$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031373a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623031373a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: s6NPZEnvxoZpV2akZ+Vcf8nTjEXWQ98KPgnq2jxP/DI= Subject key identifier: 50:D8:A8:7E:EF:71:AE:74:B1:08:CE:17:46:57:02:38:F2:81:15:02 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 4474E4B2807E8D423283CE20F964FE78A3E0BFEF Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031373a3a2f34382d3438203d3e203234333831.roa Signing time: Sun 19 Jul 2026 22:06:42 +0000 ROA not before: Sun 19 Jul 2026 22:01:42 +0000 ROA not after: Sun 18 Jul 2027 22:06:42 +0000 asID: 24381 IP address blocks: 2401:2060:b017::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:74:e4:b2:80:7e:8d:42:32:83:ce:20:f9:64:fe:78:a3:e0:bf:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jul 19 22:01:42 2026 GMT Not After : Jul 18 22:06:42 2027 GMT Subject: CN=50D8A87EEF71AE74B108CE1746570238F2811502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:35:9f:d8:75:6e:50:0d:e2:dc:1f:f2:79: d5:de:e5:5d:c6:f2:46:a4:e5:b3:48:2a:05:23:bb: c4:a9:03:2d:ef:90:e2:a2:4a:1f:b7:07:78:a5:34: 37:fd:1e:6c:f7:c6:bd:0c:03:da:11:bd:b9:bc:cd: 84:04:2c:54:b7:7b:2a:71:63:5f:0e:ee:b0:b1:9e: 95:28:d7:39:cd:b5:49:cd:c3:44:cc:cd:9d:f2:4a: 02:26:0d:b6:40:6f:ac:24:31:54:49:42:1a:71:80: 77:9f:63:e9:8b:f2:e5:fd:ca:72:5d:d9:fa:56:f7: c9:54:dc:7c:58:4d:c8:b9:cc:37:0d:5f:e5:e0:0b: 78:a2:d0:39:41:d5:d5:3f:3d:08:a6:d2:b4:78:31: e3:7d:99:1e:0c:4f:03:29:77:c6:d7:42:a8:1b:ed: 49:47:37:af:47:43:c5:8a:4c:19:4c:68:e8:b4:f5: af:b5:12:35:92:4a:95:0d:c3:b0:9d:5b:92:7b:a7: cd:43:ed:07:26:4a:55:09:52:22:68:e2:56:b4:25: 89:e4:91:bd:d9:6f:19:34:7a:d2:a7:5f:c1:ed:c6: ec:e9:c6:32:2d:3f:ff:22:3f:d1:01:97:73:72:17: f4:f9:e9:13:e0:55:d6:d5:59:dd:ee:38:d2:b1:87: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D8:A8:7E:EF:71:AE:74:B1:08:CE:17:46:57:02:38:F2:81:15:02 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623031373a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b017::/48 Signature Algorithm: sha256WithRSAEncryption a9:eb:c3:81:cb:32:2d:d1:7b:cb:38:04:8c:0d:e9:24:24:32: 08:ce:18:be:72:e6:9a:4e:3d:c8:11:aa:f0:7d:77:4b:ae:a3: cf:a8:a7:8c:fa:62:3b:13:86:0e:c3:ab:dc:f4:3b:5c:ee:08: 13:74:b1:18:53:1f:1c:96:b8:ae:29:fe:cb:0f:2a:be:e4:10: d9:c1:0c:9d:50:e7:e6:d7:ad:6a:42:d6:75:ab:a1:f5:9a:ae: f7:11:8d:7b:7c:e0:ed:93:d9:ab:47:ac:f4:0b:58:fb:ca:9f: b2:53:19:6b:1e:7f:48:77:24:3c:6e:8e:b4:db:85:df:0f:dc: 32:1c:92:52:50:24:55:70:be:eb:38:1b:4f:e9:4e:e1:f5:a5: ad:72:45:62:89:4a:f1:12:bc:40:a7:53:d6:07:fb:a2:5f:22: 67:7e:da:dc:07:e6:3f:cc:e8:ab:67:74:eb:d1:49:1d:96:3b: 2a:21:56:2e:d9:6a:09:56:ef:a4:1c:b4:06:90:5d:b4:03:04: 03:89:c4:13:9d:bf:9c:c4:32:c4:e1:c7:84:fa:da:b9:70:61: 9d:17:c8:d9:09:2b:6c:47:b0:2c:f2:ed:92:00:51:30:48:f3: f5:8d:03:b0:7a:d4:a0:24:07:4a:01:83:a2:7d:f9:a0:0d:b4: f2:ea:ed:f1 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIURHTksoB+jUIyg84g+WT+eKPgv+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjA3MTkyMjAxNDJaFw0yNzA3MTgyMjA2NDJaMDMxMTAvBgNV BAMTKDUwRDhBODdFRUY3MUFFNzRCMTA4Q0UxNzQ2NTcwMjM4RjI4MTE1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+zWf2HVuUA3i3B/yedXe5V3G 8kak5bNIKgUju8SpAy3vkOKiSh+3B3ilNDf9Hmz3xr0MA9oRvbm8zYQELFS3eypx Y18O7rCxnpUo1znNtUnNw0TMzZ3ySgImDbZAb6wkMVRJQhpxgHefY+mL8uX9ynJd 2fpW98lU3HxYTci5zDcNX+XgC3ii0DlB1dU/PQim0rR4MeN9mR4MTwMpd8bXQqgb 7UlHN69HQ8WKTBlMaOi09a+1EjWSSpUNw7CdW5J7p81D7QcmSlUJUiJo4la0JYnk kb3Zbxk0etKnX8HtxuzpxjItP/8iP9EBl3NyF/T56RPgVdbVWd3uONKxh2tLAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUUNiofu9xrnSxCM4XRlcCOPKBFQIwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMxMzczYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLAXMA0GCSqGSIb3 DQEBCwUAA4IBAQCp68OByzIt0XvLOASMDekkJDIIzhi+cuaaTj3IEarwfXdLrqPP qKeM+mI7E4YOw6vc9Dtc7ggTdLEYUx8clriuKf7LDyq+5BDZwQydUOfm161qQtZ1 q6H1mq73EY17fODtk9mrR6z0C1j7yp+yUxlrHn9IdyQ8bo6024XfD9wyHJJSUCRV cL7rOBtP6U7h9aWtckViiUrxErxAp1PWB/uiXyJnftrcB+Y/zOirZ3Tr0Ukdljsq IVYu2WoJVu+kHLQGkF20AwQDicQTnb+cxDLE4ceE+tq5cGGdF8jZCStsR7As8u2S AFEwSPP1jQOwetSgJAdKAYOiffmgDbTy6u3x -----END CERTIFICATE-----Generated at Fri Jul 24 13:15:52 2026 by rpki-client