$ rpki-client -vvvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031383a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031383a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: uckPSy0Tug+CUwTjsCkx8JRSlr8cnK4y68PpuA7X1JE= Subject key identifier: 0C:55:90:20:57:D0:D7:86:F1:18:3E:B9:6F:3F:53:AF:39:9B:E4:9C Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 34FF0FFFBC5311F27EC040E6F8AA708C9A85F57F Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031383a3a2f34382d3438203d3e203234333831.roa Signing time: Mon 07 Sep 2026 10:08:25 +0000 ROA not before: Mon 07 Sep 2026 10:03:25 +0000 ROA not after: Mon 06 Sep 2027 10:08:25 +0000 asID: 24381 IP address blocks: 2401:2060:b018::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 21:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ff:0f:ff:bc:53:11:f2:7e:c0:40:e6:f8:aa:70:8c:9a:85:f5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Sep 7 10:03:25 2026 GMT Not After : Sep 6 10:08:25 2027 GMT Subject: CN=0C55902057D0D786F1183EB96F3F53AF399BE49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:2d:e8:56:53:eb:db:4e:8e:b5:d1:f0:ec: 0e:12:1a:0b:d8:db:3a:b6:7c:d0:aa:76:dd:1c:bd: ac:00:e6:59:0f:f7:86:6a:1e:b8:01:ea:62:fd:25: d3:1e:ca:4e:83:b0:d3:19:52:6d:1b:e2:2f:11:fe: c6:d5:c4:37:fc:90:9a:51:bf:32:be:87:44:b8:ef: eb:d4:01:04:97:e2:ee:00:64:8f:86:1b:50:0a:94: 68:b5:9f:8a:77:02:2f:48:82:fe:8b:a4:0f:f5:66: 93:7f:37:70:dd:97:4b:ef:ee:e6:04:ed:51:7d:78: 87:8f:86:1d:9e:8a:39:c9:ba:ce:bb:e2:b3:69:7a: 59:3a:42:e9:ae:ef:7e:69:2f:aa:cb:00:0b:16:e2: e8:4b:c7:ba:33:de:c9:86:10:20:74:9f:0f:c9:c7: 3f:09:04:6c:6c:d6:2c:a0:d4:22:9e:fc:ef:b8:be: 6e:fd:e7:6d:47:6b:26:48:a5:15:42:f3:77:11:a2: bb:86:2b:38:65:5b:6a:a7:b1:c5:c1:5a:37:b3:97: 58:81:60:2f:da:99:ce:05:18:32:24:af:16:5a:01: b6:53:e3:e0:20:4f:9f:5c:4a:4e:5f:f3:a0:d2:74: 85:7d:37:f7:4b:bb:81:65:72:d1:86:2b:1d:51:87: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:55:90:20:57:D0:D7:86:F1:18:3E:B9:6F:3F:53:AF:39:9B:E4:9C X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031383a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b018::/48 Signature Algorithm: sha256WithRSAEncryption 50:e8:2d:61:f4:3f:79:73:8e:c6:72:ff:c4:d9:db:89:43:1e: da:0e:30:5b:3d:87:25:de:81:16:fb:b7:5b:30:89:76:b4:53: 89:d8:b5:aa:9c:8b:b7:ff:85:c2:bc:e6:58:28:82:8c:2e:51: 4e:c2:31:ad:8b:eb:89:a6:81:4f:79:40:72:83:b7:77:25:ca: f0:9c:96:ed:e7:27:7b:71:f0:a1:ac:c9:f6:e6:8c:5f:22:f8: c9:95:2b:dc:b5:23:5b:ea:b4:f4:23:f0:2d:f6:7c:bc:47:05: 6e:ec:49:a9:a7:15:9b:2f:fc:41:a6:ce:a2:e6:55:cd:7b:bd: ab:06:12:65:09:3a:1c:6e:76:f1:c2:50:05:a5:6f:1a:16:1c: 09:ac:25:47:20:a4:14:b9:8b:fe:00:bc:99:c5:c7:2a:cc:c3: 1c:a9:dd:5a:7b:2b:62:b6:59:4a:54:41:a1:e8:16:5f:26:49: 86:4e:36:b2:8d:d2:d0:fa:c1:3b:76:11:4f:ba:cc:75:ec:ea: df:6f:83:24:55:3f:fb:35:c5:3f:9c:46:00:3f:83:39:1d:33: d9:9d:27:be:95:04:c7:f7:d0:31:84:33:00:7d:0a:4c:5f:7a: 38:ff:e9:ab:01:93:d1:c4:3b:8f:5f:b9:1b:3a:e9:66:0b:22: 42:a2:16:e0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUNP8P/7xTEfJ+wEDm+KpwjJqF9X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA5MDcxMDAzMjVaFw0yNzA5MDYxMDA4MjVaMDMxMTAvBgNV BAMTKDBDNTU5MDIwNTdEMEQ3ODZGMTE4M0VCOTZGM0Y1M0FGMzk5QkU0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhy3oVlPr206OtdHw7A4SGgvY 2zq2fNCqdt0cvawA5lkP94ZqHrgB6mL9JdMeyk6DsNMZUm0b4i8R/sbVxDf8kJpR vzK+h0S47+vUAQSX4u4AZI+GG1AKlGi1n4p3Ai9Igv6LpA/1ZpN/N3Ddl0vv7uYE 7VF9eIePhh2eijnJus674rNpelk6Qumu735pL6rLAAsW4uhLx7oz3smGECB0nw/J xz8JBGxs1iyg1CKe/O+4vm79521HayZIpRVC83cRoruGKzhlW2qnscXBWjezl1iB YC/amc4FGDIkrxZaAbZT4+AgT59cSk5f86DSdIV9N/dLu4FlctGGKx1Rh0BBAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUDFWQIFfQ14bxGD65bz9Trzmb5JwwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzgzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAYMA0GCSqGSIb3 DQEBCwUAA4IBAQBQ6C1h9D95c47Gcv/E2duJQx7aDjBbPYcl3oEW+7dbMIl2tFOJ 2LWqnIu3/4XCvOZYKIKMLlFOwjGti+uJpoFPeUByg7d3JcrwnJbt5yd7cfChrMn2 5oxfIvjJlSvctSNb6rT0I/At9ny8RwVu7EmppxWbL/xBps6i5lXNe72rBhJlCToc bnbxwlAFpW8aFhwJrCVHIKQUuYv+ALyZxccqzMMcqd1aeytitllKVEGh6BZfJkmG TjayjdLQ+sE7dhFPusx17Orfb4MkVT/7NcU/nEYAP4M5HTPZnSe+lQTH99AxhDMA fQpMX3o4/+mrAZPRxDuPX7kbOulmCyJCohbg -----END CERTIFICATE-----Generated at Mon Sep 14 02:54:06 2026 by rpki-client