$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030393a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030393a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: MkEEfQSigD9NK2Sm6ny4H0NQ/op3I69xSxKL4mlAKks= Subject key identifier: F2:C5:53:13:BC:74:6D:07:0F:2D:D8:79:C1:B4:CF:7F:69:66:3E:38 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 3E86B0E57E3DC7AAA605B62A56E2893BC7A9855B Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030393a3a2f34382d3438203d3e203234333831.roa Signing time: Mon 22 Jun 2026 23:07:30 +0000 ROA not before: Mon 22 Jun 2026 23:02:30 +0000 ROA not after: Mon 21 Jun 2027 23:07:30 +0000 asID: 24381 IP address blocks: 2401:2060:b009::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:86:b0:e5:7e:3d:c7:aa:a6:05:b6:2a:56:e2:89:3b:c7:a9:85:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 22 23:02:30 2026 GMT Not After : Jun 21 23:07:30 2027 GMT Subject: CN=F2C55313BC746D070F2DD879C1B4CF7F69663E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:39:0f:fb:f5:7e:12:03:9b:fe:71:96:b4: e0:00:ca:60:16:4f:21:df:2c:a0:72:47:05:7a:c5: 33:57:48:b5:70:97:9b:6f:9f:31:4b:47:96:32:36: 7d:c8:45:5c:8b:a2:3a:cc:84:ce:f6:96:8c:df:3c: b0:57:98:de:74:f1:6e:b1:6b:f3:c8:79:35:05:cd: ea:1f:7d:ac:cc:1c:0d:3b:e9:f5:70:a1:b7:cf:23: 39:c2:f6:e9:04:27:be:f4:6e:ab:57:25:e4:a5:f7: 0c:2c:1a:67:d9:90:1d:7c:83:63:1d:49:39:62:c1: 89:a7:be:b6:34:f6:73:b4:9a:43:5b:5c:20:be:c6: c3:d4:cc:db:01:a1:af:be:e7:c7:5f:6a:f8:52:fb: 34:5b:1e:b1:e2:45:ee:5e:d7:b2:0a:83:65:d7:ea: 6e:90:db:f0:86:11:53:0e:65:df:3c:4a:c3:22:94: b3:16:7f:46:47:0e:10:de:86:bd:b6:8d:5b:b1:d7: 2f:24:9a:65:13:77:dc:d6:e9:f9:9a:13:b3:ac:7a: 02:99:57:a5:69:23:58:86:5f:04:52:aa:ea:ce:41: ef:a4:fd:13:b0:df:a0:91:11:6c:1e:f8:32:03:1a: be:c7:d8:1b:88:a6:89:a0:f6:3f:2a:2a:fe:b2:01: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:53:13:BC:74:6D:07:0F:2D:D8:79:C1:B4:CF:7F:69:66:3E:38 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030393a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b009::/48 Signature Algorithm: sha256WithRSAEncryption 10:91:30:1f:62:d4:44:20:f1:65:c1:a1:57:d3:ff:aa:f2:8c: dc:df:18:a2:2d:d6:ec:7e:c9:0f:0d:31:8f:2e:14:e8:c0:41: 71:b5:e7:5d:a5:5c:86:c7:cf:2c:63:cd:e4:b8:a7:74:77:b0: c4:ac:ed:06:c9:fa:dd:27:2b:7f:9c:43:a0:2c:52:37:b3:58: 02:f2:21:fb:e4:d1:cc:8f:f6:0d:ba:f9:1f:71:d5:66:48:ba: c4:71:60:51:c1:d4:7f:90:37:66:62:5a:c5:82:02:6b:7b:0e: c8:54:5a:85:1a:f4:7a:3f:b2:7c:ac:4d:26:a7:0c:c5:5c:0d: 99:47:9d:53:11:a4:eb:58:58:ba:c4:3b:0e:08:42:d7:a4:e0: 9f:f7:ea:fe:ef:e8:6e:95:51:81:e3:4c:2c:79:09:f1:7f:a6: cd:f8:05:07:13:a8:9b:fd:8b:b2:f8:28:ea:d8:a3:05:91:a7: 72:f9:af:4d:c8:84:66:54:9f:af:30:29:25:49:2e:b7:19:3b: 3b:2d:13:2f:0b:7d:e2:37:2b:8f:55:2f:d3:fc:3a:66:2d:2d: af:38:67:c9:bb:8c:89:4f:7d:fc:6f:96:d2:cf:bb:9c:63:f3: 6e:7c:46:dc:2b:8c:67:a2:ee:67:55:86:1d:c3:c4:1e:3c:fd: d0:98:f1:c8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUPoaw5X49x6qmBbYqVuKJO8ephVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MjIyMzAyMzBaFw0yNzA2MjEyMzA3MzBaMDMxMTAvBgNV BAMTKEYyQzU1MzEzQkM3NDZEMDcwRjJERDg3OUMxQjRDRjdGNjk2NjNFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQIzkP+/V+EgOb/nGWtOAAymAW TyHfLKByRwV6xTNXSLVwl5tvnzFLR5YyNn3IRVyLojrMhM72lozfPLBXmN508W6x a/PIeTUFzeoffazMHA076fVwobfPIznC9ukEJ770bqtXJeSl9wwsGmfZkB18g2Md STliwYmnvrY09nO0mkNbXCC+xsPUzNsBoa++58dfavhS+zRbHrHiRe5e17IKg2XX 6m6Q2/CGEVMOZd88SsMilLMWf0ZHDhDehr22jVux1y8kmmUTd9zW6fmaE7OsegKZ V6VpI1iGXwRSqurOQe+k/ROw36CREWwe+DIDGr7H2BuIpomg9j8qKv6yATufAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU8sVTE7x0bQcPLdh5wbTPf2lmPjgwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzkzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAJMA0GCSqGSIb3 DQEBCwUAA4IBAQAQkTAfYtREIPFlwaFX0/+q8ozc3xiiLdbsfskPDTGPLhTowEFx teddpVyGx88sY83kuKd0d7DErO0GyfrdJyt/nEOgLFI3s1gC8iH75NHMj/YNuvkf cdVmSLrEcWBRwdR/kDdmYlrFggJrew7IVFqFGvR6P7J8rE0mpwzFXA2ZR51TEaTr WFi6xDsOCELXpOCf9+r+7+hulVGB40wseQnxf6bN+AUHE6ib/Yuy+Cjq2KMFkady +a9NyIRmVJ+vMCklSS63GTs7LRMvC33iNyuPVS/T/DpmLS2vOGfJu4yJT338b5bS z7ucY/NufEbcK4xnou5nVYYdw8QePP3QmPHI -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:24 2026 by rpki-client