$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031343a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031343a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: 5MKUwCTBQWPO2p8fPbPDmsmFudmSbY7y+4rr1GUf6Eo= Subject key identifier: F0:EC:35:42:B0:3E:79:CB:EB:3D:B6:4F:D6:0D:74:90:D6:BB:32:5E Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 795F43F4D7E8874AEE5BFC7BA83841B31B69EA67 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031343a3a2f34382d3438203d3e203234333831.roa Signing time: Mon 29 Jun 2026 05:29:40 +0000 ROA not before: Mon 29 Jun 2026 05:24:40 +0000 ROA not after: Mon 28 Jun 2027 05:29:40 +0000 asID: 24381 IP address blocks: 2401:2060:b014::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5f:43:f4:d7:e8:87:4a:ee:5b:fc:7b:a8:38:41:b3:1b:69:ea:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jun 29 05:24:40 2026 GMT Not After : Jun 28 05:29:40 2027 GMT Subject: CN=F0EC3542B03E79CBEB3DB64FD60D7490D6BB325E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:0a:f4:9e:1a:c1:82:9b:f1:4a:be:68:1d: 84:5c:6a:50:9f:b2:c5:da:22:8d:56:ee:d0:4a:36: b5:6b:b9:19:03:38:6c:17:4e:05:45:e9:5f:08:27: 28:fa:45:f0:6e:7a:6c:36:41:d6:94:95:6a:be:d9: 8c:df:dc:f8:fa:32:b9:7c:a4:0a:22:cc:05:57:9f: d8:57:92:ca:0f:0c:3e:f2:9c:e6:92:0d:17:bc:65: 32:41:ef:f4:e3:cb:57:78:88:af:a8:4e:93:97:c3: 5c:e9:62:b1:a4:53:bb:5e:92:30:73:0d:19:18:d1: ce:99:64:58:e7:3d:2b:a1:de:c7:e9:57:bf:4a:7a: 1c:2a:ce:65:bb:ae:2e:ec:2d:75:d8:3e:8c:ce:78: 38:92:6c:00:16:f1:30:b1:22:0b:02:4b:8a:37:91: f6:31:d4:5d:43:3c:cb:d4:9d:54:a6:b1:e3:bf:fc: 1c:08:ff:22:af:6f:af:c9:08:0a:58:b0:55:05:86: e4:17:a9:9d:be:6c:f4:f9:5d:7b:62:ca:48:05:38: 97:19:07:22:cc:32:4a:e3:d0:64:b5:91:33:0c:38: 6f:3e:5b:86:27:41:77:ee:5e:19:19:e7:ae:ed:17: 33:43:e0:12:71:5e:b7:c4:a0:f2:0d:f9:6b:cc:ac: 64:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:35:42:B0:3E:79:CB:EB:3D:B6:4F:D6:0D:74:90:D6:BB:32:5E X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031343a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b014::/48 Signature Algorithm: sha256WithRSAEncryption 3b:4a:30:a6:f7:f4:c0:34:02:b4:71:a8:2b:7c:f7:ac:47:96: de:d3:e2:c1:c0:65:03:0f:6f:5a:a1:c2:2d:da:68:13:4d:b9: 7a:96:9a:2a:42:07:d0:e7:8a:13:57:14:eb:9f:3e:5e:68:94: 88:1d:45:24:55:49:fc:36:66:b7:94:50:a4:88:2a:43:20:b4: 76:53:48:ba:f3:c9:b2:a3:bc:69:fc:4c:67:cd:dd:47:7f:e6: 0b:c3:30:f9:0d:11:05:b0:e4:fe:92:1b:f0:d3:3d:76:4d:98: 9e:08:e6:12:ee:68:63:67:40:40:f7:cb:ea:b1:b8:08:30:89: 2f:e7:08:2e:88:e3:ee:5e:ef:53:66:d1:3a:03:5b:75:c1:8f: 9c:f3:3a:f2:91:66:33:20:9f:cd:81:16:00:b0:d2:50:ca:09: ac:85:a4:2c:b3:3b:81:03:4d:f8:9b:8b:3b:6f:ac:49:8c:cf: f3:0c:a8:19:57:26:22:c5:7e:15:c9:a1:a6:b1:cd:31:32:7a: 77:66:48:f7:22:2d:e2:3b:46:76:52:e8:b3:39:1c:4c:6e:3e: 41:e8:78:b0:d1:8a:b6:69:0a:75:2f:cc:c4:6d:2d:65:78:b4: 50:0c:5d:9c:81:73:46:b2:46:f7:5b:96:d3:31:37:48:c3:50: 6b:58:ad:a0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUeV9D9Nfoh0ruW/x7qDhBsxtp6mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA2MjkwNTI0NDBaFw0yNzA2MjgwNTI5NDBaMDMxMTAvBgNV BAMTKEYwRUMzNTQyQjAzRTc5Q0JFQjNEQjY0RkQ2MEQ3NDkwRDZCQjMyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0Qr0nhrBgpvxSr5oHYRcalCf ssXaIo1W7tBKNrVruRkDOGwXTgVF6V8IJyj6RfBuemw2QdaUlWq+2Yzf3Pj6Mrl8 pAoizAVXn9hXksoPDD7ynOaSDRe8ZTJB7/Tjy1d4iK+oTpOXw1zpYrGkU7tekjBz DRkY0c6ZZFjnPSuh3sfpV79KehwqzmW7ri7sLXXYPozOeDiSbAAW8TCxIgsCS4o3 kfYx1F1DPMvUnVSmseO//BwI/yKvb6/JCApYsFUFhuQXqZ2+bPT5XXtiykgFOJcZ ByLMMkrj0GS1kTMMOG8+W4YnQXfuXhkZ567tFzND4BJxXrfEoPIN+WvMrGRPAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU8Ow1QrA+ecvrPbZP1g10kNa7Ml4wHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzQzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAUMA0GCSqGSIb3 DQEBCwUAA4IBAQA7SjCm9/TANAK0cagrfPesR5be0+LBwGUDD29aocIt2mgTTbl6 lpoqQgfQ54oTVxTrnz5eaJSIHUUkVUn8Nma3lFCkiCpDILR2U0i688myo7xp/Exn zd1Hf+YLwzD5DREFsOT+khvw0z12TZieCOYS7mhjZ0BA98vqsbgIMIkv5wguiOPu Xu9TZtE6A1t1wY+c8zrykWYzIJ/NgRYAsNJQygmshaQsszuBA034m4s7b6xJjM/z DKgZVyYixX4VyaGmsc0xMnp3Zkj3Ii3iO0Z2UuizORxMbj5B6Hiw0Yq2aQp1L8zE bS1leLRQDF2cgXNGskb3W5bTMTdIw1BrWK2g -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:51 2026 by rpki-client