$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031353a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031353a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: 2OCt45wZRcqvnJtStFdtGhtupYgH1RBgxbvVVKrnP2I= Subject key identifier: BC:92:FD:1A:33:77:67:D1:71:D9:43:66:CB:80:B1:6F:E8:99:0D:99 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 54039A858B35CA902D1D205AB7C8043E48F34ED9 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031353a3a2f34382d3438203d3e203234333831.roa Signing time: Tue 07 Jul 2026 23:57:09 +0000 ROA not before: Tue 07 Jul 2026 23:52:09 +0000 ROA not after: Tue 06 Jul 2027 23:57:09 +0000 asID: 24381 IP address blocks: 2401:2060:b015::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:03:9a:85:8b:35:ca:90:2d:1d:20:5a:b7:c8:04:3e:48:f3:4e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jul 7 23:52:09 2026 GMT Not After : Jul 6 23:57:09 2027 GMT Subject: CN=BC92FD1A337767D171D94366CB80B16FE8990D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:66:24:3b:d3:2c:2c:d8:7d:27:8b:5a:7b: 55:b8:ff:74:bd:42:29:f5:a3:49:97:a5:b9:29:46: dd:52:8e:9a:cd:3f:af:88:5f:49:34:06:a1:79:80: a6:d5:8e:25:b7:ea:2a:b4:cc:81:e2:6d:13:df:87: 43:a1:04:41:17:50:18:c7:6a:2f:7e:ed:cf:19:0d: 1f:83:71:88:62:47:a3:b5:ca:65:9e:1c:c0:5c:25: 0f:a5:4a:f7:de:c8:30:90:f4:15:90:b5:c7:cb:72: 79:86:46:87:cb:88:12:85:88:7a:19:58:8c:39:63: 4e:5f:66:bb:63:da:6b:77:ac:6b:4a:d0:ef:77:f3: 79:19:84:a6:a1:0d:fd:16:c6:c1:35:36:40:37:d9: 20:e4:ec:81:b6:d9:44:e4:10:f6:39:88:ae:b8:c4: 06:da:6f:3b:c2:b9:7f:e7:06:0a:59:d3:a3:e0:71: 3d:cb:9c:7e:9e:c4:18:b1:50:e4:7e:42:22:34:da: f9:18:f3:71:b1:9e:ee:06:4a:80:89:94:b3:3a:56: 1f:bd:96:61:64:96:7b:ed:7a:e4:a7:77:11:36:a3: 2a:53:3b:f4:9a:fd:55:8f:1d:0d:c4:ab:a6:2c:a9: f8:4f:d5:d9:39:c0:08:d3:e9:a7:ec:7e:56:25:74: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:FD:1A:33:77:67:D1:71:D9:43:66:CB:80:B1:6F:E8:99:0D:99 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031353a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b015::/48 Signature Algorithm: sha256WithRSAEncryption 2f:0e:48:ba:af:e9:13:3d:46:59:db:4d:f1:1f:0c:aa:ca:24: 34:d1:89:12:9d:c9:5b:b7:d6:0d:03:fd:7e:67:ef:dc:fe:57: c3:70:27:53:14:6b:69:9b:8c:77:a3:51:15:e2:d6:c2:1e:f4: 19:52:d8:3c:69:61:3b:32:32:30:fd:00:7f:fe:6f:d8:79:58: d5:c7:e7:db:b3:89:33:8f:04:af:a1:fe:b2:4c:2c:22:e6:89: 98:38:75:49:b2:13:f5:4c:e6:da:3d:5a:e4:e0:f8:c7:77:e3: 2d:e4:fd:70:ba:2c:d7:51:31:c1:fa:15:30:d2:aa:9e:e0:d4: dd:e6:e8:99:59:2c:46:25:61:e3:55:8d:80:d4:9f:28:05:22: dd:76:36:d2:a5:f7:96:a1:9e:6b:46:f0:91:95:e3:0f:a1:42: c6:7c:58:2d:bb:f8:7d:f4:ab:36:22:60:11:ad:8f:91:58:ec: 6c:8c:30:8c:6e:4f:c8:c0:3b:04:16:fb:ab:6b:a7:df:ca:7e: d4:f9:9b:84:77:b7:19:16:f3:52:e9:37:f2:b9:72:cb:ba:ff: d7:76:73:af:d0:a4:3f:95:96:b7:5b:38:26:0c:92:b9:d9:05: a8:7f:42:41:55:55:09:64:48:ea:91:ac:b8:e7:73:4d:b0:0e: 39:a4:da:d3 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUVAOahYs1ypAtHSBat8gEPkjzTtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA3MDcyMzUyMDlaFw0yNzA3MDYyMzU3MDlaMDMxMTAvBgNV BAMTKEJDOTJGRDFBMzM3NzY3RDE3MUQ5NDM2NkNCODBCMTZGRTg5OTBEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLS2YkO9MsLNh9J4tae1W4/3S9 Qin1o0mXpbkpRt1SjprNP6+IX0k0BqF5gKbVjiW36iq0zIHibRPfh0OhBEEXUBjH ai9+7c8ZDR+DcYhiR6O1ymWeHMBcJQ+lSvfeyDCQ9BWQtcfLcnmGRofLiBKFiHoZ WIw5Y05fZrtj2mt3rGtK0O9383kZhKahDf0WxsE1NkA32SDk7IG22UTkEPY5iK64 xAbabzvCuX/nBgpZ06PgcT3LnH6exBixUOR+QiI02vkY83Gxnu4GSoCJlLM6Vh+9 lmFklnvteuSndxE2oypTO/Sa/VWPHQ3Eq6YsqfhP1dk5wAjT6afsflYldPgnAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUvJL9GjN3Z9Fx2UNmy4Cxb+iZDZkwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzUzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAVMA0GCSqGSIb3 DQEBCwUAA4IBAQAvDki6r+kTPUZZ203xHwyqyiQ00YkSnclbt9YNA/1+Z+/c/lfD cCdTFGtpm4x3o1EV4tbCHvQZUtg8aWE7MjIw/QB//m/YeVjVx+fbs4kzjwSvof6y TCwi5omYOHVJshP1TObaPVrk4PjHd+Mt5P1wuizXUTHB+hUw0qqe4NTd5uiZWSxG JWHjVY2A1J8oBSLddjbSpfeWoZ5rRvCRleMPoULGfFgtu/h99Ks2ImARrY+RWOxs jDCMbk/IwDsEFvura6ffyn7U+ZuEd7cZFvNS6TfyuXLLuv/XdnOv0KQ/lZa3Wzgm DJK52QWof0JBVVUJZEjqkay453NNsA45pNrT -----END CERTIFICATE-----Generated at Wed Jul 15 13:31:51 2026 by rpki-client