$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031363a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031363a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: YJcbYItWtStqyIm4ybdavfWOSx9wJD6iyz22O1tPWzE= Subject key identifier: 0F:BD:B5:98:BF:40:89:26:8D:BE:90:36:7B:AD:9B:92:78:6D:81:75 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 210C29B8432BB0D32277F0F461B5AE85703C1ABF Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031363a3a2f34382d3438203d3e203234333831.roa Signing time: Wed 08 Jul 2026 00:05:23 +0000 ROA not before: Wed 08 Jul 2026 00:00:23 +0000 ROA not after: Wed 07 Jul 2027 00:05:23 +0000 asID: 24381 IP address blocks: 2401:2060:b016::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0c:29:b8:43:2b:b0:d3:22:77:f0:f4:61:b5:ae:85:70:3c:1a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jul 8 00:00:23 2026 GMT Not After : Jul 7 00:05:23 2027 GMT Subject: CN=0FBDB598BF4089268DBE90367BAD9B92786D8175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:41:16:04:13:60:48:56:94:83:6c:71:b3: ac:cc:48:03:cb:f2:7b:17:65:4a:d0:77:33:31:c8: ac:45:19:7d:11:a5:a8:6c:83:be:47:84:d5:a7:50: 0b:e4:f5:be:ea:2a:b5:f3:86:2f:ec:8f:38:36:7e: b5:80:f5:0b:76:6b:cb:ef:57:4a:06:35:18:1a:75: 2a:f2:a1:68:83:74:6c:44:d6:45:f9:b7:ca:37:aa: da:8a:0e:96:ca:09:f9:d3:77:0a:c0:07:21:fe:7d: 03:41:f1:13:e1:f4:be:9f:2c:26:d9:c8:da:f4:32: aa:ab:3e:03:01:a6:62:ef:14:8a:1b:0c:03:05:19: 53:8b:a9:dd:b7:0c:f5:ee:67:ac:8b:8b:5a:4b:3a: 37:5d:ed:b0:b0:50:b7:ae:d4:44:30:7e:a8:0b:93: d7:77:8d:59:5a:fc:0f:01:68:e9:ec:c1:49:24:6d: 09:2d:3f:72:8a:09:0f:a8:54:6e:c4:b7:42:19:66: d2:07:0e:39:b3:6b:68:2e:63:93:90:3f:aa:d3:1f: 4b:59:a3:a8:87:d7:8c:64:c7:62:6b:8c:0b:b1:2a: 26:1a:a6:74:04:ae:5e:4c:87:1d:77:fe:89:ea:b3: 42:29:8d:9b:92:ec:76:00:23:47:b0:29:53:85:21: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BD:B5:98:BF:40:89:26:8D:BE:90:36:7B:AD:9B:92:78:6D:81:75 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031363a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b016::/48 Signature Algorithm: sha256WithRSAEncryption 44:51:80:53:23:77:05:47:b5:71:b0:a5:01:ab:d1:e8:6d:90: e8:66:d5:5f:a6:d5:7b:a9:f9:b5:99:e5:8c:df:da:5a:b9:d1: 18:54:6d:07:7e:bd:e4:c9:bd:67:54:12:ee:f0:6d:2a:72:76: 22:5c:62:23:9b:01:57:01:36:95:6e:05:b6:fb:b6:bb:68:70: 46:c7:1d:fb:ea:5e:2f:aa:82:b6:cc:b1:55:f1:4a:13:10:b7: 6c:2a:f1:79:8b:d2:3c:ad:6e:ba:35:ae:fc:c9:0a:fd:2f:98: 97:6c:89:96:84:85:5a:71:cf:a2:e5:f3:aa:14:c7:c6:5c:cd: 16:f7:22:23:71:06:e3:06:7a:ae:e4:39:e1:a4:23:c8:4d:44: 07:b3:88:17:14:d2:37:ec:fe:09:09:45:02:68:65:31:d0:48: 4e:50:d6:b9:e2:da:b6:6b:d8:d0:94:26:07:7a:85:bd:e2:35: cd:2c:83:df:8b:5e:3f:ba:5a:10:6c:aa:5c:07:25:60:fc:0a: 40:3b:ec:84:81:d6:63:3f:8b:7f:e6:4f:d6:33:0c:43:bf:41: 39:a8:0d:5e:e3:34:51:7c:f3:7c:70:c5:73:84:eb:f0:25:76: bd:23:01:c6:39:00:49:96:d4:3c:ee:6a:a3:2b:04:e8:0b:86: 23:f3:c7:3e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUIQwpuEMrsNMid/D0YbWuhXA8Gr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA3MDgwMDAwMjNaFw0yNzA3MDcwMDA1MjNaMDMxMTAvBgNV BAMTKDBGQkRCNTk4QkY0MDg5MjY4REJFOTAzNjdCQUQ5QjkyNzg2RDgxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEl0EWBBNgSFaUg2xxs6zMSAPL 8nsXZUrQdzMxyKxFGX0Rpahsg75HhNWnUAvk9b7qKrXzhi/sjzg2frWA9Qt2a8vv V0oGNRgadSryoWiDdGxE1kX5t8o3qtqKDpbKCfnTdwrAByH+fQNB8RPh9L6fLCbZ yNr0MqqrPgMBpmLvFIobDAMFGVOLqd23DPXuZ6yLi1pLOjdd7bCwULeu1EQwfqgL k9d3jVla/A8BaOnswUkkbQktP3KKCQ+oVG7Et0IZZtIHDjmza2guY5OQP6rTH0tZ o6iH14xkx2JrjAuxKiYapnQErl5Mhx13/onqs0IpjZuS7HYAI0ewKVOFITRHAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUD721mL9AiSaNvpA2e62bknhtgXUwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzYzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAWMA0GCSqGSIb3 DQEBCwUAA4IBAQBEUYBTI3cFR7VxsKUBq9HobZDoZtVfptV7qfm1meWM39paudEY VG0Hfr3kyb1nVBLu8G0qcnYiXGIjmwFXATaVbgW2+7a7aHBGxx376l4vqoK2zLFV 8UoTELdsKvF5i9I8rW66Na78yQr9L5iXbImWhIVacc+i5fOqFMfGXM0W9yIjcQbj Bnqu5DnhpCPITUQHs4gXFNI37P4JCUUCaGUx0EhOUNa54tq2a9jQlCYHeoW94jXN LIPfi14/uloQbKpcByVg/ApAO+yEgdZjP4t/5k/WMwxDv0E5qA1e4zRRfPN8cMVz hOvwJXa9IwHGOQBJltQ87mqjKwToC4Yj88c+ -----END CERTIFICATE-----Generated at Wed Jul 15 13:32:10 2026 by rpki-client