$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg= Subject key identifier: 40:F8:A1:67:2F:76:12:5F:B0:D9:D7:32:15:36:BA:81:C4:11:7D:28 Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 10370CA20F2A168F90BA6F786054B85CA98E497E Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa Signing time: Fri 27 Feb 2026 21:54:29 +0000 ROA not before: Fri 27 Feb 2026 21:49:29 +0000 ROA not after: Fri 26 Feb 2027 21:54:29 +0000 asID: 24381 IP address blocks: 2401:2060:b003::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 04:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:37:0c:a2:0f:2a:16:8f:90:ba:6f:78:60:54:b8:5c:a9:8e:49:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Feb 27 21:49:29 2026 GMT Not After : Feb 26 21:54:29 2027 GMT Subject: CN=40F8A1672F76125FB0D9D7321536BA81C4117D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:a0:74:28:c0:ef:68:c0:70:ff:dd:cf:9f: 25:82:e6:13:49:5c:3e:e2:69:d1:17:e5:76:83:49: cb:a9:d9:65:09:c8:72:e5:b6:ea:06:5f:b8:92:46: 74:a3:74:c0:0d:bd:c2:97:76:79:83:f2:c8:ff:a0: 7a:61:46:c9:4e:e7:02:78:94:82:34:5c:e3:c8:8b: c2:2f:cf:78:b2:9c:3e:b1:27:8b:08:2f:ca:20:fc: 31:83:3a:da:07:a7:91:1c:6f:ef:3c:1c:03:ea:46: 0d:2e:db:49:65:fa:be:cd:61:99:5f:c4:96:fe:24: 59:de:93:0a:ee:a5:68:96:e6:88:ec:c4:94:8a:e8: db:bd:10:cb:0f:4d:84:6f:c5:20:23:2f:73:98:61: ea:07:4b:10:48:21:2c:37:60:5f:3b:7f:74:2f:b8: 33:ae:0f:97:8f:ce:15:5c:33:3f:6a:20:8f:72:45: 23:56:c7:35:7d:87:0a:35:99:15:62:0d:26:2d:e8: d5:f1:a5:f1:93:18:08:de:af:0c:cc:18:f5:51:66: 7b:98:0d:0c:8e:5c:26:c1:37:34:8c:86:6a:bd:f6: 6c:12:0a:43:93:52:15:93:38:d6:da:98:92:a4:ac: a2:07:9f:1b:10:15:a5:90:17:80:d9:9a:0d:fd:77: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F8:A1:67:2F:76:12:5F:B0:D9:D7:32:15:36:BA:81:C4:11:7D:28 X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b003::/48 Signature Algorithm: sha256WithRSAEncryption 42:0c:d9:32:1c:90:74:1c:6c:37:08:cc:fb:cc:9d:92:94:4e: ce:80:be:94:ad:36:d6:9c:38:70:c5:97:7f:99:20:0a:8b:c5: 06:81:eb:cc:d2:37:9d:59:20:35:eb:f9:88:b7:86:b7:37:e1: 1b:bc:f3:2f:ff:2c:4a:a5:68:e4:53:b0:6c:04:53:9b:8e:5b: e5:94:29:a2:36:18:02:a4:a6:c0:18:3e:b0:b7:24:18:14:93: 38:3c:7d:f3:7a:71:73:e7:f4:8a:6f:95:a6:f8:50:75:6c:9d: b3:6a:ff:69:2b:e7:20:c0:2b:4a:a7:18:fb:53:38:dd:8f:5d: f1:a5:28:c6:0c:83:13:28:1e:22:5f:7e:27:35:ac:ca:a4:72: 03:c6:1b:cb:36:a8:53:72:c8:6c:0c:fc:53:e4:10:f7:a2:59: a3:6c:56:d3:63:c6:77:f1:91:26:3a:96:03:18:f4:68:9b:9a: 26:b9:fa:42:99:19:e9:0e:f9:20:c3:ba:4b:ba:65:1a:ad:51: 84:a9:76:c7:35:14:c4:8a:fc:c0:37:25:4b:ce:de:49:a1:76: cf:23:8b:a2:f1:a5:24:33:bb:21:97:4f:07:0b:b7:56:5f:ff: 31:a2:48:13:22:d3:1e:4f:9a:a7:b5:d5:94:c0:40:d5:72:bf: 88:95:b4:d1 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUEDcMog8qFo+Qum94YFS4XKmOSX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjAyMjcyMTQ5MjlaFw0yNzAyMjYyMTU0MjlaMDMxMTAvBgNV BAMTKDQwRjhBMTY3MkY3NjEyNUZCMEQ5RDczMjE1MzZCQTgxQzQxMTdEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YaB0KMDvaMBw/93PnyWC5hNJ XD7iadEX5XaDScup2WUJyHLltuoGX7iSRnSjdMANvcKXdnmD8sj/oHphRslO5wJ4 lII0XOPIi8Ivz3iynD6xJ4sIL8og/DGDOtoHp5Ecb+88HAPqRg0u20ll+r7NYZlf xJb+JFnekwrupWiW5ojsxJSK6Nu9EMsPTYRvxSAjL3OYYeoHSxBIISw3YF87f3Qv uDOuD5ePzhVcMz9qII9yRSNWxzV9hwo1mRViDSYt6NXxpfGTGAjerwzMGPVRZnuY DQyOXCbBNzSMhmq99mwSCkOTUhWTONbamJKkrKIHnxsQFaWQF4DZmg39dzk3AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUQPihZy92El+w2dcyFTa6gcQRfSgwHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzMzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLADMA0GCSqGSIb3 DQEBCwUAA4IBAQBCDNkyHJB0HGw3CMz7zJ2SlE7OgL6UrTbWnDhwxZd/mSAKi8UG gevM0jedWSA16/mIt4a3N+EbvPMv/yxKpWjkU7BsBFObjlvllCmiNhgCpKbAGD6w tyQYFJM4PH3zenFz5/SKb5Wm+FB1bJ2zav9pK+cgwCtKpxj7Uzjdj13xpSjGDIMT KB4iX34nNazKpHIDxhvLNqhTcshsDPxT5BD3olmjbFbTY8Z38ZEmOpYDGPRom5om ufpCmRnpDvkgw7pLumUarVGEqXbHNRTEivzANyVLzt5JoXbPI4ui8aUkM7shl08H C7dWX/8xokgTItMeT5qntdWUwEDVcr+IlbTR -----END CERTIFICATE-----Generated at Sun Mar 1 14:42:19 2026 by rpki-client