$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031333a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031333a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: B5UK9wBF4eWMwEZe3Wkm0BueMwzV72w8VP+uBl0OAy0= Subject key identifier: 12:67:41:C5:F9:39:F9:51:F3:68:BC:F7:6D:37:8D:14:41:80:53:80 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 02EE4ED207E5CD98E06C5DE7FC18326DA0259720 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031333a3a2f34382d3438203d3e203234333831.roa Signing time: Wed 24 Jun 2026 12:23:48 +0000 ROA not before: Wed 24 Jun 2026 12:18:48 +0000 ROA not after: Wed 23 Jun 2027 12:23:48 +0000 asID: 24381 IP address blocks: 2401:2060:b013::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ee:4e:d2:07:e5:cd:98:e0:6c:5d:e7:fc:18:32:6d:a0:25:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 24 12:18:48 2026 GMT Not After : Jun 23 12:23:48 2027 GMT Subject: CN=126741C5F939F951F368BCF76D378D1441805380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:71:8b:76:21:d7:69:57:7b:99:19:e3:73: 12:9c:05:0d:cf:fa:49:89:b1:2f:98:b6:cc:ec:65: 5b:bd:39:4b:8c:e5:1e:22:b1:14:64:c0:c8:4e:b7: ab:fe:02:19:3a:39:b6:2c:58:58:37:2e:0d:11:89: 52:0c:a2:14:5e:3e:68:4b:2b:9c:a5:20:6d:66:6e: 1d:6b:c5:46:38:9b:b7:78:93:9b:92:5d:9d:b6:8c: 3f:6e:e1:54:92:e5:df:94:4f:c8:b1:aa:38:af:77: 8c:4d:62:8b:9f:ac:17:a0:4b:0e:fd:14:1e:ae:ed: 1c:3d:32:5e:ad:5e:7f:00:bf:ed:36:cd:08:6c:0b: 76:8a:0a:3a:46:38:8d:b6:e2:84:58:f1:f2:96:bb: 3b:73:2d:b3:c6:48:17:e0:dd:84:ae:7e:f4:54:df: 07:3b:ab:08:9d:65:b0:e2:39:32:00:d6:06:ba:a9: ec:6a:70:9d:ae:0d:ed:f1:45:3f:85:87:11:3a:dd: f1:81:38:7c:ad:cc:42:d1:66:27:c1:07:e6:bb:db: 65:18:6c:f5:ed:00:85:af:b1:76:3a:d9:8e:d3:77: 88:37:de:85:f5:e1:a3:63:3d:7c:c9:df:30:35:f3: 78:71:18:ca:c2:ca:ce:3e:f1:db:56:26:61:0b:46: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:67:41:C5:F9:39:F9:51:F3:68:BC:F7:6D:37:8D:14:41:80:53:80 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031333a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b013::/48 Signature Algorithm: sha256WithRSAEncryption 6f:1c:84:2e:36:1f:a9:23:5d:aa:4f:78:c7:b6:5f:7b:e4:f9: 01:d6:3c:0d:09:7e:f4:46:6e:6d:94:a3:be:fd:de:b1:2a:e2: d0:a2:7b:6b:dd:61:8e:be:8f:6a:8a:1d:51:fc:e7:76:bb:bc: 62:f8:b7:f5:a1:f3:4f:f1:a5:75:cb:0b:c6:2e:52:6a:82:ae: d5:d7:dd:43:69:cd:a8:2f:1e:96:25:57:56:1f:8b:9a:84:73: 00:db:95:df:4b:95:5f:3f:88:e1:05:b9:25:fc:cc:8b:70:38: 12:f0:e7:86:80:4b:c6:fe:bd:fa:93:32:c0:c5:e2:f9:a2:5d: 56:15:27:ae:74:70:0e:d3:22:42:16:50:72:4c:cd:1c:9a:31: 80:9d:a1:47:31:b1:8f:e4:71:17:f5:79:13:9b:b1:0d:34:4d: 04:38:16:18:cb:cd:bc:76:99:a1:98:84:45:10:53:c4:d8:4b: c3:ce:6b:57:87:92:fd:0c:c0:b3:a3:0d:a6:35:49:b7:a0:6a: 1e:cd:84:2b:30:51:8e:7d:6c:6a:23:46:ad:92:fe:07:7a:06: c6:42:52:1e:5e:0a:a9:53:a4:ab:14:85:b9:13:11:5a:81:67: 2e:fd:8c:bc:86:c7:59:ec:85:4e:e7:6f:70:53:af:4b:3a:e0: 3d:63:b3:1b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUAu5O0gflzZjgbF3n/BgybaAllyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MjQxMjE4NDhaFw0yNzA2MjMxMjIzNDhaMDMxMTAvBgNV BAMTKDEyNjc0MUM1RjkzOUY5NTFGMzY4QkNGNzZEMzc4RDE0NDE4MDUzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm43GLdiHXaVd7mRnjcxKcBQ3P +kmJsS+YtszsZVu9OUuM5R4isRRkwMhOt6v+Ahk6ObYsWFg3Lg0RiVIMohRePmhL K5ylIG1mbh1rxUY4m7d4k5uSXZ22jD9u4VSS5d+UT8ixqjivd4xNYoufrBegSw79 FB6u7Rw9Ml6tXn8Av+02zQhsC3aKCjpGOI224oRY8fKWuztzLbPGSBfg3YSufvRU 3wc7qwidZbDiOTIA1ga6qexqcJ2uDe3xRT+FhxE63fGBOHytzELRZifBB+a722UY bPXtAIWvsXY62Y7Td4g33oX14aNjPXzJ3zA183hxGMrCys4+8dtWJmELRiEtAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUEmdBxfk5+VHzaLz3bTeNFEGAU4AwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzMzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLATMA0GCSqGSIb3 DQEBCwUAA4IBAQBvHIQuNh+pI12qT3jHtl975PkB1jwNCX70Rm5tlKO+/d6xKuLQ ontr3WGOvo9qih1R/Od2u7xi+Lf1ofNP8aV1ywvGLlJqgq7V191Dac2oLx6WJVdW H4uahHMA25XfS5VfP4jhBbkl/MyLcDgS8OeGgEvG/r36kzLAxeL5ol1WFSeudHAO 0yJCFlByTM0cmjGAnaFHMbGP5HEX9XkTm7ENNE0EOBYYy828dpmhmIRFEFPE2EvD zmtXh5L9DMCzow2mNUm3oGoezYQrMFGOfWxqI0atkv4HegbGQlIeXgqpU6SrFIW5 ExFagWcu/Yy8hsdZ7IVO529wU69LOuA9Y7Mb -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:26 2026 by rpki-client