$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031323a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031323a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: Qa/GHALnudatBabEiqMEL09zykvnZfjOu6zfYmxPoMw= Subject key identifier: E7:9B:78:D9:99:5A:92:FB:57:99:01:B9:8B:11:A1:E6:4B:2E:7F:78 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 34D9A288C238CFC3E01D91B6ED990A9C17748157 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031323a3a2f34382d3438203d3e203234333831.roa Signing time: Tue 23 Jun 2026 22:41:07 +0000 ROA not before: Tue 23 Jun 2026 22:36:07 +0000 ROA not after: Tue 22 Jun 2027 22:41:07 +0000 asID: 24381 IP address blocks: 2401:2060:b012::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d9:a2:88:c2:38:cf:c3:e0:1d:91:b6:ed:99:0a:9c:17:74:81:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 23 22:36:07 2026 GMT Not After : Jun 22 22:41:07 2027 GMT Subject: CN=E79B78D9995A92FB579901B98B11A1E64B2E7F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:2e:ee:7b:c2:aa:95:4e:8a:cf:14:36:46: 16:c0:20:9a:f5:e4:ee:59:dc:94:c7:14:ee:5e:27: 59:e1:ad:fe:2b:97:c6:9c:d1:be:17:06:d8:0f:84: 59:17:59:0b:8e:58:d9:84:ff:4c:5e:b8:bd:2a:b5: e3:d9:40:c1:e6:6f:20:1b:0e:42:cf:4a:30:53:0d: d3:c6:75:bf:45:41:1d:77:fb:f4:a1:4a:16:e5:3d: 01:94:76:e2:6f:3b:12:db:61:9e:d6:0c:42:ad:c0: 7d:8b:7c:24:37:e0:a4:09:ed:b8:d9:fb:f5:1c:1f: 31:c0:ef:53:92:43:eb:65:be:2e:40:d7:d3:4e:52: b5:56:a0:96:24:f8:8e:1f:d6:da:8f:63:33:22:59: f8:11:12:f1:d1:44:d4:20:6b:91:86:96:1a:71:64: 18:1f:51:24:fa:a3:f3:7b:9e:c6:9d:b2:54:3b:51: 37:f4:c7:37:d6:96:6b:81:e4:10:50:0e:eb:a2:1c: f4:32:10:de:2a:96:d0:2d:bb:b7:55:c4:a9:f2:c9: 31:49:a0:fc:25:70:7b:65:0e:29:68:ee:72:39:f1: c9:e9:27:c8:7b:ff:5c:e8:c7:ec:95:fa:2f:2e:6d: 81:4d:85:14:19:fa:1e:08:9c:bd:4a:af:3a:02:33: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9B:78:D9:99:5A:92:FB:57:99:01:B9:8B:11:A1:E6:4B:2E:7F:78 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031323a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b012::/48 Signature Algorithm: sha256WithRSAEncryption ad:7d:f6:bf:df:83:67:3b:ea:f0:30:7b:8f:66:e2:6b:51:91: e4:61:e3:db:01:70:90:94:1d:51:db:0c:90:96:8e:51:f6:a6: fd:31:4a:d1:12:5d:d7:ae:70:87:33:13:df:1a:c8:e4:ac:c0: fe:ae:8e:7d:b4:10:e7:b1:68:be:dc:70:af:86:60:3b:b2:d8: 0d:37:33:6d:6f:ae:4c:35:18:b5:b4:b5:8b:f4:d2:4a:0a:5b: 31:82:6e:85:6a:89:fc:ba:a0:b7:18:f4:2b:b8:d5:ca:6c:82: 55:59:72:9f:51:46:96:87:c0:fd:73:c3:9e:e0:aa:5d:cd:a9: 9f:eb:17:94:e2:95:a6:0e:00:5c:84:76:17:fb:60:77:96:08: 5e:64:10:a9:50:a3:1c:59:c9:11:46:c6:7d:fd:33:51:9e:e6: d4:12:53:61:8c:ba:60:97:d6:9c:09:4a:64:70:24:dd:10:5b: 2b:8a:59:5b:0c:af:c8:8d:51:b4:a0:81:8c:dc:c4:8e:3b:ee: ab:43:8f:7e:6d:b8:0e:78:74:62:fa:84:8d:84:30:8b:10:06: ac:85:f8:18:62:95:3b:48:c9:6f:a0:d6:a0:74:2f:f8:7f:60: 8c:7f:d2:b8:a5:ec:8a:12:ef:a7:07:bf:b6:c6:76:63:72:73: 91:e8:df:46 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUNNmiiMI4z8PgHZG27ZkKnBd0gVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MjMyMjM2MDdaFw0yNzA2MjIyMjQxMDdaMDMxMTAvBgNV BAMTKEU3OUI3OEQ5OTk1QTkyRkI1Nzk5MDFCOThCMTFBMUU2NEIyRTdGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNmS7ue8KqlU6KzxQ2RhbAIJr1 5O5Z3JTHFO5eJ1nhrf4rl8ac0b4XBtgPhFkXWQuOWNmE/0xeuL0qtePZQMHmbyAb DkLPSjBTDdPGdb9FQR13+/ShShblPQGUduJvOxLbYZ7WDEKtwH2LfCQ34KQJ7bjZ +/UcHzHA71OSQ+tlvi5A19NOUrVWoJYk+I4f1tqPYzMiWfgREvHRRNQga5GGlhpx ZBgfUST6o/N7nsadslQ7UTf0xzfWlmuB5BBQDuuiHPQyEN4qltAtu7dVxKnyyTFJ oPwlcHtlDilo7nI58cnpJ8h7/1zox+yV+i8ubYFNhRQZ+h4InL1KrzoCM1XjAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU55t42ZlakvtXmQG5ixGh5ksuf3gwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzIzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLASMA0GCSqGSIb3 DQEBCwUAA4IBAQCtffa/34NnO+rwMHuPZuJrUZHkYePbAXCQlB1R2wyQlo5R9qb9 MUrREl3XrnCHMxPfGsjkrMD+ro59tBDnsWi+3HCvhmA7stgNNzNtb65MNRi1tLWL 9NJKClsxgm6Faon8uqC3GPQruNXKbIJVWXKfUUaWh8D9c8Oe4Kpdzamf6xeU4pWm DgBchHYX+2B3lgheZBCpUKMcWckRRsZ9/TNRnubUElNhjLpgl9acCUpkcCTdEFsr illbDK/IjVG0oIGM3MSOO+6rQ49+bbgOeHRi+oSNhDCLEAashfgYYpU7SMlvoNag dC/4f2CMf9K4peyKEu+nB7+2xnZjcnOR6N9G -----END CERTIFICATE-----Generated at Wed Jul 15 13:32:10 2026 by rpki-client