk5erG5xbSsc0lwwXoxpgh OWQtA3n4x+oLrGJzPs2IRWgwESLz3ewQD/NC -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:26 2026 by rpki-client