$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031303a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031303a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: nODI2C6hw4HXvkadOVSwYi5/6OljaFAl7Y8fHF1gzwo= Subject key identifier: 1E:3E:FE:A1:26:4B:1B:55:75:13:B8:50:29:4B:A1:0C:12:A4:6C:FA Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 6938E10D2E10CD48BE3C6021F891963D80C837E8 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031303a3a2f34382d3438203d3e203234333831.roa Signing time: Wed 01 Jul 2026 10:17:16 +0000 ROA not before: Wed 01 Jul 2026 10:12:16 +0000 ROA not after: Wed 30 Jun 2027 10:17:16 +0000 asID: 24381 IP address blocks: 2401:2060:b010::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:38:e1:0d:2e:10:cd:48:be:3c:60:21:f8:91:96:3d:80:c8:37:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jul 1 10:12:16 2026 GMT Not After : Jun 30 10:17:16 2027 GMT Subject: CN=1E3EFEA1264B1B557513B850294BA10C12A46CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:48:87:bc:59:4b:28:d5:13:31:55:f6:b9: ec:24:db:11:f2:d1:59:fd:08:25:8d:fb:4a:9d:e7: df:c0:dc:b1:1e:3a:a7:6f:d7:82:94:ea:64:84:92: a6:08:c6:85:18:65:2d:ed:da:25:cd:43:3d:6e:1c: ab:35:59:a6:17:e1:d3:29:94:42:25:5e:06:91:9d: 4c:f3:21:4a:34:28:3f:5c:b2:9e:4b:82:3e:2e:e4: f4:84:b7:80:c4:79:fa:77:04:6e:84:d7:89:ea:65: 04:ba:47:7b:4a:67:5e:20:38:d7:7e:a5:63:3c:bb: 63:c0:16:8d:ba:4b:a2:bf:c9:8d:44:32:93:ea:d5: c4:1f:87:1d:aa:5b:2d:b1:dd:3b:5c:f9:06:16:8c: 20:01:62:70:a3:63:61:fc:fe:fe:b2:37:d4:a3:9b: 74:88:1d:0b:9e:df:f4:55:22:e7:d4:a0:bf:fa:fd: 6a:e2:52:9b:bb:9f:c8:ae:1f:de:b0:17:dc:5e:5b: 54:8d:59:9a:07:36:e4:0f:70:ac:ab:12:a1:4e:b5: d3:56:cf:1b:de:30:0f:c1:5c:51:48:de:54:67:1e: de:75:d7:22:39:33:2a:a8:96:80:fb:84:4e:cd:66: 14:04:d0:c6:a6:bd:9f:f0:ef:b0:01:59:34:b2:91: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:FE:A1:26:4B:1B:55:75:13:B8:50:29:4B:A1:0C:12:A4:6C:FA X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031303a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b010::/48 Signature Algorithm: sha256WithRSAEncryption 93:5d:9b:3e:b6:5d:6f:e2:c3:1c:bd:df:c0:8a:ff:3b:49:70: 91:4c:2f:97:62:2a:65:3a:04:3d:eb:8f:ec:f2:c6:9a:43:c7: 42:22:91:7a:10:25:ea:06:07:2d:ff:1a:c4:53:1c:60:f2:14: c8:f1:93:e4:84:2c:00:52:68:68:dd:ab:9c:f0:59:26:dd:3d: 42:a0:75:1b:ad:87:b7:b0:9b:fd:55:6e:2a:9a:4a:28:69:b0: 74:86:ac:52:94:8e:69:6c:b1:5f:69:ef:b4:00:5d:f2:ed:1f: f4:0d:89:34:b6:8d:25:aa:98:df:a3:09:f2:dd:19:ef:0b:2d: 88:44:62:6c:f6:4d:e3:6f:30:4d:d2:e4:61:5d:a7:53:26:55: 7a:f3:04:3f:ce:2b:3d:84:74:75:5d:7b:ca:5b:36:b0:08:bf: 57:ea:b0:f0:81:82:44:26:65:f0:d6:60:08:21:35:61:e0:f3: 37:7c:61:be:d1:94:95:6d:7b:64:bf:79:2b:7a:8d:9c:c7:79: 81:74:e3:dc:0d:35:ac:27:03:cb:ff:e4:3e:15:67:ad:14:8c: 11:34:96:17:98:7f:f9:b9:5c:bb:1a:35:3b:54:37:05:bf:54: 23:30:6a:b4:44:6f:fd:53:f6:6f:16:f2:e6:d7:06:36:78:da: d8:f5:a1:2c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUaTjhDS4QzUi+PGAh+JGWPYDIN+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA3MDExMDEyMTZaFw0yNzA2MzAxMDE3MTZaMDMxMTAvBgNV BAMTKDFFM0VGRUExMjY0QjFCNTU3NTEzQjg1MDI5NEJBMTBDMTJBNDZDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAEiHvFlLKNUTMVX2uewk2xHy 0Vn9CCWN+0qd59/A3LEeOqdv14KU6mSEkqYIxoUYZS3t2iXNQz1uHKs1WaYX4dMp lEIlXgaRnUzzIUo0KD9csp5Lgj4u5PSEt4DEefp3BG6E14nqZQS6R3tKZ14gONd+ pWM8u2PAFo26S6K/yY1EMpPq1cQfhx2qWy2x3Ttc+QYWjCABYnCjY2H8/v6yN9Sj m3SIHQue3/RVIufUoL/6/WriUpu7n8iuH96wF9xeW1SNWZoHNuQPcKyrEqFOtdNW zxveMA/BXFFI3lRnHt511yI5MyqoloD7hE7NZhQE0MamvZ/w77ABWTSykeZBAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUHj7+oSZLG1V1E7hQKUuhDBKkbPowHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzAzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAQMA0GCSqGSIb3 DQEBCwUAA4IBAQCTXZs+tl1v4sMcvd/Aiv87SXCRTC+XYiplOgQ964/s8saaQ8dC IpF6ECXqBgct/xrEUxxg8hTI8ZPkhCwAUmho3auc8Fkm3T1CoHUbrYe3sJv9VW4q mkooabB0hqxSlI5pbLFfae+0AF3y7R/0DYk0to0lqpjfowny3RnvCy2IRGJs9k3j bzBN0uRhXadTJlV68wQ/zis9hHR1XXvKWzawCL9X6rDwgYJEJmXw1mAIITVh4PM3 fGG+0ZSVbXtkv3kreo2cx3mBdOPcDTWsJwPL/+Q+FWetFIwRNJYXmH/5uVy7GjU7 VDcFv1QjMGq0RG/9U/ZvFvLm1wY2eNrY9aEs -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:51 2026 by rpki-client