This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
File: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (raw, json)
Hash identifier: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=
Subject key identifier: F6:58:52:67:6A:19:CC:EC:36:2B:C1:7F:92:A0:FF:CC:9D:C2:42:B6
Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial: 36D1CC99DBEE9BD346E8B493CC00F536714A4BDE
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
Signing time: Sun 21 Dec 2025 20:59:05 +0000
ROA not before: Sun 21 Dec 2025 20:54:05 +0000
ROA not after: Sun 20 Dec 2026 20:59:05 +0000
asID: 24381
IP address blocks: 2401:2060:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d1:cc:99:db:ee:9b:d3:46:e8:b4:93:cc:00:f5:36:71:4a:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Validity
Not Before: Dec 21 20:54:05 2025 GMT
Not After : Dec 20 20:59:05 2026 GMT
Subject: CN=F65852676A19CCEC362BC17F92A0FFCC9DC242B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:53:e0:6f:bb:c6:d9:56:40:3d:23:38:7e:
a5:2c:b0:cb:9b:46:f3:b9:62:a2:ed:dc:ef:1d:79:
98:f7:91:3e:a9:7d:70:4f:87:40:4f:c0:09:61:61:
86:62:b9:b6:8f:4e:b7:13:12:2a:f2:f9:9e:76:15:
e7:30:b3:ef:cb:d8:f2:0f:14:d6:b7:5a:53:59:e1:
a9:a6:13:84:18:d4:b4:73:86:cf:32:34:70:eb:49:
6d:8a:b5:05:1c:c5:4a:47:e4:94:1d:7a:ab:71:4b:
b9:21:16:f1:d3:26:38:69:c8:ae:d6:cf:a0:e0:72:
bd:69:d6:02:e3:5b:fc:73:de:5a:84:01:6c:da:88:
4e:0e:bd:00:5c:ec:9c:d0:59:e0:c8:66:4c:43:20:
1a:c5:43:46:7a:a5:86:d5:85:c2:7f:f0:3e:18:ac:
ba:3c:f2:ee:ea:7c:5d:d8:ab:73:8a:aa:45:95:d4:
fc:1c:3d:f7:d7:51:db:e4:2d:6e:f6:90:23:0d:c8:
78:69:3b:4c:6d:6b:02:3e:76:31:65:a5:81:36:dd:
99:fc:8e:80:e3:b5:09:6e:5f:16:2a:15:fe:0e:08:
d4:80:28:b0:ee:b8:14:a0:72:86:9d:30:f6:2e:b3:
68:41:df:58:ed:ec:9e:2d:4d:a3:4a:ef:68:e6:95:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:58:52:67:6A:19:CC:EC:36:2B:C1:7F:92:A0:FF:CC:9D:C2:42:B6
X509v3 Authority Key Identifier:
keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:b000::/48
Signature Algorithm: sha256WithRSAEncryption
95:8d:e3:c7:8a:74:13:e1:e8:f7:5d:4a:14:c9:7f:3d:f7:3a:
24:cf:fc:68:42:70:48:2b:74:1f:6e:dd:5f:1a:12:69:50:1b:
fb:35:58:4b:b2:d0:52:b6:14:bf:32:24:b2:ce:c4:b2:43:40:
4a:16:29:a6:ef:15:8d:c3:60:7b:7e:f8:95:1f:51:f6:a3:8a:
20:aa:bc:e6:7c:f4:5e:45:49:9f:cf:5f:e0:15:fd:d2:76:a9:
07:b8:70:28:95:fc:81:78:af:25:1a:2c:f7:c7:75:91:3e:c0:
aa:49:7f:17:7a:61:ca:7e:e9:6d:51:59:7e:59:5f:b7:e5:17:
ea:22:ee:9f:b9:c6:f9:96:af:59:73:f0:51:b3:b6:48:e7:b2:
94:fb:53:a1:1f:f3:fd:96:89:62:60:9b:af:d2:65:32:44:4b:
8c:2b:24:6e:be:c0:1e:25:35:fa:9a:22:97:f5:62:f8:0b:17:
82:0b:01:4f:81:56:35:23:96:10:86:8b:6d:7d:07:a2:b3:49:
e0:f6:fb:81:d2:35:b4:a1:c0:dd:36:20:b5:d4:4f:78:6d:e8:
b7:0c:b9:6b:87:68:07:a3:52:d8:7d:d1:37:31:3e:4b:f9:62:
61:2c:a2:ef:c9:b4:42:50:2e:73:47:fe:bc:f3:e2:b3:cb:0f:
69:94:37:a0
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUNtHMmdvum9NG6LSTzAD1NnFKS94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE
QTk4NzIxQzAeFw0yNTEyMjEyMDU0MDVaFw0yNjEyMjAyMDU5MDVaMDMxMTAvBgNV
BAMTKEY2NTg1MjY3NkExOUNDRUMzNjJCQzE3RjkyQTBGRkNDOURDMjQyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dVPgb7vG2VZAPSM4fqUssMub
RvO5YqLt3O8deZj3kT6pfXBPh0BPwAlhYYZiubaPTrcTEiry+Z52Fecws+/L2PIP
FNa3WlNZ4ammE4QY1LRzhs8yNHDrSW2KtQUcxUpH5JQdeqtxS7khFvHTJjhpyK7W
z6Dgcr1p1gLjW/xz3lqEAWzaiE4OvQBc7JzQWeDIZkxDIBrFQ0Z6pYbVhcJ/8D4Y
rLo88u7qfF3Yq3OKqkWV1PwcPffXUdvkLW72kCMNyHhpO0xtawI+djFlpYE23Zn8
joDjtQluXxYqFf4OCNSAKLDuuBSgcoadMPYus2hB31jt7J4tTaNK72jmlWbvAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQU9lhSZ2oZzOw2K8F/kqD/zJ3CQrYwHwYDVR0j
BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud
HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu
Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4
MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF
BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw
RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy
MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo
YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzAzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAAMA0GCSqGSIb3
DQEBCwUAA4IBAQCVjePHinQT4ej3XUoUyX899zokz/xoQnBIK3Qfbt1fGhJpUBv7
NVhLstBSthS/MiSyzsSyQ0BKFimm7xWNw2B7fviVH1H2o4ogqrzmfPReRUmfz1/g
Ff3SdqkHuHAolfyBeK8lGiz3x3WRPsCqSX8XemHKfultUVl+WV+35RfqIu6fucb5
lq9Zc/BRs7ZI57KU+1OhH/P9loliYJuv0mUyREuMKyRuvsAeJTX6miKX9WL4CxeC
CwFPgVY1I5YQhottfQeis0ng9vuB0jW0ocDdNiC11E94bei3DLlrh2gHo1LYfdE3
MT5L+WJhLKLvybRCUC5zR/688+Kzyw9plDeg
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:42:18 2026 by rpki-client