$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031313a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031313a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: yo4kPdmKvf673mrl+bphbUcyD2uza0ALPIY0RYcFLA0= Subject key identifier: 4F:99:8C:43:41:D2:3C:A3:5F:08:83:9F:56:29:7E:0A:9B:B5:18:32 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 3FC4A2F0B647835ACC2EB8312A1CAA20E4538A47 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031313a3a2f34382d3438203d3e203234333831.roa Signing time: Wed 01 Jul 2026 10:17:40 +0000 ROA not before: Wed 01 Jul 2026 10:12:40 +0000 ROA not after: Wed 30 Jun 2027 10:17:40 +0000 asID: 24381 IP address blocks: 2401:2060:b011::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c4:a2:f0:b6:47:83:5a:cc:2e:b8:31:2a:1c:aa:20:e4:53:8a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jul 1 10:12:40 2026 GMT Not After : Jun 30 10:17:40 2027 GMT Subject: CN=4F998C4341D23CA35F08839F56297E0A9BB51832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3e:e0:cb:37:00:71:4a:3a:f0:72:31:01:39: 15:3d:c7:00:a0:89:b7:bd:8c:09:e8:94:5d:9c:a0: 5e:77:e5:28:d3:81:91:45:5b:38:39:f9:a6:98:3a: 58:fd:bf:7c:be:ed:d2:da:16:c1:cd:76:d0:2b:85: fe:dc:28:d3:28:86:af:49:6b:75:48:2f:a7:f1:57: 63:e9:bc:13:46:90:b6:c2:fd:40:4b:08:19:00:2f: 33:a9:f0:65:ec:b4:95:7c:97:a6:5e:00:54:70:88: 9f:88:ec:04:d6:95:b5:54:81:ab:1a:c8:54:7b:6c: 50:09:71:d8:04:7e:41:83:f7:cc:36:a7:0f:23:fe: ba:1c:ce:fa:c9:20:14:88:ef:51:be:b5:6b:da:8a: 20:cb:0b:e1:51:56:f7:6c:83:95:bc:1c:70:8b:b6: 37:79:fb:77:0c:26:23:99:30:9b:10:aa:f9:b5:a5: c5:6c:07:64:41:c9:ea:58:df:c0:d3:6f:b3:e3:5f: 77:e4:9c:96:bb:f4:20:bf:2f:78:73:f9:69:20:a5: fd:8f:67:13:7a:b5:cb:7a:96:ab:0e:7e:15:94:59: 3e:5c:72:55:eb:3a:61:e0:a5:b6:d9:cb:2a:a8:10: 48:2d:06:71:78:2e:e5:4c:61:d6:66:ee:b3:c8:1c: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:8C:43:41:D2:3C:A3:5F:08:83:9F:56:29:7E:0A:9B:B5:18:32 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031313a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b011::/48 Signature Algorithm: sha256WithRSAEncryption 81:1e:4a:91:e2:61:79:d8:a6:64:e0:8e:57:17:73:b9:5b:1b: 4a:06:71:d1:e7:0f:1e:2d:25:8b:2c:a0:d6:27:90:6d:57:1c: 53:25:5a:1c:8a:32:67:c9:91:c8:3c:92:ce:ac:bf:fd:64:92: 87:76:85:1f:0f:c1:31:b7:86:03:d5:f6:7e:94:2c:d4:17:02: 19:31:aa:e0:72:8a:25:37:97:24:1b:58:43:ec:ad:56:b2:f4: f2:56:fa:78:ed:a3:f6:38:aa:d9:ab:82:5e:22:4b:95:14:44: 2f:89:54:8e:2a:f8:5c:a2:dc:2d:e0:60:3d:4c:3a:61:2b:b0: 5c:71:99:79:e2:ca:07:59:d5:a5:dc:cf:46:c1:1e:29:47:62: b0:5f:2c:55:50:ea:37:68:de:44:3e:45:ad:37:5f:2f:f4:7c: bf:b1:81:0b:11:68:a3:ad:1f:3f:c1:f9:6e:d7:08:f0:73:b7: 15:71:28:19:27:c0:bc:e8:9b:ee:0e:60:9b:4e:d3:ed:7e:9f: 25:50:86:56:2c:4e:62:e8:89:c8:dc:27:b3:ba:11:72:36:07: 7e:3b:c8:7f:99:d1:b3:fe:f4:e3:e0:b8:21:08:de:cb:e7:aa: 3d:29:e1:9b:3f:32:7e:04:6c:25:73:dd:61:a7:43:51:e1:82: 42:be:10:52 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUP8Si8LZHg1rMLrgxKhyqIORTikcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA3MDExMDEyNDBaFw0yNzA2MzAxMDE3NDBaMDMxMTAvBgNV BAMTKDRGOTk4QzQzNDFEMjNDQTM1RjA4ODM5RjU2Mjk3RTBBOUJCNTE4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTPuDLNwBxSjrwcjEBORU9xwCg ibe9jAnolF2coF535SjTgZFFWzg5+aaYOlj9v3y+7dLaFsHNdtArhf7cKNMohq9J a3VIL6fxV2PpvBNGkLbC/UBLCBkALzOp8GXstJV8l6ZeAFRwiJ+I7ATWlbVUgasa yFR7bFAJcdgEfkGD98w2pw8j/roczvrJIBSI71G+tWvaiiDLC+FRVvdsg5W8HHCL tjd5+3cMJiOZMJsQqvm1pcVsB2RByepY38DTb7PjX3fknJa79CC/L3hz+Wkgpf2P ZxN6tct6lqsOfhWUWT5cclXrOmHgpbbZyyqoEEgtBnF4LuVMYdZm7rPIHFUHAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUT5mMQ0HSPKNfCIOfVil+Cpu1GDIwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzEzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLARMA0GCSqGSIb3 DQEBCwUAA4IBAQCBHkqR4mF52KZk4I5XF3O5WxtKBnHR5w8eLSWLLKDWJ5BtVxxT JVocijJnyZHIPJLOrL/9ZJKHdoUfD8Ext4YD1fZ+lCzUFwIZMargcoolN5ckG1hD 7K1WsvTyVvp47aP2OKrZq4JeIkuVFEQviVSOKvhcotwt4GA9TDphK7BccZl54soH WdWl3M9GwR4pR2KwXyxVUOo3aN5EPkWtN18v9Hy/sYELEWijrR8/wflu1wjwc7cV cSgZJ8C86JvuDmCbTtPtfp8lUIZWLE5i6InI3CezuhFyNgd+O8h/mdGz/vTj4Lgh CN7L56o9KeGbPzJ+BGwlc91hp0NR4YJCvhBS -----END CERTIFICATE-----Generated at Wed Jul 15 13:32:10 2026 by rpki-client